Two big challenges
After nearly two years of getting acquainted with Decree 13/2023 on personal data protection, the Vietnamese business community will soon need to comply with stricter requirements from the Law on Personal Data Protection, expected to take effect from January 1, 2026.
At a recent sharing session on “Cybersecurity in Vietnam” organized by C asean Vietnam, Mr. Tran Minh Quan - Senior Manager, Information Security Services, PwC Vietnam said that businesses are facing two major challenges in implementing the Law on Personal Data Protection.
First, there is a shortage of high-quality human resources. This is a much higher requirement than the previous human resource problem in the field of information security, especially difficult for small and medium-sized enterprises. Finding personnel with both legal and technological knowledge to effectively implement new regulations is a difficult problem.
Second, the complexity of internal systems. Integrating new legal requirements – such as user consent mechanisms – into existing IT systems, especially legacy systems, is a costly and challenging process.
"In many cases, if the old system is no longer scalable, businesses are forced to switch to a new platform or find temporary solutions to ensure compliance. Meanwhile, compliance with regulations is only part of the problem, more importantly is actually protecting personal data," Mr. Quan added.
Citing the Global Security Index report, Mr. Quan said that cybersecurity reputation is not only a business issue, but also a story of an entire country. Thanks to strong investment from the Government , Vietnam's ranking has improved significantly, approaching the global top 20. This shows that information security has become an important competitive advantage.
However, according to a survey by PwC, although more than 75% of global technology leaders consider cybersecurity risks a top priority, in Vietnam, this rate has not yet reached that level.
"Part of the reason comes from the difficult economic context, many businesses still prioritize revenue targets over investing in information security," Mr. Quan acknowledged.
According to Mr. Tran Trung Hieu - Head of Cloud Computing Security Group, FPT Software (FPT Corporation), many businesses today still have an old mindset when switching to Cloud systems, making incident response ineffective. The way businesses deploy security on Cloud today is still stuck in the mindset of 2005. Therefore, businesses need to invest systematically in infrastructure systems, applications and security monitoring models, instead of just focusing on surface technology.
What is the solution for business?
To overcome the above challenges, experts say that businesses need to shift from thinking "if something goes wrong" to "when something goes wrong".
"No organization can guarantee 100% safety. Instead of expecting immunity, invest in resilience," Mr. Quan suggested.
At the same time, businesses need to build a team to monitor, warn and respond promptly when there are cyber security incidents. The model of outsourcing monitoring services through the Cyber Security Operations Center (SOC) is a suitable trend.
Sharing his experience, Mr. Le Tran Hai Minh - Deputy Head of Information Security Policy Department, Joint Stock Commercial Bank for Foreign Trade of Vietnam (Vietcombank) said that the bank is implementing security on all three pillars. In which, the process pillar is compliance with laws and international standards; the technology pillar is continuous updating of security solutions and the human pillar - the weakest link needs to be trained periodically.
With the above challenges and solutions, it is clear that information security is no longer just an issue for the IT department, but has become a shared responsibility of the entire enterprise. Only with proper investment and a change in mindset can Vietnamese enterprises confidently enter the new game, turn challenges into opportunities and improve their competitiveness in the international arena.
Source: https://doanhnghiepvn.vn/cong-nghe/hai-rao-can-doanh-nghiep-can-khac-phuc-khi-tuan-thu-luat-bao-ve-du-lieu-ca-nhan/20250628014234084
Comment (0)