Vietnam: Requirements on information security for web portals of state agencies from April 5, 2024

Requirements on information security for websites of state agencies from April 5, 2024 in Vietnam

Websites of state agencies are defined under Clause 21, Article 3 of Decree 72/2013/ND-CP on the management, provision, and use of Internet services and online information, and must have domain names as specified in Clause 4, Article 6 of Decree 42/2022/ND-CP prescribing provision of online information and online public services by state agencies.

Each website of a state agency in Vietnam is a component of a state agency's web portal.

Regarding information security, the web portals and websites of state agencies must meet the following requirements:

- Web portals and websites must comply with the legal regulations on ensuring information security at various levels and other relevant laws.

- The determination of the information security level for web portals adheres to the provisions of Clause 10, Article 4 of Circular 22/2023/TT-BTTTT, specifically:

+ Be deployed on an infrastructure that can scale according to usage needs;

+ Meet information security requirements for information systems at Level 3 or higher.

More details can be found in Circular 22/2023/TT-BTTTT effective from April 5, 2024.

At the same time, Articles 16, 17, 18, 19, 20, 21, and 22 of Circular 32/2017/TT-BTTTT on the provision of online public services and assurance of easy access to websites or web portals of state agencies, and Circular 24/2011/TT-BTTTT on the generation, use, and storage of specified data on web portals or websites of state agencies in Vietnam are repealed.

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE