Maintaining cybersecurity from the "root".

Cyberattacks are no longer a distant prediction. They are already present in daily digital life, from business systems to personal data. But what's noteworthy is that while technology is becoming increasingly advanced, the weakness often lies with humans – the most vulnerable link.

The new approach therefore begins with a fundamental change: cybersecurity doesn't start with technology, but with people. Not with thicker firewalls, but with a workforce capable of understanding, operating with, and responding to risks in the digital environment.

The draft Decree guiding the amended Law on Cybersecurity, expected to take effect from July 1, 2026, clearly shows this direction. For the first time, the structure of the cybersecurity force is designed according to a three-tiered model: specialized, permanent, and reserve. This is not just about personnel organization; it's about forming a cybersecurity "battlefield," where each tier has a role and the ability to coordinate.

In this structure, specialized forces play a core role; permanent forces are spread across ministries, departments, localities, and businesses; and reserve forces are a supplementary source when needed. This structure shows that cybersecurity is no longer the responsibility of a few technical units, but a systemic responsibility.

However, the problem isn't just about design. In reality, nearly half of organizations and businesses still lack cybersecurity personnel, while the pace of digitalization is accelerating, leading to an expanding attack surface. The gap between demand and capacity is therefore becoming increasingly apparent.

Along with organizational structure, policy issues are raised as a cornerstone. The draft proposes mechanisms to attract, train, and reward high-quality personnel, including exceptional special support. This is not simply about incentives, but about re-evaluating the value of the digital space protection force.

If we consider data as a resource, then people are the "shield" protecting that resource. A system may receive significant investment, but without competent people to operate it, all layers of security can be breached.

From a broader perspective, this represents a shift from "technical defense" to a "human resource strategy." Technology only truly shines when placed in the hands of an organized, skilled, and clearly motivated workforce.

Cybersecurity, therefore, is not just a matter of devices and machines. It's a matter of people – those who are properly trained, in the right positions, and supported by a sufficiently strong policy system. When this "foundation" is solid, the layers of defense above can withstand the ever-growing waves of the digital space.

Le Minh

Source: https://daidoanket.vn/giu-an-ninh-mang-tu-goc.html