On October 25, 2017, the Government of Vietnam submitted the draft Law on Cybersecurity to the National Assembly for discussion. It clearly states that the Business License for Security Assurance Services shall only be granted to the head of the business entity upon satisfying all of the following four conditions:
First, the head of the business establishment must have a clear personal background and must not fall into one of the following cases:
- A minor, a person with limited or lost civil acts capacity;- A person being prosecuted for criminal charges under investigation, prosecution, or trial by competent authorities;- A person currently prohibited by the court from holding positions or practicing relevant professions.
Second, the establishment must meet the standard requirements for the number of technical staff with a university degree in a relevant field or a cybersecurity, information technology, or telecommunications certificate.
Third, there must be a description of the business plan for cyber security services in accordance with the law;
Fourth, there must be suitable equipment, facilities, and technology systems in line with the description of the cyber security service business plan.
If the above four conditions are met, the head of the business establishment should prepare a dossier for the application for a Cyber Security Service Business License and submit it to the Ministry of Public Security. The dossier includes:
- Application for a Cyber Security Service Business License;- Copy of the Enterprise Registration Certificate, Investment Registration Certificate, or other equivalent documents;- Explanation of the technical equipment system in compliance with the provisions of the law;- Description of the business plan, including the scope, target service recipients, standards, and quality of service;- Copy of degrees or professional certificates in cybersecurity, information technology, telecommunications for the management, operation, and technical staff to ensure the corresponding quantity standards.
Within 20 days from the date of receipt of a valid dossier, the Ministry of Public Security shall appraise and issue the Cyber Security Service Business License to the head of the business establishment.
See details Draft Law on Cyber Security, expected to take effect in 2018.