Decision No. 13/2006/QĐ-BBCVT On the Functions, Tasks, Authorities, and Organizational Structure of the Vietnam Computer Emergency Response Team (VNCERT)

Pursuant to …;

On the functions, tasks, powers, and organizational structure of

Vietnam Computer Emergency Response Team (VNCERT)

THE MINISTER OF POST AND TELECOMMUNICATIONS

Pursuant to Decree No. 86/2002/NĐ-CP dated November 5, 2002 of the Government on the functions, tasks, powers, and organizational structure of ministries and ministerial-level agencies;

Pursuant to Decree No. 90/2002/NĐ-CP dated November 11, 2002 of the Government on the functions, tasks, powers, and organizational structure of the Post and Telecommunications Ministry;

Pursuant to Decision No. 339/2005/QĐ-TTg dated December 20, 2005 of the Prime Minister on the establishment of the Vietnam Computer Emergency Response Team (VNCERT) under the Post and Telecommunications Ministry;

At the proposal of the Director of the Organization and Cadres Department and the Director of the Vietnam Computer Emergency Response Team (VNCERT).

Pursuant to …;

Article 1. The Vietnam Computer Emergency Response Team (VNCERT) is a unit under the Post and Telecommunications Ministry, performing the function of coordinating national computer emergency response activities; promptly warning about issues related to computer network security; building and collaborating in building technical standards for computer network security; promoting the formation of Computer Emergency Response Teams (CERTs) within agencies, organizations, and enterprises; serving as the focal point for cooperation with foreign CERT organizations; participating in assisting the Minister in managing cybersecurity in postal, telecommunications, and information technology activities.

Article 2. The Vietnam Computer Emergency Response Team has the following tasks and powers:

1. Coordinating national Internet emergency response activities to prevent and combat cyber incidents and crimes, including terrorism, within the country and in the framework of international cooperation.

Coordinating and guiding organizations and businesses providing Internet services in handling incidents and fulfilling their obligations to provide base information and retain original data for the purpose of ensuring national Internet security.

Coordinating organizations and businesses providing domestic network security services, as prescribed, in handling major incidents on the national Internet. Cooperating internationally in coordinating incident response from abroad into or out of the country.

2. Collecting information on Internet security. Statistically analyzing national Internet security data to assist state management activities regarding cybersecurity in telecommunications and information technology. Monitoring and detecting potential risks and computer network security incidents to issue early warnings to relevant authorities and the public.

3. Collecting and evaluating the latest technologies and solutions for ensuring computer network security to widely recommend them. Organizing regular research to master new techniques while developing Vietnamese-specific solutions and techniques for computer network security to propose emergency incident response solutions and preventive measures.

4. Implementing research and collaborating with functional units to develop technical standards for computer network security, including standards for information systems, training content frameworks for network users, procedures for preventing and responding to incidents, and other regulatory documents on computer network security.

5. Promoting the capacity for computer emergency response and forming a system of CERTs within agencies, organizations, and enterprises. Raising public awareness about computer information security; publishing publications on computer network security according to the law.

6. Participating and cooperating with global CERT organizations. Serving as the focal point for exchanging information with international security centers. Participating in international forums, training activities, and seminars in related fields.

Cooperating with international organizations to exploit information, techniques, and knowledge on incident prevention and cybercrime, promoting Vietnamese computer network security, and seeking international assistance to enhance Vietnam's capacity for ensuring computer network security.

7. Participating in state management work concerning the activities of associations and non-governmental organizations in the field of computer network security.

Has the right to request organizations and individuals operating on the national Internet to provide information and statistical data related to network security issues.

8. Providing technical security assessment services for information systems and products and technologies used for information security in computer networks. Inspecting, evaluating, and certifying compliance with standards for organizations providing computer emergency response and network security services.

Organizing training and development services for network construction and computer network security, testing and certification of network management and computer network security qualifications according to current regulations of the State and the Post and Telecommunications Ministry.

9. Participating in providing other services in advisory, research, implementation, production, storage, and information provision for computer network security; generating additional revenue to expand the scope and scale of operations consistent with the Center’s functions, tasks, and powers, and in accordance with the law, preserving and developing assigned resources.

10. Collecting, managing, and using fees and charges as prescribed by law.

11. Managing the organization of civil servants and property of the Vietnam Computer Emergency Response Team in accordance with the law and the delegation of the Minister.

12. Performing other tasks assigned by the Minister.

Article 3.

1. The Vietnam Computer Emergency Response Team has a Director, Deputy Directors, an administrative support staff, and subordinate units.

The Director is responsible to the Minister for the results of implementing the functions, tasks, and powers stipulated in this Decision.

Deputy Directors assist the Director and are responsible to the Director for the tasks delegated to them.

2. The organizational structure and staffing of the Vietnam Computer Emergency Response Team include:

- Administrative and General Affairs Office;

- Business Operations Office;

- System Engineering Office;

- Research and Development Department;

- Consulting and Training Department;

- Representative Office in Ho Chi Minh City;

- Representative Office in Da Nang City.

The Center is assigned the staffing quota and provided with funds for operation by the Ministry of Posts and Telecommunications. The staffing of the Center is established by the Director of the Center and submitted to the Minister for decision.

The functions, tasks, authorities, and working relationships among the Departments and Representative Offices are defined by the Director of the Center.

Article 4.

The Vietnam Computer Emergency Response Center is a service organization with revenue, having legal personality, its own seal and separate account as prescribed by law; its headquarters is located in Hanoi City.

The Representative Office in Ho Chi Minh City and the Representative Office in Da Nang City have seals and accounts as prescribed by law.

Article 5.This Decision shall take effect fifteen days from the date of publication in the Official Gazette.

Article 6. The Head of the Office, the Director General of the Cadre and Civil Servant Department, the Director of the Vietnam Computer Emergency Response Center, the Heads of agencies and units under the Ministry of Posts and Telecommunications, and related agencies and units are responsible for implementing this Decision./.