Criteria for classification of information systems in Vietnam

Criteria for classification of information systems in Vietnam (Internet image)

1. Principles of classification of information systems in Vietnam

According to Clause 1, Article 5 of Decree 85/2016/ND-CP, the identification of an information system for later classification in Vietnam is subject to these principles:

- The information system is solely subjected to an administrator;

- The information system can operate independently and takes shape to service or facilitate professional operations and specific business activities of organizations and agencies, as defined in Section 2, Article 6 of Decree 85/2016/ND-CP.

 If an information system is comprised of various constituent systems classified differently, the entire system shall adopt the highest among classifications of constituent systems.

2. Criteria for classification of an information systems in Vietnam

The Criteria for classification of an information systems in Vietnam are specified from Article 7 to Article 11 of Decree 85/2016/ND-CP, specifically as follows:

* Criteria of first class

A 1st-class information system serves internal operations of an organization or agency and only processes public information.

* Criteria of second class

A 2nd-class information system shall meet one of these criteria:

- An information system that serves internal operations of an organization or agency, processes private information and personal information of users but does not handle classified state information.

- An information system that serves the people and enterprises in one of these manners:

+ Provide information and online public services at level 2 or lower as per the law;

+ Provide online services that are not stated in the list of conditional business services;

+ Provide other online services of processing private and personal information of less than 10,000 users.

- A system of information infrastructure that is of use to an organization or agency.

* Criteria of third class

A 3rd-class information system shall meet one of these criteria:

- An information system that processes classified state information or services the national defense and security and whose sabotage compromises the defense and security of the country.

- An information system that serves the people and enterprises in one of these manners:

+ Provide information and online public services at level 3 or higher as per the law;

+ Provide online public services that are defined in the list of conditional business services;

+ Provide other online services of processing private and personal information of 10,000 or more users.

- A system of shared information infrastructure that is of use to agencies and organizations in an industry, a province or some provinces.

- An industrial maneuver information system that directly services the maneuver and operation of ordinary activities of buildings of grade II, III or IV as per the regulated gradation of construction.

* Criteria of fourth class

A 4th-class information system shall meet one of these criteria:

- An information system that processes classified state information or services the national defense and security and whose sabotage gravely compromises the defense and security of the country.

- A national information system that services the development of the electronic government, functions on round-the-clock basis and does not halt without prior schedule.

- A system of shared information infrastructure that services agencies and organizations on nation-wide scale and round-the-clock basis and does not halt without prior schedule.

- An industrial maneuver information system that directly services the maneuver and operation of ordinary activities of buildings of grade I as per the regulated gradation of construction.

* Criteria of fifth class

A 5th-class information system shall meet one of these criteria:

- An information system that processes classified state information or services the national defense and security and whose sabotage causes excessively grave detriment to the defense and security of the country.

- An information system that services the centralized storage of particularly vital information and data of the country.

- A system of national information infrastructure that connects Vietnam with the world.

- An industrial maneuver information system that directly services the maneuver and operation of ordinary activities of special-graded buildings as per the regulated gradation of construction or vital buildings concerning national security according to legal regulations on national security.

- Other information systems at the discretion of the Prime Minister.

Thanh Rin

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE