Vietnam: By what measures is the strengthening of network information security for surveillance camera equipment directed?
- What are the measures to ensure network information security for surveillance camera equipment in Vietnam?
- What is the current situation of network information security and information security for surveillance camera equipment?
- Responsibilities of telecommunications and Internet service providers in case surveillance cameras fail to ensure network information security in Vietnam?
What are the measures to ensure network information security for surveillance camera equipment in Vietnam?
Pursuant to Section 1 of Directive 23/CT-TTg of Vietnam in 2022, to overcome the shortcomings and risks of network information security and information security related to surveillance cameras, the Prime Minister instructed ministries, ministerial-level agencies, provinces and centrally-run cities, state groups and corporations effectively implement the following measures:
- Determine the security level of the information system and implement the plan to ensure the information system security according to the level and according to the provisions of law and national technical standards and regulations on information system security by level when deploying information systems using surveillance cameras.
Deadline for completion: Determining and approving the security level of information systems using surveillance cameras, to be completed by March 2023; fully implement the plan to ensure information system security by level for information systems using surveillance cameras in operation, completed in September 2023 at the latest.
- Direct the agencies and units attached to invest, purchase surveillance cameras or hire information technology services using surveillance cameras to inspect and evaluate network information security in accordance with regulations of law; carry out periodical inspection and assessment of network information security according to regulations for information systems using surveillance cameras.
- Using surveillance cameras that meet the requirements on ensuring network information security as prescribed; do not use surveillance cameras that do not have certificates of origin and product quality or have been warned by a competent authority not to ensure network information security.
- To meet resources and funding to ensure network information security for information systems using surveillance cameras; take responsibility before the Prime Minister if there is any loss of network information security, information security, disclosure of state secrets from information systems using surveillance cameras under their management.
- Develop, review, amend and supplement regulations on ensuring network information security of agencies and units, which clearly stipulates that the use of surveillance cameras must ensure network information security.
- After the national technical regulation on basic network information security requirements for surveillance cameras is promulgated, relevant ministries and branches shall urgently study and organize the application of this technical regulation within the scope of management.
Vietnam: By what measures is the strengthening of network information security for surveillance camera equipment directed?
What is the current situation of network information security and information security for surveillance camera equipment?
As noted in Directive 23/CT-TTg of Vietnam in 2022, the current situation of network information security and information security for surveillance camera equipment is as follows:
Currently, millions of surveillance cameras based on network protocols (surveillance cameras) are being deployed and widely used. Most of these devices are unmanaged, so there are many potential security risks that can be exploited to serve illegal acts, such as:
- Illegally collecting data and information of agencies, organizations and users for the purposes of fraud and appropriation of property.
- Hijacking the device and using it for network attacks, spreading malware.
- May reveal state secrets, affecting national security, social order and safety.
Responsibilities of telecommunications and Internet service providers in case surveillance cameras fail to ensure network information security in Vietnam?
Pursuant to Section 8 of Directive 23/CT-TTg of Vietnam in 2022 on responsibilities of telecommunications and Internet service providers in case surveillance cameras fail to ensure network information security in Vietnam as follows:
8. Telecommunications and Internet service providers:
a) Actively inspect and handle surveillance cameras that fail to ensure the security of network information provided by enterprises on their network infrastructure.
b) Actively notify service users of the enterprise when detecting that the user's surveillance camera does not ensure network information security.
c) Cooperate with functional agencies of the Ministry of Information and Communications in monitoring, detecting, preventing and handling surveillance cameras that fail to ensure network information security.
d) Cooperate with functional agencies of the Ministry of Public Security in detecting and handling organizations and individuals abusing surveillance cameras to infringe upon national security, social order and safety.
Thus, when surveillance cameras fail to ensure network information security, telecommunications and Internet service providers have the following responsibilities:
+ Actively check and handle surveillance cameras that do not ensure the security of network information provided by enterprises on their network infrastructure.
+ Proactively notify customers and service users of the enterprise when detecting that the user's surveillance camera does not ensure network information security.
+ Coordinate with functional agencies of the Ministry of Information and Communications in monitoring, detecting, preventing and handling surveillance cameras that do not ensure network information security.
+ Coordinating with functional agencies of the Ministry of Public Security in detecting and handling organizations and individuals abusing surveillance cameras to infringe upon national security, social order and safety.
LawNet
