Illustrative image (Source: VNA) The move was made after many information incidents have beenreported recently, causing losses in property and harming the reputation ofagencies, organisations and businesses as well as the national informationsecurity. According to the AIS, the trend of cyber attacks, especially ransomware,is increasing.
The authority asked information security units to completeexamination and evaluation of information safety of their information systembefore April 15. If any loophole is detected, the units must immediately apply correcting measures, especially for information systems that store and processpersonal information and personal data, it asked.
The authority stressed the need for drastic implementation of tasks stated inDirective 09/CT-TTg issued by the Prime Minister on February 23, 2024 regardingstrengthening information safety following different levels, ensuring that all operatinginformation systems have their safety level approved within September, and all informationsecurity protection plans are fullyimplemented no later than December.
Along with applying the four-layer information safety modeland maintaining connections and information sharing with the AIS’s NationalCyber Security Centre, information safety units are requested to build plans to respond to incidentand periodically back up systems and important data, the authority said, requesting them to periodically perform threat hunting and engage in the national network of cyber information security incident response as well.
Following alerts by the authority and relevant agencies, theunits should regularly check and update information security patches forimportant systems, while using AIS-developed platforms such as IRLab(Information Retrieval Lab) and DFLab (Digital Forensic Lab) platforms toreceive early warnings and support in incident solving, the authoritysuggested./.
VNA
