'3 shortcomings' of Vietnamese enterprises when threatened by cyber security

Head of NCA Technology Vu Ngoc Son shares about the current state of cybersecurity preparedness of Vietnamese enterprises. Photo: NCA .

During a discussion held on the morning of May 21, experts from the National Cyber Security Association (NCA) stated that improving cybersecurity response capacity must start with awareness, combined with factors such as capacity, cybersecurity personnel, and processes.

According to data from the NCA at the end of 2024, up to 52.89% of Vietnamese enterprises do not have adequate technology solutions, and 56.16% lack specialized cybersecurity personnel. Cisco also pointed out that only 11% of Vietnamese enterprises have reached a level of maturity in being ready to respond to cyber attacks. In 2024, 659,000 cyber attacks were recorded, affecting about 46.15% of agencies and enterprises.

"One of the major challenges is that Vietnam's cybersecurity workforce is lacking in quantity and weak in quality," said Major Tran Trung Hieu, Deputy Director of the Cyber Security Center, Department A05, Ministry of Public Security . A05 representatives also said that many businesses lack personnel to operate technical systems, or do not operate them full-time.

"There are large banks that have invested in a network security monitoring system (SOC), but in reality they only monitor it 8 hours a day, and not at night. This unintentionally creates a gap for hackers," said Mr. Hieu.

Regarding the policy and legal regulations on cyber security, Major Tran Trung Hieu said that A05 is consulting on editing and promulgating standards and regulations on cyber security.

Mr. Do Van Thinh, Director of CMC Cyber Security Monitoring Center (CMC Corporation), shared his experience from the cyber attack on CMC in April. Mr. Thinh said that the lesson learned is to clarify the existence and the reasons why there are vulnerabilities for hackers to exploit. It is necessary to check whether the process is strict or not.

Experts recommend that business leaders proactively participate in solving the problem of incident response capacity. Establishing technological solutions, building response procedures, raising awareness and conducting drills should become part of the risk management plan.

Head of the Technology Department of the National Cyber Security Association Vu Ngoc Son said that it is necessary to improve from the very beginning, starting with people, the weakest component of each system.

"Training in cybersecurity awareness and skills for each individual in the organization needs to be done regularly," said Mr. Son.

On the technology side, businesses can deploy centralized cybersecurity management solutions, integrate AI, and connect to cybersecurity intelligence sources. In addition, building a clear incident response process, assigning specific responsibilities, and preparing communication information for authorities is also very important.

Source: https://znews.vn/3-shortcomings-of-vietnamese-enterprises-when-they-are-dangerous-about-mang-an-ninh-post1554778.html