Chương I Thông tư số 03/2017/TT-BTTTT: Quy định chung

Chapter I

GENERAL PROVISIONS

Article 1. Scope

1. This Circular regulates the security of information system by classification, including: guide the classification of information system by class; request the security of information system by classification; inspect and evaluate the security of information; keep and verify the proposal for the classification; report and share information.

2. Information system serving defense and security activities that are managed by the Ministry of National Defense and the Ministry of Public Security shall not be regulated by this Circular.

Article 2. Regulated entities

The entities regulated by this Circular are specified in Article 2 of the Government’s Decree No. 85/2016/ND-CP dated July 01, 2016 on the security of information system by classification (hereinafter referred to as Decree No. 85/2016/ND-CP).

Article 3. Definitions

In this Circular, these terms are construed as follows:

1. “Multi-factor authentication” is a method of authentication using at least two components in connection with the user, including: something that the user knows (password, access code, etc.), something the user possesses (ID, smart card, etc.) or some physical characteristic of the user (fingerprint, eye iris, etc.).

2. "Hot backup" refers to the ability to replace the system when there is an error without interrupting the operation of the system.

3. “Complexity requirements of the password” means password must be at least 8 characters in length which must contain upper case letters, lower case letters, special characters and numeric characters.

4. “Main or important network device” refers to devices that once stopped a part or all of them without planning will cause disruption in the information system.