The theme for 2024 in the field of information security chosen by the Ministry of Information and Communications is "The year of preventing online fraud".
To ensure synchronization and unity from the central to local levels in the awareness and practical and effective implementation of network information security in the operations of agencies and organizations, contributing to strengthening the security of national cyberspace, the Ministry of Information and Communications recommends that ministries and local branches synchronously deploy 6 groups of solutions, namely: Ensuring information system security at all levels; maintaining and improving the effectiveness of information security work according to the "4-layer" model; checking compliance with legal regulations on network information security; effectively using digital platforms; preventing and combating online fraud; conducting network information security drills.
| Goals in 2024 - 100% of information systems under management have their Proposal for Level approved by September 2024 at the latest. - 100% of information systems under management fully implement information system security assurance plans according to approved levels, no later than December 2024. - 100% of information systems of agencies and organizations are organized to ensure substantial and comprehensive information security according to the instructions of the Ministry of Information and Communications; improve the capacity of professional monitoring and protection layers and connect and share information with the national monitoring system. - 100% of ministries, branches and localities organize inspections and assessments of compliance with legal regulations on information security. - 100% of ministries, branches and localities effectively deploy the provided platforms to perform state management and law enforcement within the scope of management, helping with digital transformation and monitoring and measuring activities to ensure network information security. - 100% of local people are regularly and continuously informed through network organizations, mass media, grassroots information systems, social networks, etc. - 100% of ministries, branches and localities organize combat drills in 2024. |
Accordingly, the head of the agency or organization directly directs and prioritizes resources to organize the implementation and deployment of information system security assurance work at each level under the direction of the Prime Minister in Directive No. 09/CT-TTg and Official Dispatch No. 33/CD-TTg. Regularly and effectively use the Platform to support management of information system security assurance at each level provided free of charge by the Ministry of Information and Communications.
Ensuring information security according to the "4-layer" model, which are: On-site forces; 4-layer organizations or enterprises for professional monitoring and protection; independent organizations or enterprises for periodic inspection and assessment; connecting and sharing information with the national monitoring system. Maintaining stable connections, fully sharing real-time monitoring data to the national monitoring system to receive support for monitoring, analyzing, and early warning of risks to network information security and cyber attacks. Changing the mindset from developing individual information systems and software to investing in digital platforms or leasing services provided by infrastructure providers that have fully deployed solutions to ensure information system security according to the "4-layer" level and model.
Prioritize and focus on checking compliance with legal regulations on ensuring information system security at all levels and protecting personal information and data. Prioritize checking and evaluating units, organizations and enterprises that are assigned to manage and operate multiple information systems or important, shared information systems.
Research and effectively apply the provided platforms to carry out state management and law enforcement within the scope of management, including: Platform to support management of information system security assurance at all levels; Platform to support coordination and incident response; Platform to support digital investigation; Platform to manage and detect, early warning of information security risks; Platform to support real-life exercises; Platform to assess the maturity level of incident response teams.
The Ministry of Information and Communications has established the Cyber Fraud Prevention Alliance to guide, connect, provide information, documents and deploy technical solutions to prevent and combat online fraud through four main approaches: Through telecommunications networks; through social networks; through propaganda and education; through technology.
Ministries, branches and localities carry out activities according to the instructions of the Ministry of Information and Communications and the Union. Agencies and organizations contact the Department of Information Security or access the National Cyber Portal (khonggianmang.vn), the website of the Department of Information Security (ais.gov.vn) to promptly receive warnings and provide free propaganda content (videos, documents, posters, articles, etc.). Make the most of all propaganda channels such as: events, social networks, websites, email systems, SMS messages, smart applications, etc. Regularly and continuously propagate to all cadres, civil servants, public employees, employees of the agency and people in the area through grassroots information systems (radio stations, television stations), community digital technology groups to propagate awareness and skills for people, especially people in rural and remote areas to avoid being scammed in cyberspace. Actively participate in the propaganda campaign to raise awareness of information security launched by the Ministry of Information and Communications.
Each ministry, sector and locality shall organize at least one cyber security drill in 2024. This must include drills for information systems of level 3 or higher. This will also be one of the criteria used by the Information Security Department to assess the level of the agency's incident response team leader.
Source
Comment (0)