What are regulations on ensuring the security and information security of the network system and network-connected devices of the People's Procuracy in Vietnam?

What are regulations on ensuring the security and information security of the network system of the People's Procuracy in Vietnam?

Based on Article 10 of the Regulations on Ensuring the Cybersecurity and Information Security of the People's Procuracy, issued together with Decision 245/QD-VKSTC in 2021, the requirements for ensuring the security and information security of the network system of the People's Procuracy are regulated as follows:

1. The local area network (LAN) must be designed with functional partitions, including: user network zone; network zone connecting the system to the Internet and other networks; public server network zone; internal server network zone; database server network zone; administration server network zone. Data exchanged between network zones must be managed and monitored by network devices and security devices.

2. Subordinate units participating in the connection and use of the internal network system are responsible for ensuring the security and information security of the internal network system and their devices when connecting to the internal network; reporting incidents or any unauthorized intrusion or malicious activities to the specialized unit responsible for network security and information security for handling; not attempting to access unauthorized areas in any form.

3. Computer network cables must be installed in enclosed ducts or conduits, limiting unauthorized access.

What are regulations on ensuring the security and information security of the network system and network-connected devices of the People's Procuracy in Vietnam? - image from internet

What are regulations on ensuring the security and information security of the network-connected devices of the People's Procuracy in Vietnam?

Based on Article 11 of these regulations, the requirements for ensuring the security and information security of network-connected devices of the People's Procuratorate are regulated as follows:

1. When changing the purpose of use or disposing of information storage devices containing internal circulation information of the unit or managed by the unit, measures must be taken to delete or destroy the data to ensure it cannot be recovered.

2. Information storage components of information technology devices, when taken for warranty, maintenance, external repair, or no longer in use, must be removed from the device or have the stored information and data deleted (except for cases where data recovery is necessary).

3. If any signs of being infected with malicious software are detected on computers or network-connected devices, the devices must be shut down and the incident must be reported directly to the specialized unit responsible for network security and information security for timely handling.

Best regards!