Circular No. 08/2022/TT-BTTTT stipulates job title standards, occupational qualifications, and salary grading for information technology and cybersecurity professionals.

CIRCULAR

Regulations on job code, occupational standards, and salary grading for information technology and cybersecurity professionals

with information technology and information security professionals

Pursuant to the Civil Servant Law dated November 15, 2010; and the Law Amending and Supplementing Certain Provisions of the Civil Servants and Public Officials Law and the Civil Servant Law dated November 25, 2019;

Based on the proposal of the Director of the Cadre and Civil Servant Department;

Pursuant to Decree No. 89/2021/NĐ-CP dated October 18, 2021 of the Government amending and supplementing certain articles of Decree No. 101/2017/NĐ-CP dated September 1, 2017 of the Government on training and capacity building for civil servants and public officials;

Pursuant to Decree No. 204/2004/NĐ-CP dated December 14, 2004 of the Government on salary system for civil servants, public officials, and armed forces; and Decree No. 17/2013/NĐ-CP dated December 19, 2013 of the Government amending and supplementing certain articles of Decree No. 204/2004/NĐ-CP dated December 14, 2004 of the Government on salary system for civil servants, public officials, and armed forces;

Pursuant to Decree No. 17/2017/NĐ-CP dated February 17, 2017, issued by the Government, on the functions, tasks, powers, and organizational structure of the Ministry of Information and Communications;

The phrase "or examination" is abolished pursuant to Clause 6, Article 8 of Circular No. 15/2025/TT-BVHTTDL dated November 25, 2025, of the Minister of Culture, Sports and Tourism amending and supplementing certain articles of Circulars prescribing job codes, qualification standards, and salary grades for civil servants in the heritage culture, library, grassroots cultural activities, sports, fine arts, art performance, film, and cultural propaganda sectors, which takes effect from January 15, 2026.

The Minister of Information and Communications issues this Circular regulating job codes, occupational standards, and salary grading for information technology and cybersecurity professionals,

PART I

GENERAL PROVISIONS

Article 1. Scope of Regulation and Applicability

1. This Circular stipulates job codes, occupational standards, and salary grading for information technology and cybersecurity professionals (in cases where units arrange dedicated positions for cybersecurity according to approved job position plans).

2. This Circular applies to the positions of information technology and cybersecurity professionals working at public service units and other related organizations and individuals.

Article 2. Interpretation of Terms

The terms used in this Circular shall be understood as follows:

1. Information technology education fields include: Computer Education, Applied Mathematics, Mathematical Computing, Mathematical Foundations for Computing and Systems, Electronics and Informatics, Communication Technology, and Computer Science and Information Technology groups in the Fourth-Level Education and Training Catalogue for bachelor's, master's, and doctoral degrees prescribed by the Ministry of Education and Training, and the Fourth-Level Education and Training Catalogue for intermediate and higher vocational degrees prescribed by the Ministry of Labor, Invalids and Social Affairs.

2. Near information technology education fields include: Electronics and Telecommunications; Electronic and Telecommunications Engineering; Electronic Engineering; Telecommunications Engineering; Electrical and Electronic Engineering; Electronic and Telecommunications Engineering; Management Information Systems; Electronic and Telecommunications Engineering; Control and Automation Engineering; Control and Automation Engineering; Mathematical Foundations for Computing.

Article 3. Job Codes for Occupational Titles

1. Occupational titles for cybersecurity professionals include:

a) Cybersecurity Level I - Job Code V.11.05.09

b) Cybersecurity Level II - Job Code V.11.05.10

c) Cybersecurity Level III - Job Code V.11.05.11

d) Cybersecurity Level IV - Job Code V.11.05.12

2. Occupational titles for information technology professionals include:

a) Information Technology Level I - Job Code V.11.06.12

b) Information Technology Level II - Job Code V.11.06.13

c) Information Technology Level III - Job Code V.11.06.14

d) Information Technology Level IV - Job Code V.11.06.15

3. Performing professional tasks as prescribed by the law on notarization.

1. Implement the Party’s guidelines, policies, and state laws, as well as industry and local regulations on information and communications.

2. Be honest, objective, and highly responsible for assigned tasks; fulfill all duties of a public official in professional activities.

3. Maintain ethical conduct, uphold professional integrity, honor, and reputation; refrain from abusing work positions or assigned tasks for personal gain; foster unity, creativity, willingness to learn new things, self-improvement; collaborate with colleagues, share experiences, actively participate in scientific research projects, technical innovations to develop the profession and enhance skills.

4. Adhere to laws on protecting state secrets; ensure information security and confidentiality, as well as national defense and security.

Chapter II
OCCUPATIONAL STANDARDS

Section 1

CYBERSECURITY PROFESSIONAL TITLE

Article 5. Level I Information Security - Code V.11.05.09

1. Duties:

a) Take the lead in building and organizing the implementation of programs, projects, and plans on information security at the ministry or sector level or equivalent and above;

b) Direct the design, construction, and deployment of solutions to ensure information system security according to levels for specialized information systems, integrated databases at the national, sector-wide, inter-sectoral, ministry level, or economic zones or inter-provincial, provincial levels;

c) Direct the development of plans to protect information systems; develop information security policies; implement inspections and evaluations of compliance with approved information system security solutions;

d) Review proposals and projects on information security for information systems, specialized databases, integrated databases;

đ) Resolve complex issues related to information security; directly participate in maintaining, servicing, and repairing systems ensuring security for assigned information systems; respond to and rectify incidents related to network information security, disruptions in technical infrastructure, information systems, and databases when required;

e) Lead the compilation of technical guidance materials, regulations, and procedures for information security; develop training programs, materials, and conduct training sessions for lower-level information security professionals;

g) Lead or participate in research topics in the field of information security; summarize and draw lessons from professional and operational experiences, technical management, and the implementation of information security in practice;

h) Participate in implementing tasks related to cybersecurity as prescribed or upon request from competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's guidelines, laws, and development orientations, strategies, and policies in the field of information security;

b) Be proficient in professional operations; understand the situation and trends in the development of the information security industry both domestically and internationally; have the ability to organize research, update, and apply new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Have the ability to organize and direct the execution of tasks, possess skills in drafting professional documents, and present issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

4. Requirements for candidates participating in examinations or being considered for promotion to the Level I Information Security Professional Title

a) Have held the Level II Information Security Professional Title or equivalent for a minimum of six years (72 months). In cases where equivalent time is recognized, there must be at least one year (12 months) holding the Level II Information Security Professional Title up to the deadline for submitting examination registration or promotion application forms;

b) During the period of holding the Level II Information Security Professional Title or equivalent, have led the research and development of at least two (2) national, ministry, department, or provincial-level projects, programs, or plans in the field of information security that have been accepted and issued by competent authorities; or have led the development of security solutions for at least two (2) information systems at levels 4 and 5 that have been approved by competent authorities; or have led the research and development of at least one (1) information security product or solution that has won a ministry-level award or equivalent.

Article 6. Information security level II - Code V.11.05.10

1. Duties:

a) Take the lead or participate in building and organizing the implementation of information security programs, projects, and plans for agencies and units;

b) Take the lead or participate in organizing the design, construction, and deployment of information system security assurance schemes according to levels for specialized information systems, integrated databases at national, sectoral, inter-sectoral, ministry levels, or economic zones or inter-provincial, provincial levels;

c) Take the lead or participate in building information system protection plans; implement inspections and evaluations of the degree of compliance with approved information system security assurance schemes according to levels;

d) Review proposals and projects on information security for information systems, specialized databases, integrated databases;

d) Resolve complex information security issues; directly participate in maintaining, servicing, and repairing information security systems for units' and sectors' information systems as assigned; respond to and mitigate information security incidents, disruptions in technical infrastructure, software systems, information systems, and databases when required;

e) Take the lead or participate in compiling technical guidance materials, regulations, procedures, standards on information security; build information security policies; develop training programs, materials, and conduct training for lower-level information security professionals;

g) Lead or participate in research topics in the field of information security; summarize and draw lessons from professional and operational experiences, technical management, and the implementation of information security in practice;

h) Participate in building economic-technical norms in analyzing, designing, and deploying information security systems;

i) Participate in implementing cybersecurity coordination tasks as prescribed or upon request from competent authorities;

Clause 2. Professional and vocational competence criteria:

a) Proficiently grasp the Party's guidelines, laws, development orientations, strategies, and policies in the field of information security;

b) Skilled in professional operations; understand the situation and trends in the development of the information security industry both domestically and internationally; capable of organizing research, updating, and applying new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Capable of working independently or in teams; have skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

Clause 3. Education and training criteria:

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

4. Requirements for professionals participating in examinations or being considered for promotion to the information security level II occupational title

a) Have held the information security level III occupational title or equivalent for a minimum of nine years (108 months, excluding probationary and trial periods). In cases of equivalent time, they must have held the information security level III occupational title for at least one year (12 months) up to the deadline for submitting examination registration or promotion application forms;

b) During the period holding the information security level III occupational title or equivalent, they must have taken the lead or participated in researching and building at least two (2) topics, projects, programs in the field of information security at the organizational level or higher, which have been accepted and promulgated by competent authorities; or taken the lead or participated in building information system security assurance schemes according to levels for at least two (2) information systems at level 3 or higher, which have been accepted by competent authorities; or taken the lead in building at least two (2) regulations, rules, technical procedures on information security, which have been promulgated by competent authorities; or participated in researching and developing at least one (1) information security product or solution that has won a ministry-level, provincial-level, or equivalent award.

Article 7. Information Security Level III - Code V.11.05.11

1. Duties:

a) Maintain, warranty, and service systems ensuring information security for the unit's and sector's information systems according to assigned tasks; resolve incidents related to system software, information systems, and databases when requested;

b) Develop and implement plans to ensure information system security at appropriate levels for information systems and databases;

c) Review projects and programs on information security for specialized databases and integrated databases; conduct inspections and evaluations of the implementation of approved information system security plans;

d) Establish standard procedures for responding to and handling computer incidents;

đ) Participate in developing and organizing the implementation of programs, projects, and plans on information security for agencies and units;

đ) Participate in compiling technical guidance materials, procedures, and regulations on information security; train and provide professional development for lower-level information security staff; establish economic and technical standards in analyzing, designing, and implementing information security systems;

e) Participate in research topics in the field of information security; summarize and draw lessons from professional and operational experiences, technical management, and the implementation of information security in practice;

g) Participate in performing coordinated cybersecurity tasks as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's policies, laws, and development orientations, strategies, and policies in the field of information security;

b) Understand the situation and trends in the development of the information security industry both domestically and internationally; have the ability to organize research, update, and apply new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Capable of working independently or in teams; have skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

4. Requirements for candidates applying for or being considered for promotion to the Information Security Level III position

Must have held the Information Security Level IV position or equivalent for at least two years (twenty-four months, excluding probationary and trial periods). In cases with equivalent time, must have held the Information Security Level IV position for at least one year (twelve months) up to the deadline for submitting registration applications for the examination or promotion consideration;

Article 8. Information Security Level IV - Code V.11.05.12

1. Tasks

a) Maintain, warranty, and service systems ensuring information security for the unit's and sector's information systems according to assigned tasks; cooperate in resolving incidents related to system software, information systems, and databases when requested;

b) Implement standard procedures for responding to and handling computer incidents;

c) Participate in implementing programs, projects, and plans on information security for agencies and units;

d) Participate in supporting the compilation of technical guidance materials, procedures, and regulations on information security;

d) Participate in research topics in the field of information security;

e) Participate in performing coordinated cybersecurity tasks as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's policies, laws, and development orientations, strategies, and policies in the field of information security;

b) Understand the situation and trends in the development of the information security industry both domestically and internationally; have the ability to organize research, update, and apply new technologies in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Have the ability to work independently or in teams, possess skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

3. Educational and Training Standards

a) Hold a college degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

Section 2
INFORMATION TECHNOLOGY TITLES

Article 9. Information Technology Category I - Code V.11.06.12

1. Tasks

a) Lead in building and organizing the implementation of programs, projects, and plans on information technology at the ministry or sector level or equivalent;

b) Lead in organizing the design, development, management, and ensuring the security of information for specialized information systems, integrated databases at the national, sectoral, inter-sectoral, ministry levels, or economic zones or inter-provincial, provincial levels;

c) Lead in building regulations, procedures, technical guidance documents, and overall information technology architecture;

d) Lead in developing data strategies; guide and supervise the implementation of data management activities, data sharing, and exploitation activities at the ministry or sector level or higher;

đ) Lead in inspecting, testing, evaluating compliance with requirements, regulations, and policies on information technology and information security of agencies, organizations, and information technology products and services; assess technical, technological solutions to ensure system security according to levels for information technology application projects, tasks; evaluate operational effectiveness, inspect, and determine the degree of compliance with approved basic and detailed designs of information systems;

e) Resolve complex issues related to the development, connection, and integration of information technology products and services; resolve information security incidents, system incidents, database incidents when required;

g) Lead or participate in scientific research topics on information technology; summarize, draw lessons from professional and technical management and the practical application of information technology;

h) Lead or participate in building programs, materials, and training for lower-level information technology staff;

i) Participate in establishing economic-technical norms in the analysis, design, and application of information technology and information security;

k) Participate in implementing coordination tasks on cybersecurity as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's guidelines, laws, and development orientation, strategies, and policies on information technology and information security;

b) Be proficient in specialized professional operations; understand the situation and trends in the development of the information technology industry both domestically and internationally; have the ability to organize research, update, and apply new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks in accordance with laws on information technology and information security and other relevant laws;

d) Have the ability to organize and direct the execution of tasks, possess skills in drafting professional documents, and present issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

4. Requirements for candidates applying for or being considered for promotion to the information technology job title category I;

a) Have held the information technology job title category II or equivalent for a minimum of six years (72 months). In cases of equivalent time, they must have held the information technology job title category II for at least one year (12 months) up to the deadline for submitting registration applications for the examination or promotion review;

b) During the period holding the information technology job title category II or equivalent, they must have led the research and development of at least two (two) projects, plans, programs on information technology at the state, ministry, department, or provincial level that have been accepted and issued by competent authorities; or led the assessment of at least two (two) group A, B information technology projects approved by competent authorities; or led the research and development of at least one (one) information technology product or solution winning a ministry-level award or equivalent.

Article 10. Information Technology Level II - Code V.11.06.13

1. Tasks

a) Lead or participate in building and implementing programs, projects, and plans on information technology for agencies and units.

b) Lead or participate in analyzing, designing, developing specialized software and applications; establishing, installing, operating, and ensuring the security of specialized information systems and databases;

c) Lead or participate in drafting regulations, procedures, and technical guidance documents; participate in setting economic and technical standards in the analysis, design, and application of information technology and information security;

d) Inspect, test, evaluate compliance with requirements, regulations, and policies on information technology and information security for agencies, organizations, and information technology products and services;

đ) Resolve complex issues related to the development, connection, and integration of information technology products and services; address incidents related to information security, information systems, and databases when required;

e) Lead or participate in managing and operating the technical infrastructure system, data integration centers, information systems, application programs, and shared software for agencies and units;

g) Lead or participate in scientific research topics on information technology; summarize, draw lessons from professional and technical management and the practical application of information technology;

h) Participate in building training programs, materials, and conducting training sessions for lower-level information technology staff;

i) Participate in implementing cybersecurity coordination tasks as prescribed or upon request from competent authorities;

Clause 2. Professional and vocational competence criteria:

a) Proficiently understand the Party's guidelines, laws, and development directions, strategies, and policies in the field of information technology and information security;

b) Be proficient in specialized operations; be well-informed about the situation and trends in the development of the information technology industry both domestically and internationally; have the ability to update and apply new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks in accordance with laws on information technology and information security and other relevant laws;

d) Capable of working independently or in teams; have skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

4. Requirements for staff participating in examinations or evaluations for promotion to Information Technology Level II occupational title

a) Have held the Information Technology Level III occupational title or equivalent for at least nine years (96 months, excluding probationary and trial periods). In cases with equivalent time, they must have held the Information Technology Level III occupational title for at least one year (12 months) up to the deadline for submitting examination or evaluation registration forms;

b) During the period holding the Information Technology Level III occupational title or equivalent, lead or participate in researching and building at least two (2) topics, plans, projects, or programs in the field of information technology at the institutional level or higher, which have been accepted and issued by competent authorities; or lead or participate in reviewing at least two (2) information technology projects approved by competent authorities; or lead or participate in drafting at least two (2) regulations, rules, and technical procedures on information technology issued by competent authorities; or participate in researching and developing at least one (1) technological solution that has won a ministry-level, provincial-level, or equivalent award.

Article 11. Information Technology Level III - Code V.11.06.14

1. Tasks

a) Manage and operate the technical infrastructure system, data integration centers, information systems, application programs, and shared software for agencies and units;

b) Inspect, test, evaluate compliance with requirements, regulations, and policies on information technology and information security for agencies, organizations, and information technology products and services;

c) Participate in building and implementing programs, plans, and projects on information technology for agencies and units;

d) Participate in analyzing, designing, programming, and ensuring the security of specialized information systems and databases;

đ) Participate in drafting regulations, procedures, and technical guidance documents; participate in setting economic and technical standards in the analysis, design, and application of information technology and information security; conduct training and professional development for lower-level information technology staff;

e) Conduct scientific research on information technology; summarize and draw lessons from professional and operational management, and implement the application of information technology in practice;

g) Participate in performing coordinated cybersecurity tasks as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Proficiently understand the Party's guidelines, laws, and development directions, strategies, policies, and regulations in the field of information technology and information security;

b) Be informed about the situation and trends in the development of the information technology industry both domestically and internationally; have the ability to update and apply new technologies, platforms, and standards in professional activities;

c) Have the ability to work independently or in teams, and have the skills to draft professional documents assigned for advisory and proposal purposes;

d) Fulfill tasks according to laws on information technology and information security and other relevant laws;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

4. Requirements for staff participating in examinations or evaluations for promotion to Information Technology Level III occupational title

Have held the Information Technology Level IV occupational title or equivalent for at least two years (24 months, excluding probationary and trial periods) for those recruited with an associate degree, and three years (36 months) (excluding probationary and trial periods) for those recruited with a diploma. In cases with equivalent time, they must have held the Information Technology Level IV occupational title for at least one year (12 months) up to the deadline for submitting examination or evaluation registration forms.

Article 12. Information technology grade IV - Code V.11.06.15

1. Tasks

a) Participate in analyzing, designing, developing, ensuring information security for information systems, specialized databases;

b) Participate in inspecting, testing, evaluating compliance with requirements, regulations, policies on information technology, information security, and information technology products and services of agencies and organizations;

c) Participate in managing, operating technical infrastructure information systems, information systems, application programs, shared software of agencies and units; repair, resolve simple faults of information systems, computer networks, software, databases of agencies and organizations;

d) Participate in implementing cybersecurity coordination tasks as prescribed or at the request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's guidelines, laws, development orientation, strategies, policies, and regulations of the information technology and information security sector;

b) Possess the ability to research, update, and apply new technologies in professional activities;

c) Perform duties in accordance with laws on information technology, information security, and other relevant laws;

d) Possess the ability to work independently or in teams;

3. Educational and Training Standards

a) Hold a diploma or higher degree in information technology or related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

Chapter III
SALARY RATING FOR PROFESSIONAL OCCUPATIONS
INFORMATION SECURITY AND INFORMATION TECHNOLOGY

Article 13. Principles of salary rating

1. The appointment and salary assignment to professional positions in the specialized field of information technology and information security as stipulated in this Circular must be based on job positions, responsibilities, tasks, and the professional capacity of the staff undertaking them;

2. When appointing from the current professional position of staff to a corresponding specialized information technology and information security professional position, it shall not combine with increasing salary grade or upgrading the professional position of staff;

Article 14. Appointment of information technology and information security professional positions

1. Staff who have been appointed to various grades of professional positions in the specialized field of information technology according to Circular No. 45/2017/TT-BTTTT dated December 29, 2017, issued by the Minister of Information and Communications on standards for professional positions of staff in the specialized field of information technology (hereinafter referred to as Circular No. 45/2017/TT-BTTTT) and Circular No. 29/2020/TT-BTTTT dated October 28, 2020, issued by the Minister of Information and Communications guiding the appointment and salary assignment for professional positions of staff in the specialized field of information technology (hereinafter referred to as Circular No. 29/2020/TT-BTTTT), and where the unit does not allocate a dedicated information security position, shall be appointed to corresponding information technology professional positions, specifically as follows:

a) System administrator grade I (code V11.06.12), information technology certification officer grade I (code V11.07.16), software developer grade I (code V11.08.19), information security grade I (code V11.05.09) shall be appointed to information technology professional position grade I (code V11.06.12);

b) System administrator grade II (code V11.06.13), information technology certification officer grade II (code V11.07.17), software developer grade II (code V11.08.20), information security grade II (code V11.05.10) shall be appointed to information technology professional position grade II (code V11.06.13);

c) System administrator grade III (code V11.06.14), information technology certification officer grade III (code V11.07.18), software developer grade III (code V11.08.21), information security grade III (code V11.05.11) shall be appointed to information technology professional position grade III (code V11.06.14);

d) System administrator grade IV (code V11.06.15), software developer grade IV (code V11.08.22) shall be appointed to information technology professional position grade IV (code V11.06.14);

2. Dedicated information security staff (in cases where the unit allocates a dedicated information security position) who have been appointed to various grades of professional positions in the information security field according to Circular No. 45/2017/TT-BTTTT and Circular No. 29/2020/TT-BTTTT shall continue to hold corresponding information security professional positions as stipulated in this Circular;

3. The time spent holding information security, system administrator, information technology certification officer, and software developer professional positions as stipulated in Circular No. 45/2017/TT-BTTTT shall be counted as the time spent holding information technology professional positions for determining the conditions for upgrading information technology professional positions as stipulated in this Circular.

Article 15. Salary Classification

1. The occupational titles for information technology and cybersecurity professionals specified in this Circular shall apply the Professional and Administrative Staff Salary Scale for State-owned public institutions (Scale 3) issued together with Decree No. 204/2004/ND-CP dated December 14, 2004 of the Government on salary regulations for civil servants, public officials, and armed forces personnel (hereinafter referred to as Decree No. 204/2004/ND-CP), specifically as follows:

a) Information Technology Grade I and Cybersecurity Grade I shall apply the salary coefficient of Category A3, Group 1 (A3.1) with 6 levels, from salary coefficient 6.20 to salary coefficient 8.00;

b) Information Technology Grade II and Cybersecurity Grade II shall apply the salary coefficient of Category A2, Group 1 (A2.1) with 8 levels, from salary coefficient 4.40 to salary coefficient 6.78;

c) Information Technology Grade III and Cybersecurity Grade III shall apply the salary coefficient of Category A1 with 9 levels, from salary coefficient 2.34 to salary coefficient 4.98;

d) Information Technology Grade IV and Cybersecurity Grade IV shall apply the salary coefficient of Category B with 12 levels, from salary coefficient 1.86 to salary coefficient 4.06. In cases where a professional with a college degree or higher is recruited to a position requiring Grade IV occupational title, they will be classified at Level 2; if there is a probationary period, during which they will receive 85% of the Level 2 salary of the Grade IV occupational title.

2. The classification of salaries for professionals transitioning from their current occupational titles to information technology and cybersecurity occupational titles shall be carried out according to the guidelines set forth in Clause 2, Section II of Circular No. 02/2007/TT-BNV dated May 25, 2007, issued by the Minister of Home Affairs guiding the classification of salaries when upgrading, transferring, or changing categories of civil servants and public officials (hereinafter referred to as Circular No. 02/2007/TT-BNV).

3. In cases where a professional with a college degree was assigned a salary under Category A0 as stipulated in Decree No. 204/2004/ND-CP upon recruitment and is now appointed to an information technology or cybersecurity Grade IV occupational title, the basis for determining the salary grade shall be based on the time of service with mandatory social insurance contributions according to the scale and table of salaries prescribed by the State (excluding the probationary period) as follows:

Starting from Level 2 of the Category B salary scale, every two years (24 months), they will be promoted to one level (if the time of service is not continuous and has not yet enjoyed social insurance benefits, it will be accumulated). In cases where the time of service is extended due to failure to complete assigned tasks or disciplinary actions as prescribed by law, the regular promotion period will be extended accordingly. If the time of service is advanced due to outstanding achievements in performing duties, the time of advanced promotion will be counted towards being promoted to a higher level earlier. After converting the time to determine the salary grade of the newly appointed occupational title, if there are months that have not reached 24 months, these months will be counted towards the next promotion review or the consideration of additional seniority allowances beyond the standard (if applicable).

After transferring to the salary classification for information technology Grade IV and cybersecurity Grade IV occupational titles, if the salary coefficient assigned to these occupational titles plus any additional seniority allowance (if applicable) is lower than the salary coefficient previously enjoyed at the old occupational title, they will continue to enjoy the difference in salary coefficients (including any additional seniority allowance, if applicable) at the old occupational title. This retained salary coefficient difference will be enjoyed throughout the time the professional is classified at the information technology Grade IV and cybersecurity Grade IV occupational titles. Subsequently, if the professional is promoted to a higher occupational title, this retained salary coefficient difference will be added to the current salary coefficient (including any additional seniority allowance, if applicable) to determine the salary for the newly appointed occupational title and cease enjoying the retained salary coefficient difference from the date of receiving the new occupational title salary.

4. Promotion to higher occupational titles for information technology and cybersecurity professionals shall be implemented after the competent authority has appointed and classified salaries for the information technology and cybersecurity occupational titles specified in this Circular and followed the guidelines set forth in Clause 1, Section II of Circular No. 02/2007/TT-BNV.

Chapter IV

IMPLEMENTATION PROVISIONS

Article 16. Effective Date

1. This Circular takes effect from August 15, 2022.

2. Repeal Circular No. 45/2017/TT-BTTTT dated December 29, 2017, issued by the Minister of Information and Communications, specifying the standards for information technology professional occupational titles.

3. Repeal Circular No. 29/2020/TT-BTTTT dated October 28, 2020, issued by the Minister of Information and Communications, guiding the appointment and classification of salaries for information technology professional occupational titles.

4. In cases where the legal normative documents cited in this Circular are amended, supplemented, or replaced, implementation shall follow the amended, supplemented, or replaced legal normative documents.

Article 17. Transitional Provisions

1. Professionals who have been appointed to cybersecurity professional, system administrator, information technology auditor, software development occupational titles as stipulated in Circular No. 45/2017/TT-BTTTT or other occupational titles, and are now appointed to information technology and cybersecurity professional occupational titles as stipulated in this Circular, the competent authorities managing and using the professionals shall create conditions for them to supplement the missing criteria for the newly appointed information technology and cybersecurity professional occupational titles.

2. For agencies and units that have been approved by the competent authority to implement plans for promoting information technology professional occupational titles before this Circular takes effect, they may continue to implement according to the approved plans until completion.

Article 18. Responsibility for Implementation

1. The Minister, the Heads of Ministries-equivalent agencies, the Heads of government agencies, the Chairpersons of People's Committees of provinces and centrally governed cities, and related organizations, entities, and individuals shall be responsible for implementing this Circular.

2. During the implementation process, if there are difficulties or obstacles, organizations and individuals are requested to report to the Ministry of Information and Communications for consideration and resolution./.