Circular 09: Management of mobile devices in banking operations in Vietnam

According to Article 11 of the Circular No. 09/2020/TT-NHNN of the State Bank of Vietnam, management of mobile devices is prescribed as follows:

1. Mobile devices must be registered for controlling purposes when they are connected to an institution’s internal network.

2. Mobile devices must be connected to an institution’s information service networks and systems within a limited area; connecting mobile devices to the institution’s permitted information systems must be controlled.

3. Regulations on responsibilities of mobile device users in each institution must set out.

4. The following technical measures shall be applied to mobile devices which are used for working purposes:

- Set up the function of remotely disabling or locking devices or removing data in case mobile devices get lost or are stolen;

- Back up data on mobile devices in order to protect and restore data whenever necessary;

- Implement measures to protect data when sending mobile devices to warranty, maintenance and repair service providers.

5. With regard to mobile devices that are assets of an institution, apart from the provisions in Clause 4 of this Article, the institution must adopt the following technical measures:

- Control installed software products; install software updates and patches on mobile devices;

- Install personal information, internal information and classified information protection functions; password; software or prevention of malicious code and other security errors.

View more details at the Circular No. 09/2020/TT-NHNN of the State Bank of Vietnam, effective from January 01, 2021.

Thuy Tram

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE