Chapter I
GENERAL PROVISIONS
Article 1. Scope and regulated entities
1. This Circular prescribes coordination and response to nation-wide cyber information security incidents (not including coordination and response to serious cyber information security incidents specified under Decision No. 05/2017/QD-TTg dated March 16, 2017 of the Prime Minister on emergency response system for national cyber information security (hereinafter referred to as ”Decision No. 05/2017/QD-TTg”);
Incidents occurring within information systems under the management of the Ministry of National Defense and Ministry of Public Security are not prescribed by this Circular.
2. Regulated entities are agencies, organizations, individuals related to coordination and response to cyber information security incidents.
Article 2. Definitions
1. Cyber information security incident means an attack on information, information system or damage, violation to integrity, security, or usability (hereinafter referred to as “incident”).
2. Response to cyber information security incident means efforts to deal with and rectify cyberinformation security incidents, including: monitoring, collecting, analyzing, detecting, warning, investigating, verifying incidents, preventing incidents, restoring data, and restoring normal operation of information system.
3. Incident response liaison means a unit or an individual authorized by members of national cyber information security incident response network to represent the members in communicating and exchanging information with National incident response and coordination agency or other members in incident coordination and response.
Article 3. Decentralizing response to nation-wide cyber information security incidents
Entities responding to nation-wide cyber information security incidents are agencies, organizations, and entities responding to national cyber information security incidents specified under Decision No. 05/2017/QD-TTg. Agencies and organizations engaging in coordination and response to nation-wide incidents include:
1. The Ministry of Information and Communications - Standing authority for emergency response and assurance of national cyber information security (hereinafter referred to as “National standing authority”) and Coordinating Committee for emergency response for national cyber information security (hereinafter referred to as “National coordinating committee”); Vietnam Cybersecurity Emergency Response Center VNCERT - National coordinating authority for incident response (hereinafter referred to as "National coordinating authority”).
2. Steering Committee for emergency response to cyber information security incidents of ministries, ministerial agencies, Governmental agencies, and People's Committees of provinces and central-affiliated cities (hereinafter referred to as “Ministerial/Provincial steering committees”);
3. Entities specializing in responding to cyber information security incidents (hereinafter referred to as “incident response specialists”); incident response teams or units in ministries, ministerial agencies, Governmental agencies, and People’s Committees of provinces and central-affiliated cities (hereinafter referred to as “incident response teams/units”).
4. Network for response to national cyber information security incidents (hereinafter referred to as “incident response network”); and Network Operating Committee.
5. Presiding entities of information system; operating entities of information system; agencies, organizations, and specializing entities designated or summoned by National standing authority, National coordinating authority, or Ministerial/Provincial steering committees to participate in incident response.
Article 4. Rules for incident coordination and response
1. Regulations and law on coordination and response to cyber information security incidents shall be complied with.
2. Active, prompt, quick, accurate, synchronous, and effective shall be required.
3. Strict, accurate, synchronous, and effective cooperation with agencies, organizations, and enterprises in Vietnam and in other countries shall be required.
4. Incident response shall be implemented and dealt with by readily available forces and as primary responsibilities of presiding entities of information system.
5. Conditions and order of priority in maintaining operation of information system approved by competent authority under incident response plan shall be adhered to.
6. Information exchanged within the network shall be examined and verified prior to further steps.
7. Information confidentiality shall be guaranteed when engaging and implementing incident response efforts of National coordinating authority or agencies, organizations, individuals that encounter the incidents.
Tìm kiếm
Thông tư 20/2017/TT-BTTTT quy định về điều phối, ứng cứu sự cố an toàn thông tin mạng trên toàn quốc do Bộ trưởng Bộ Thông tin và Truyền thông ban hành (Bản Word)
Thông tư 20/2017/TT-BTTTT quy định về điều phối, ứng cứu sự cố an toàn thông tin mạng trên toàn quốc do Bộ trưởng Bộ Thông tin và Truyền thông ban hành (Bản Pdf)