Circular No. 19/2023/TT-BTTTT detailing and guiding the implementation of certain provisions of Decision No. 8/2023/QĐ-TTg dated April 5, 2023 of the Government Chairman regarding Special-Purpose Data Communication Networks for Party and State Agencies

 

CIRCULAR

Detailed regulations and guidance on certain provisions of Decision No.

8/2023/QĐ-TTg dated April 5, 2023 of the Prime Minister on

Special-purpose data transmission network serving Party and State agencies;

Pursuant toLaw on Telecommunicationsdated November 23, 2009;

Pursuant toLaw on CybersecurityNovember 19, 2015;

Pursuant to Decree No.25/2011/ND-CPApril 6, 2011 of the Government detailing and guiding the implementation of certain provisions ofLaw on Telecommunications;

Pursuant to Decree No.Decree No. 85/2016/NĐ-CPJuly 1, 2016 of the Government on ensuring the security of information systems according to levels;

Pursuant to Decree No.April 19, 2022 of the GovernmentJuly 26, 2022 of the Government stipulating the functions, tasks, powers, and organizational structure of the Ministry of Information and Communications;

The Prime Minister issues this Decision amending and supplementing certain Articles of Decision No.8/2023/QĐ-TTgApril 5, 2023 of the Prime Minister on Special-purpose data transmission network serving Party and State agencies;

At the proposal of the Director of the Central Post Office Directorate;

The Minister of Information and Communications issues this Circular providing detailed regulations and guidance on certain provisions of Decision No.8/2023/QĐ-TTgApril 5, 2023 of the Prime Minister on Special-purpose data transmission network serving Party and State agencies.

PART I

GENERAL PROVISIONS

Article 1. Scope of Regulation

This Circular regulates services, connections, and information security assurance for the Special-purpose data transmission network serving Party and State agencies (hereinafter referred to as the Special-purpose data transmission network).

Article 2. Applicability

This Circular applies to the Central Post Office Directorate, agencies, organizations providing, managing, and using services of the Special-purpose data transmission network.

Article 3. Explanation of Terms

In this Circular, the following terms are understood as follows:

1. Users of services of the Special-purpose data transmission network include users of level I access networks and users of level II access networks (hereinafter referred to as users).

2. Users of the level I access network are agencies and organizations specified in Appendix I of Decision No. 8/2023/QĐ-TTg dated April 5, 2023 of the Prime Minister on Special-purpose data transmission network serving Party and State agencies.

3. Users of the level II access network are agencies and organizations specified in Appendix II of Decision No. 8/2023/QĐ-TTg.

4. Terminal equipment of the access network is switching equipment, routing equipment, or equivalent equipment connected to the end point of the Special-purpose data transmission network.

Chapter II

PROVISIONS ON SERVICES

Article 4. Virtual private network service

1. Virtual private network service is a service connecting the information systems of users into virtual private networks on the infrastructure of the Special-purpose data transmission network.

2. Virtual private network service uses the level I access network infrastructure deployed by the Central Post Office Directorate and the level II access network built by agencies and organizations themselves or leased directly or virtually from telecommunications enterprises.

3. Virtual private network service is managed and provided by the Central Post Office Directorate; the specialized information technology units of users of virtual private network service compile requirements, provide technical information, and coordinate with the Central Post Office Directorate to implement and ensure connection of the virtual private network service.

Article 5. Video conferencing service

1. Video conferencing service is a service using channels of the Special-purpose data transmission network and the multi-point control system of the Central Post Office Directorate, ministries, sectors, localities to establish online meeting connections between different sites.

2. The Central Post Office Directorate ensures connections of sites belonging to users of the level I access network; ensures interconnection between the video conferencing system of the Central Post Office Directorate and those of ministries, sectors, localities, and enterprises.

3. Ministries, sectors, localities ensure connections of sites belonging to users of the level II access network.

Article 6. Special-purpose Internet access service

1. The special-purpose Internet access service is a service providing users with the ability to access the Internet on the Special-purpose Data Communication Network.

2. The special-purpose Internet access service is managed and provided by the Central Post and Telecommunications Administration for the Central Party Office, the National Assembly Office, the President's Office, the Government Office, and central-level Party management agencies.

3. The specialized information technology units of entities using the special-purpose Internet access service provide technical information and cooperate with the Central Post and Telecommunications Administration to implement and ensure information security.

Chapter III

PROVISIONS ON NETWORK CONNECTION

Article 7. Network connection model

Party and State agencies cooperate with the Central Post and Telecommunications Administration to implement interconnection at various administrative levels according to the following models:

1. Comprehensive network connection model

a) Guidelines for connecting backbone networks, level I access networks, and level II access networks;

b) The Central Post and Telecommunications Administration deploys backbone network connections and level I access networks through a minimum of two (2) optical fiber transmission channels in different physical directions; establishes virtual private networks on the connection ports to connect information systems;

c) Ministries, sectors, localities deploy level II access network connections, connecting national information systems managed by ministries, sectors, and localities to the Special-purpose Data Communication Network via self-built transmission channels or leased direct or virtual dedicated channels from telecommunications enterprises; coordinate with the Central Post and Telecommunications Administration to establish traffic concentration points at connection ports to connect level II access network users;

d) The Special-purpose Data Communication Network serves as the transmission infrastructure for interconnecting information systems supporting the Digital Government;

đ) Transmission channels must ensure that the bandwidth utilization rate of all connection directions is less than 90%, based on the results of traffic monitoring from 00:00 to 24:00 daily over a minimum continuous period of three (3) months, with each monitoring sample lasting five (5) minutes;

e) The comprehensive network connection model is illustrated by Diagram 01 in Appendix I issued with this Circular.

2. Network connection model for data centers located in ministries, sectors, and localities with the Special-purpose Data Communication Network:

a) Applies to data centers invested in and equipment placed at the headquarters of ministries, sectors, and localities;

b) Ministries, sectors, and localities deploy a minimum of two (2) optical fiber transmission channels in different physical directions connecting from the routing device of the data center to the connection port;

c) Transmission channels must ensure that the bandwidth utilization rate of all connection directions is less than 90%, based on the results of traffic monitoring from 00:00 to 24:00 daily over a minimum continuous period of three (3) months, with each monitoring sample lasting five (5) minutes;

d) The Central Post and Telecommunications Administration cooperates with ministries, sectors, and localities to establish connection policies on the connection port and routing devices at the data center;

đ) The network connection model for data centers located in ministries, sectors, and localities with the Special-purpose Data Communication Network is illustrated by Diagram 02 in Appendix I issued with this Circular.

3. Network connection model for data centers located in telecommunications enterprises with the Special-purpose Data Communication Network:

a) Applies to data centers invested in and equipment leased and placed at telecommunications enterprises or equipment leased and placed at telecommunications enterprises by ministries, sectors, and localities;

b) Telecommunications enterprises deploy a minimum of two (2) optical fiber transmission channels in different physical directions connecting from the routing device in the data center area of the telecommunications enterprise to the connection port;

c) Transmission channels must ensure that the bandwidth utilization rate of all connection directions is less than 90%, based on the results of traffic monitoring from 00:00 to 24:00 daily over a minimum continuous period of three (3) months, with each monitoring sample lasting five (5) minutes;

d) The Central Post and Telecommunications Administration cooperates with telecommunications enterprises to establish connection policies on the connection port and routing devices in the data center area;

đ) The network connection model for data centers located in telecommunications enterprises with the Special-purpose Data Communication Network is illustrated by Diagram 03 in Appendix I issued with this Circular.

4. Network connection model for agencies and organizations in localities with the Special-purpose Data Communication Network:

a) Applies to localities implementing wide-area networks combined with the Special-purpose Data Communication Network to connect agencies and organizations within their jurisdiction;

b) Connect agencies and organizations that are users of level I access networks and level II access networks as stipulated in Clause 1 of this Article;

c) Localities establish a network partition connecting non-user entities to the Special-purpose Data Communication Network through their own data centers; use IP addresses for this network partition that do not overlap with the IP addresses of the Special-purpose Data Communication Network;

d) The locality’s data center acts as a traffic transfer point between level I access networks, level II access networks, and the network partition connecting non-user entities;

đ) Transmission channels must ensure that the bandwidth utilization rate of all connection directions is less than 90%, based on the results of traffic monitoring from 00:00 to 24:00 daily over a minimum continuous period of three (3) months, with each monitoring sample lasting five (5) minutes;

e) The Central Post and Telecommunications Administration cooperates with localities to establish routing policies between the two networks through the connection port and routing devices at the data center;

g) The network connection model for agencies and organizations in localities with the Special-purpose Data Communication Network is illustrated by Diagram 04 in Appendix I issued with this Circular.

5. Network connection model for other telecommunication networks with the Special-purpose Data Communication Network:

a) Managers of other telecommunication networks establish and use optical fiber transmission channels or lease direct or virtual dedicated services from telecommunications enterprises to connect other telecommunication networks to the connection port of the Special-purpose Data Communication Network;

b) The transmission channel must ensure that the bandwidth usage rate of all connection directions is less than 90%, based on the traffic monitoring results of all connection directions from 00:00 to 24:00 daily for a minimum continuous period of three months, with each monitoring sample lasting five minutes;

c) The Central Post and Telecommunications Regulatory Authority and other network management units shall cooperate to establish routing policies between two networks through the interconnection gateway and the IP address conversion device of the other telecommunications network;

d) The connection model of another telecommunications network with the Specialized Data Transmission Network is illustrated by Diagram 05 in Appendix I issued together with this Circular.

Article 8. Provisions on IP Addresses and Routing

1. The Specialized Data Transmission Network uses public IP addresses and private IP addresses.

2. Public IP addresses are reassigned by the Central Post and Telecommunications Regulatory Authority to users of dedicated Internet access services in accordance with the regulations of the Ministry of Information and Communications on the management and use of Internet resources.

3. Private IP addresses are used for internal connections within the Specialized Data Transmission Network and shall comply with the following provisions:

a) The Central Post and Telecommunications Regulatory Authority manages all IP addresses of the Specialized Data Transmission Network; assigns and allocates IP addresses according to level I access networks, level II access networks, administrative levels, and the communication infrastructure needs of users; ensures IP address safety, scalability, and redundancy; recovers IP addresses that are not used in accordance with the regulations of the Ministry of Information and Communications;

b) The information technology units of users compile their requirements and provide information to the Central Post and Telecommunications Regulatory Authority in accordance with the form prescribed in Appendix II of this Circular to obtain IP addresses for their information systems connecting to the Specialized Data Transmission Network in compliance with registration;

c) The use of IP addresses must be consistent with their intended purpose and user group and must not overlap among different services and organizations;

d) Annually, the information technology units of users are responsible for reviewing the use of IP addresses in the Specialized Data Transmission Network and submitting reports to the Ministry of Information and Communications (Central Post and Telecommunications Regulatory Authority).

4. Routing Principles

a) The Central Post and Telecommunications Regulatory Authority manages and establishes routing policies across the entire network to ensure connectivity and service quality between Party and State agencies, as well as network security, in accordance with the connection regulations stipulated in this Circular;

b) Requests for new or changed routing policies can only be implemented after consensus has been reached between relevant units and the Central Post and Telecommunications Regulatory Authority.

Chapter IV

PROVISIONS ON NETWORK INFORMATION SECURITY GUARANTEES

Article 9. Requirements for Ensuring the Security of Information Systems Connecting to the Specialized Data Transmission Network

1. Information systems connecting to the Specialized Data Transmission Network must connect through an interconnection gateway to ensure information security and deploy services and applications of the Specialized Data Transmission Network.

2. Information systems must meet the requirements specified in Articles 9 and 10 of Circular No. 12/2022/TT-BTTTT dated August 12, 2022, of the Ministry of Information and Communications detailing and guiding certain provisions of Government Decree No. 85/2016/NĐ-CP dated July 1, 2016, on ensuring information system security by level.

3. Information systems must implement comprehensive information network security measures as required before connecting to the Specialized Data Transmission Network.

4. Network segments participating in the connection to the Specialized Data Transmission Network must be designed independently and have access management plans with other network segments.

5. When an information system connected to the Specialized Data Transmission Network is found to be non-compliant with network information security requirements, the managing and operating unit of the information system must cooperate in handling the situation according to the guidance of the Central Post and Telecommunications Regulatory Authority.

Article 10. Supervision of Information Security on Data Communication Networks and Access Control

1. The gateway must have functions to manage access, detect intrusion, and prevent malicious code on the network environment.

2. The Central Post and Telecommunications Department shall monitor the operational status, network traffic, configuration, and performance of the gateway and network devices serving the connection of information systems through the use of centralized management platforms and systems.

3. Information on the supervision of information security on data communication networks for connected devices and information systems shall be shared with the Network Operation Center according to the guidance of the Central Post and Telecommunications Department.

4. Servers, workstations, and other information technology equipment connecting to the specialized data communication network must be installed with anti-malicious software and subject to centralized information security supervision.

5. Minimum requirements for terminal devices are stipulated in Appendix III of this Circular.

Chapter V

PROVISIONS ON INSPECTION AND REPORTING REGIME

Article 11. Inspection

1. Content of Inspection

a) Inspection and evaluation of compliance with legal provisions regarding the specialized data communication network;

b) Inspection and monitoring of the implementation of regulations, management procedures, operation, exploitation, and information security assurance of the specialized data communication network;

c) Inspection of network connection, service quality management, and related contents in the provision and use of services.

2. Forms of Inspection:

a) Inspection carried out according to plans approved by competent authorities;

b) Spot inspection.

3. Inspection Units

a) The Ministry of Information and Communications (Central Post and Telecommunications Department) conducts inspections nationwide;

b) Provincial Departments of Information and Communications, based on the division of responsibilities assigned by provincial People's Committees, conduct inspections locally.

4. Inspection costs are covered by the state budget and allocated in the regular expenditure budget of the inspection agency and used in accordance with current laws.

Article 12. Reporting System

1. Regular reports are implemented in accordance with Clause 1, Article 4 of Circular No. 02/2023/TT-BTTT dated March 21, 2023, issued by the Ministry of Information and Communications, concerning the reporting regime within the scope of its administrative management.

2. Ad hoc reports are implemented upon request of the Minister, Deputy Minister of the Ministry of Information and Communications, or the Chairman, Vice-Chairman of the People's Committee of provinces and centrally-administered cities when there are unusual developments in the management, provision, and use of services on the specialized data communication network.

Chapter VI

IMPLEMENTATION

Article 13. Responsibilities of the Central Post and Telecommunications Department

1. To take the lead in formulating, disseminating, and guiding the application of regulations, management procedures, operation, exploitation, and information security assurance of the specialized data communication network.

2. To take the lead in formulating regulations on service quality management of the specialized data communication network and submit them to competent authorities for promulgation.

3. To carry out inspection and supervision of the specialized data communication network nationwide and report to the Ministry of Information and Communications in accordance with Articles 11 and 12 of this Circular.

Article 14. Responsibilities of Provincial Departments of Information and Communications

1. To advise and assist the provincial People's Committee in fulfilling management, inspection, supervision, and reporting responsibilities for the specialized data communication network at the local level.

2. To advise on the formulation of regulations on management, operation, connection, and information security assurance of the network and plans for deploying common applications and services on the specialized data communication network.

3. To coordinate with the Central Post and Telecommunications Department in implementing centralized management platforms and systems.

4. To coordinate with telecommunications enterprises in the deployment of secondary access networks and handling incidents.

Article 15. Responsibilities of organizations and enterprises related to service provision activities

1. Ensure the quality of services and network information security as stipulated in this Circular and relevant laws.

2. Organizations and enterprises involved in providing second-level access network infrastructure shall be responsible for identifying and submitting to the competent authority for approval the level of security and implementing fully the corresponding system security assurance plan.

3. Implement reporting procedures as prescribed in Article 12 of this Circular.

Article 16. Effective Date

- Office of the President, Office of the General Secretary,

2. This Circular replaces Circular No. 27/2017/TT-BTTTT dated October 20, 2017 of the Ministry of Information and Communications on management, operation, connection, use, and security assurance on specialized data transmission networks of Party and State agencies and Circular No. 12/2019/TT-BTTTT dated November 5, 2019 of the Ministry of Information and Communications amending and supplementing certain provisions of Circular No. 27/2017/TT-BTTTT.

3. During the implementation process, if there are any difficulties, relevant agencies and organizations shall promptly reflect them to the Ministry of Information and Communications (Central Post Office) for consideration, supplementation, and amendment.

 

 

Appendix I

SPECIALIZED DATA TRANSMISSION NETWORK CONNECTION MODEL
(Issued together with CircularDecision No. 19/2023/TT-BTTTT dated 25 the 12 năm 2023 of the Minister of Information and Communications)

MODEL 01

OVERALL NETWORK CONNECTION MODEL

1. The overall network connection model guides the connection of the trunk network, first-level access network, and second-level access network.

2. The trunk network connects the first-level access network, second-level access network, and national information systems.

3. The urban network connects from terminal devices of the first-level access network located at Party and State agencies in Hanoi, Da Nang, and Ho Chi Minh City to the connection gateway.ẵ4. The first-level access network connects from terminal devices of the first-level access network to the connection gateway.

5. The second-level access network connects from terminal devices of the second-level access network to the connection gateway.

MODEL 02

 

CONNECTION MODEL OF DATA CENTERS LOCATED AT MINISTRIES, SECTORS, LOCALITIES WITH THE SPECIALIZED DATA TRANSMISSION NETWORK

1. Model guiding the connection of data centers located at ministries, sectors, localities with the specialized data transmission network.

2. The specialized data transmission network connects users of the first-level access network, second-level access network, and data centers of ministries, sectors, and localities through the connection gateway.ngMODEL 03

CONNECTION MODEL OF DATA CENTERS LOCATED AT TELECOMMUNICATION ENTERPRISES WITH THE SPECIALIZED DATA TRANSMISSION NETWORK

 

1. Model guiding the connection of data centers of ministries, sectors, and localities located at telecommunication enterprises with the specialized data transmission network.

2. The specialized data transmission network connects users of the first-level access network, second-level access network, and data center partitions through the connection gateway at the provincial and municipal levels.

2. The specialized data transmission network connects users of the first-level access network, second-level access network, and data centers of ministries, sectors, and localities through the connection gateway.ngMODEL 04

CONNECTION MODEL OF LOCAL ORGANIZATIONS AND ORGANIZATIONS INTO THE SPECIALIZED DATA TRANSMISSION NETWORK, amended and supplemented by Decree No. 109/2025/NĐ-CP and Decree No. 193/2025/NĐ-CP1. Model guiding the connection of local organizations and organizations into the specialized data transmission network.

 

2. The wide area network combined with the specialized data transmission network connects organizations and institutions within the jurisdiction including users of the first-level access network (Provincial Party Committees, Municipal Party Committees, People's Councils, People's Committees of provinces and centrally governed cities), users of the second-level access network, and entities not belonging to the specialized data transmission network users.

MODEL 05

2. The specialized data transmission network connects users of the first-level access network, second-level access network, and data centers of ministries, sectors, and localities through the connection gateway.ngCONNECTION MODEL OF OTHER TELECOMMUNICATION NETWORKS WITH THE SPECIALIZED DATA TRANSMISSION NETWORK

1. Model specifying the connection of other telecommunications networks with the specialized data transmission network.

 

2. The specialized data transmission network and other telecommunications networks connect through channels between the two networks, establishing routing on the specialized data transmission network connection gateway and IP address translation equipment for the other network.

SAMPLE APPLICATION FOR REGISTRATION TO USE IP ADDRESS ON THE SPECIALIZED DATA TRANSMISSION NETWORK

2. The specialized data transmission network connects users of the first-level access network, second-level access network, and data centers of ministries, sectors, and localities through the connection gateway.ng/2023/TT-BTTTT dated

 of the Minister of Information and Communications), amended and supplemented by Decree No. 109/2025/NĐ-CP and Decree No. 193/2025/NĐ-CP(Applicant Unit)

 

Seal Registration Certificate

, day ... month ... year
(Attached to Circular No. 19APPLICATION FOR REGISTRATION TO USE IP ADDRESS ON THE SPECIALIZED DATA TRANSMISSION NETWORK25 month12 year 2023

Respected Central Post Office,

Legal representative:

Position:

Website: https://cpt.gov.vn

 

 

- Office of the President of the StatecouncillORSPerson responsible for IP management:ệ:

Services used on the connection

Organization/Local Area AProvincial People's Committees set specific pricesOrganization/Local Area BCMINIMUM TECHNICAL REQUIREMENTS FOR END-USER DEVICES

/2023/TT-BTTTT dated

Email: [email protected]

Website: https://cpt.gov.vn

 

ANNEX

LIST OF UNITS REGISTERED TO USE SPECIAL PURPOSE DATA TRANSMISSION NETWORK IP ADDRESSES
(Attached to the consolidated document issued on .../.../No. …../…. /.../ of ...)…. )

 

ANNEX III

MINIMUM TECHNICAL REQUIREMENTS FOR END-USER EQUIPMENT
(Attached to Circular No. 19/2023/TT-BTTTT dated 25Article 1. This Circular stipulates regulations on receiving citizens, handling and resolving complaints, reports, petitions, and reflections of the Ministry of Information and Communication including: citizen reception work; receipt, handling, and resolution of complaints, reports, petitions, and reflections; ensuring conditions for citizen reception, complaint resolution, petition resolution, reflection resolution; management of complaint and report resolution work and reporting systems.12 of the Minister of Information and Communications in 2023)

1. Minimum technical requirements for access network terminal equipment at level I:I:

a) Number of connection ports: 08 LAN (Local Area Network) ports and 04 WAN (Wide Area Network) ports;

b) Support for Layer 2 or Layer 3 transport and routing protocols of the OSI (Open Systems Interconnection) model;

c) Support for network management and monitoring protocols such as SNMP (Simple Network Management Protocol), Syslog (System Logging Protocol), or equivalent features;

d) Support for IPv6 protocol;

đ) Support for authenticated and encrypted configuration management methods.

2. Minimum technical requirements for access network terminal equipment at level II:

a) Number of connection ports: 02 LAN ports and 01 WAN port;

b) Support for network management and monitoring protocols such as SNMP, Logs, Syslog, or equivalent features;

c) Support for IPv6 protocol;

d) Support for authenticated and encrypted configuration management methods.

3. Installation requirements for access network terminal equipment and auxiliary technical infrastructure:

a) Access network terminal equipment must be installed in locations with environmental conditions that ensure temperature, power supply, and safety;

- Temperature:

+ For equipment located in server rooms: required temperature from 20°C to 25°C; humidity from 40% to 55%;C+ For equipment located in office spaces: required temperature up to 32°C; humidity from 40% to 80%.

- Power supply: one reliable power source with an uninterruptible power supply (UPS).Plan for handling assets after the expiration of the joint venture and association period 20°Cb) The user is responsible for ensuring the continuous operation of the access network terminal equipment, maintaining a 24-hour connection to the dedicated data transmission network every day and seven days a week, including holidays and public holidays.

- Power Supply: a reliable power source with uninterruptible power supply (UPS) equipment.

b) The user is responsible for ensuring continuous operation of the end-user equipment of the access network, connecting to the Special Purpose Data Transmission Network for 24 hours a day, 7 days a week, including public holidays,development and weekends,policies3. Experts, leading scientists, chief engineers participating in national defense and security industrial activities at key national defense industrial facilities and key security industrial facilities.