The training course 'Initial incident response skills' was recently opened in Hanoi on March 4 by the Vietnam Cyberspace Emergency Response Center - VNCERT/CC under the Department of Information Security ( Ministry of Information and Communications ) in collaboration with CyberCX.

As an activity within the framework of the Australian Government 's cyber and critical technology cooperation program supporting Vietnam and countries in the Mekong region, the training course aims to enhance international cooperation in incident response, improve information security capacity, and incident response for agencies and organizations in Vietnam.

W-c-c-c-n-0-1-1.jpg
Two senior experts from CyberCX, Mr. Paul Lambert and Mr. Kenvin Manderson, directly trained students on information security incident response skills. (Photo: Phan Huyen)

Taking place in a combination of face-to-face and online formats, during the two days of March 4 and 5 of the course, more than 30 trainees, who are technical staff from ministries, branches, and national cyber security incident response network clusters, will be directly trained by two senior CyberCX experts, Mr. Paul Lambert and Mr. Kenvin Manderson.

Specifically, in addition to being updated on information on cyber security incident response procedures and evidence collection methods, students are also guided by Australian experts in analyzing evidence and building a timeline, and how to hunt for threats in an incident, through specific practical exercises.

Speaking at the opening of the training course, Acting Director of VNCERT/CC Nguyen Duc Tuan emphasized that in the trend of digital transformation and connecting global information systems, besides the benefits, a major challenge for all organizations and information systems is the increase in the cyber attack surface, facing attacks from many directions and many forms by criminals with high professional skills, even with the support of artificial intelligence tools.

“Incident preparedness and response has been and is an important component of defense in depth, in addition to the existing multi-layered protection of agencies and organizations,” said Mr. Nguyen Duc Tuan.

W-c-c-c-c-c-c-c-c-1-1-1.jpg
In addition to the 15 trainees participating directly in Hanoi , there are also technical staff from ministries, branches and incident response network clusters attending the online training course. (Photo: Phan Huyen)

Commenting that the training course is a good opportunity for Vietnamese technical staff to interact and learn from Australian experts, the VNCERT/CC representative also said that, built and compiled from CyberCX's practical experience, this training program is for those who deploy initial response to cyber security incidents.

The training course, according to the VNCERT/CC representative, will help Vietnamese technical staff gain an understanding of the incident response process, the roles and responsibilities of departments and individuals; and be exposed to a number of tools used in the process of responding to network incidents. In particular, they will gain the ability to use basic network incident response tools through practical exercises.

VNCERT/CC representative suggested that during the short duration of the training course, in addition to participating fully and seriously, trainees should also actively exchange and discuss with lecturers and other trainees. This teamwork cooperation will help in the collaboration to respond to larger and more complex information security incidents in the future.

It is expected that after the course, the trainees participating in this training course will continue to impart the knowledge and skills acquired from international experts to technical staff of agencies, organizations and enterprises in the National Cyber Security Incident Response Network.

Vietnam's cyber security incident response activities must shift from passive to proactive. Proactive threat hunting and vulnerability scanning on information systems must be carried out at least once every 6 months.