[Latest News] Vietnam develops national cybersecurity standards

The first national cybersecurity standard for critical information systems, TCVN 14423:2025, is the first national cybersecurity standard for critical information systems.

Lieutenant Colonel Le Xuan Thuy, Director of the National Cyber ​​Security Center (Ministry of Public Security) emphasized the above content at the seminar "TCVN 14423:2025 National standards on cyber security for important information systems" organized on the afternoon of June 19. The seminar attracted a large number of cyber security experts, managers, and businesses to attend.

According to him, the new standard aims to address the confusion of organizations facing too many technical solutions on the market. The standard includes comprehensive governance requirements such as information technology asset management, user account control, web application security and vulnerability management.

Data from the National Cyber ​​Security Center shows that only 34.64% of domestic organizations apply Vietnamese standards on cybersecurity. Meanwhile, 53.8% of organizations use the international standard ISO/IEC 27001:2022.

"We talk about digital sovereignty, but it is paradoxical that we do not implement our own standards," said Mr. Vu Ngoc Son, Head of Research Department of the National Cyber ​​Security Center. Cyber ​​attacks in Vietnam not only target businesses but also target essential systems such as banks, energy and government agencies. TCVN 14423:2025 does not impose a specific checklist for all organizations. The standard requires units to build security configurations suitable to their own characteristics.

The National Cyber ​​Security Center is building an early warning system and a platform for sharing cybersecurity information.

Authorities are also implementing a program to raise public awareness through social media platforms. TCVN 14423:2025 is expected to create a strong boost for the Vietnamese cybersecurity market when it officially comes into effect.