Vietnam builds cybersecurity standards system for information infrastructure

TCVN 14423:2025 is the first standard in the network security standards system that the National Cyber ​​Security Center is building to continue helping agencies and organizations comprehensively deploy network security measures...

According to Lieutenant Colonel Le Xuan Thuy, Director of the National Cyber ​​Security Center (Department A05 - Ministry of Public Security ), there are currently many widely applied cyber security standards in the world such as ISO/IEC 27001:2022 (international standard), NIST SP 800-53 version 4.0 and CIS Controls version 8 (USA). Vietnam has TCVN 11930:2017 standard to guide information system security assurance.

Lieutenant Colonel Le Xuan Thuy, Director of the National Cyber ​​Security Center, network security standards system for critical information infrastructure.

However, recently, attacks are no longer limited to the business sector but have been directed at essential national systems such as energy, banking, government agencies, and even news agencies and newspapers.

In addition, another serious "gap" comes from within the organizations. Lieutenant Colonel Le Xuan Thuy pointed out that awareness of cybersecurity from the leadership level to the specialized team of many units is still limited. This leads to a situation where the level of risk is not properly assessed and there is a lack of adequate investment to protect the system.

In practice, despite the existence of a standards framework, many information systems, especially critical systems, still exhibit serious vulnerabilities, potentially affecting national security and social order and safety. One of the reasons is that current standards are still theoretical, impractical, and not close to the requirements of actual operations in an increasingly complex cyberspace environment.

Therefore, the promulgation of TCVN 14423:2025 is expected to create favorable conditions for agencies and organizations to establish protection for critical information infrastructures.

The major difference between TCVN 14423:2025 and previous standards lies in its high practicality and clear applicability. Technical requirements and management requirements are closely linked in each content, helping agencies and organizations deploy network security solutions in a systematic, comprehensive and easy-to-implement manner. Meanwhile, TCVN 11930:2017 still mainly stops at general requirements, separating technical and management factors.

Lieutenant Colonel Le Xuan Thuy said: "The current cyber security situation is no less difficult than security on the ground. This is an emerging challenge in the context of non-traditional security. Critical information systems are still the target of attacks, so a strong enough standard system is needed to strengthen defense. Digital transformation without ensuring cyber security will create new risks."

The development of TCVN 14423:2025 is guided by major policies of the Party and State, especially Resolution 57-NQ/TW, which identifies network security as one of the important pillars to protect the national digital space. The new set of standards also plays an orienting role, contributing to the formation of a technical and management framework to build a safe and sustainable information system.

According to News and People Newspaper

Source: https://doanhnghiepvn.vn/cong-nghe/viet-nam-xay-dung-he-thong-tieu-chuan-an-ninh-mang-cho-ha-tang-thong-tin/20250623090139725