Guidelines for the collection of information on cypherinformation security

According to Circular No. 31/2017/TT-BTTTT of the Ministry of Information and Communications of Vietnam, collection of information on cypherinformation security and basic monitoring shall satisfy the following requirements:

- Information on cyber information security is collected from log files and warnings of software or equipment related to entities requiring surveillance for provision for central host computer servers or at the request of competent authorities affiliated to the Ministry of Information and Communications. The following information on cyber information security is collected and provided: wed servers with web applications such as portal, online public services, etc; warnings and log files of basic monitoring equipment; warnings and log files of firewalls established for protecting internet connection related to entities requiring surveillance;

- Basic monitoring equipment is able to detect cyber information security intrusions, risks and incidents and is established to ensure surveillance of all Internet connections of entities requiring surveillance;

- Surveillance equipment has functions of detection and establishment of separate rules for detecting intrusions based on the following information: source IP address, destination IP address, source port address, destination port address, special data segments in transmitted packets. If organizations and individuals use basic monitoring equipment themselves, existing applications such as IDS, IPS, Web firewalls, etc are prioritized to be used basic as surveillance equipment;

- Information systems serving the electronic government using encoded protocol (“https” for example) have technical measures for ensuring that equipment for surveillance cyber information security will have sufficient information to detect cyber information security intrusions, risks and incidents;

- Basic monitoring equipment is established and connected with the surveillance system of the Ministry of Information and Communications according to instructions and requirements of competent authorities.

More details can be found in Circular No. 31/2017/TT-BTTTT of the Ministry of Information and Communications of Vietnam, which takes effect from January 15, 2018.

-Thao Uyen-

>> CLICK HERE TO READ THIS ARTICLE IN VIETNAMESE