New standards to solve national cybersecurity problems

Lieutenant Colonel Le Xuan Thuy, Director of the National Cyber Security Center, shares about national cybersecurity standards. Photo: NCA .

The first national standard on cybersecurity for critical information systems, TCVN 14423:2025, is the first national standard on cybersecurity for critical information systems. According to Lieutenant Colonel Le Xuan Thuy, Director of the National Cyber Security Center, the new standard was created to address the confusion of organizations facing too many technical solutions on the market.

"There are too many techniques being proposed, too many solutions being introduced by technology companies. Information system owners do not know where to start or how much is enough," Mr. Thuy shared in a discussion organized by the National Cyber Security Association.

This standard covers comprehensive governance requirements such as IT asset management, user account control, web application security, and vulnerability management.

Figures from the National Cyber Security Association show that only 34.64% of domestic organizations apply Vietnamese standards on cybersecurity. Meanwhile, 53.8% of organizations use the international standard ISO/IEC 27001:2022.

"We talk about digital sovereignty , but if we don't implement our own standards, that's a paradox," said Mr. Vu Ngoc Son, Head of Research Department of the National Cyber Security Association.

Cyber attacks in Vietnam not only target businesses but also target essential systems such as banks, energy and government agencies. TCVN 14423:2025 does not impose a specific checklist for all organizations. The standard requires units to build security configurations suitable to their own characteristics.

"We do not provide specific configurations for each organization, but the requirements are there and must be regularly updated," Colonel Thuy emphasized.

Expert Vu Ngoc Son, Head of Research Department of the National Cyber Security Association. Photo: NCA.

At the seminar, Mr. Le Cong Trung, Head of MobiFone Cyber Security Department, said that the group had begun researching the standard since it was announced on May 29.

Meanwhile, Mr. Nguyen Ngoc Quan, Director of VNPT -IT Network Information Security Center, said that the new standard will act as a "compass" to help businesses review their entire system.

The biggest problem today is the lack of awareness about the importance of cyber security. Many leaders do not properly assess the level of risk from cyber attacks.

In terms of human resources, only 7% of an organization's workforce is IT-specialized personnel. Of these, only 13% are specialized in cybersecurity.

The National Cyber Security Center is building an early warning system and a platform for sharing cybersecurity information. Authorities are also implementing a program to raise public awareness through social media platforms.

TCVN 14423:2025 is expected to create a strong boost for the Vietnamese cybersecurity market when it officially takes effect.

Source: https://znews.vn/tieu-chuan-moi-nham-giai-quyet-bai-toan-an-ninh-mang-quoc-gia-post1562528.html