Chương II Nghị định 85/2016/NĐ-CP: Tiêu chí xác định cấp độ

Chapter II

CRITERIA OF CLASSIFICATION

Article 6. Classification of information and information systems

1. The confidentiality level of the information processed by an information system is classified as follows:

a) Public information is the online data that an organization or individual owns and discloses to every entity without identifying and locating such entities;

b) Private information is the online data that an organization or individual owns and does not disclose or only provides to one or some entities identified and located;

c) Personal information is the online data related to the identification of a particular person;

d) Classified state information are the data classified as confidential, secret and top secret in conformity to the laws on protection of classified state information.

2. An information system shall be classified by professional function as follows:

a) An information system that services internal activities solely contributes to the internal management and operation of an agency or organization;

b) An information system that is of use to the people and enterprises provide directly or support the provision of online services, e.g. online public services and other online services regarding telecommunications, information technology, commerce, finance, banking, health, education and other specialties;

c) A system of information infrastructure is comprised of equipment and transmission lines that serve organizations and agencies en masse, e.g. wide area networks, database, data centers, cloud computing, electronic authentication, digital verification, digital signature, interconnection of information systems;

d) An industrial maneuver information system has the functional role in supervising and collecting data, managing and controlling vital sections for maneuvering and operating the ordinary activities of buildings;

dd) Other information systems.

Article 7. Criteria of first class

A 1^st-class information system serves internal operations of an organization or agency and only processes public information.

Article 8. Criteria of second class

A 2^nd-class information system shall meet one of these criteria:

1. An information system that serves internal operations of an organization or agency, processes private information and personal information of users but does not handle classified state information.

2. An information system that serves the people and enterprises in one of these manners:

a) Provide information and online public services at level 2 or lower as per the law;

b) Provide online services that are not stated in the list of conditional business services;

c) Provide other online services of processing private and personal information of less than 10,000 users.

3. A system of information infrastructure that is of use to an organization or agency.

Article 9. Criteria of third class

A 3^rd-class information system shall meet one of these criteria:

1. An information system that processes classified state information or services the national defense and security and whose sabotage compromises the defense and security of the country.

2. An information system that serves the people and enterprises in one of these manners:

a) Provide information and online public services at level 3 or higher as per the law;

b) Provide online public services that are defined in the list of conditional business services;

c) Provide other online services of processing private and personal information of 10,000 or more users.

3. A system of shared information infrastructure that is of use to agencies and organizations in an industry, a province or some provinces.

4. An industrial maneuver information system that directly services the maneuver and operation of ordinary activities of buildings of grade II, III or IV as per the regulated gradation of construction.

Article 10. Criteria of fourth class

A 4^th-class information system shall meet one of these criteria:

1. An information system that processes classified state information or services the national defense and security and whose sabotage gravely compromises the defense and security of the country.

2. A national information system that services the development of the electronic government, functions on round-the-clock basis and does not halt without prior schedule.

3. A system of shared information infrastructure that services agencies and organizations on nation-wide scale and round-the-clock basis and does not halt without prior schedule.

4. An industrial maneuver information system that directly services the maneuver and operation of ordinary activities of buildings of grade I as per the regulated gradation of construction.

Article 11. Criteria of fifth class

A 5^th-class information system shall meet one of these criteria:

1. An information system that processes classified state information or services the national defense and security and whose sabotage causes excessively grave detriment to the defense and security of the country.

2. An information system that services the centralized storage of particularly vital information and data of the country.

3. A system of national information infrastructure that connects Vietnam with the world.

4. An industrial maneuver information system that directly services the maneuver and operation of ordinary activities of special-graded buildings as per the regulated gradation of construction or vital buildings concerning national security according to legal regulations on national security.

5. Other information systems at the discretion of the Prime Minister.