Chương IV Thông tư 31/2017/TT-BTTTT: Trách nhiệm của các cơ quan, tổ chức

Chapter IV

RESPONSIBILITIES OF AUTHORITIES AND ORGANIZATIONS

Article 12. Authority of Information Security

The Authority of Information Security shall:

1. Manage and operate the system for dealing with intrusions into the Vietnam Internet to carry out the central surveillance.

2. Consolidate surveillance results, information and data on cyber information security to serve the state administration in terms of information security.

3. Accelerate compliance with basic requirements for ensuring security of information and surveillance systems in accordance with regulations of law on ensuring security of information systems by classification.

4. Take charge and cooperate with Vietnam Computer Emergency Response Team (VNCERT) in researching into establishing technical criteria and issuing detailed instructions on connection between the basic monitoring system and the system for dealing with intrusions into Vietnam Internet and requesting the Minister of Information and Communications to promulgate them.

5. Cooperate in or take charge of surveillance of important information systems in need of ensuring cyber information security at the request of managers of information systems.

Article 13. VNCERT

VNCERT shall:

1. Manage and operate the system for cyber security intrusion surveillance to exercise the central surveillance.

2. Consolidate surveillance results, information and data on cyber information security for regulation and response to intrusions.

3. Take charge and cooperate with the Authority of Information Security in issuing instructions on surveillance procedures; organized activities for increasing the surveillance capacity; accelerate, monitor and inspect surveillance of and warnings about cyber information security according to assignment by the Ministry of Information and Communications.

4. Take charge and cooperate with the Authority of Information Security in researching into establishing technical criteria and issuing detailed instructions on connection between the basic monitoring system and the system for surveillance cyber security intrusions and requesting the Minister of Information and Communications to promulgate them.

5. Take charge of surveillance and warning of cyber information security applicable to information systems and technology and information services serving the electronic government. Cooperate in or take charge of surveillance important information systems in need of ensuring cyber information security at the request of their managers.

6. Consolidate and report on results of surveillance and warnings of national cyber information security and total up cyber information security intrusions, risks and incidents

Article 14. Managers of information systems

Managers of information systems shall:

1. Provide directions on surveillance of information systems under their management; cooperate with competent authorities affiliated to the Ministry of Information and Communications in carrying out surveillance in accordance with regulations of law.

2. Follow instructions of and cooperate with competent authorities affiliated to the Ministry of Information and Communications in surveillance activities.

3. Provide information on surveillance activities at the request of the Ministry of Information and Communications.

4. Submit reports on surveillance results every 6 months using the specimen prescribed in Appendix 2 or at the request of the Ministry of Information and Communications.

5. Prepare backup ports and interface at internet connection points according to the prescribed technical criteria to set up surveillance points of the Ministry of Information and Communication Point if necessary.

6. Managers of information systems monitored by the Ministry of Information and Communications shall:

a) Determine and make lists of systems and entities under surveillance and provide relevant technical information thereon and send them to the Ministry of Information and Communications;

b) Implement their surveillance systems in accordance with regulations of this Circular and relevant regulations of law; cooperate in providing information on infrastructure and information systems under surveillance and provide technical assistance at the requests of competent authorities affiliated to the Ministry of Information and Communications;

c) Assign staffs to receive warnings about and deal with cyber information security intrusions, risks and incident at the warnings or requests of competent authorities affiliated to the Ministry of Information and Communications;

d) Regularly get results of handling of cyber information security intrusions, risks and incidents for retention and report;

7. Make annual cost estimates, approve and distribute funding granted by the state budget and other legal source of funding for carrying out surveillance in accordance with regulations of law and instructions by competent authorities.