Circular No. 29/2020/TT-BTTTT guiding the appointment and salary grading for positions and professions of information technology specialists.

MINISTRY OF INFORMATION AND COMMUNICATION COMMUNICATION -------	SOCIALIST REPUBLIC OF VIET NAM Independence - Freedom - Happiness ---------------
Number: 08/2022/TT-BTTTT	Hanoi, June 30, 2022

CIRCULAR

PROVISIONS ON CODE NUMBER, STANDARDS FOR OCCUPATIONAL TITLES AND GRADING OF SALARIES FOR SPECIALIST CIVIL SERVANTS IN INFORMATION TECHNOLOGY AND INFORMATION SECURITY

Pursuant to the Civil Servant Law dated November 15, 2010; and the Law Amending and Supplementing Certain Provisions of the Civil Servants and Public Officials Law and the Civil Servant Law dated November 25, 2019;

Based on the proposal of the Director of the Cadre and Civil Servant Department;

Pursuant to Decree No. 89/2021/NĐ-CP dated October 18, 2021 of the Government amending and supplementing certain articles of Decree No. 101/2017/NĐ-CP dated September 1, 2017 of the Government on training and capacity building for cadres, civil servants, and public officials;

Pursuant to Decree No. 204/2004/NĐ-CP dated December 14, 2004 of the Government on salary system for cadres, civil servants, public officials, and armed forces; and Decree No. 17/2013/NĐ-CP dated December 19, 2013 of the Government amending and supplementing certain articles of Decree No. 204/2004/NĐ-CP dated December 14, 2004 of the Government on salary system for cadres, civil servants, public officials, and armed forces;

Pursuant to Decree No. 17/2017/NĐ-CP dated February 17, 2017, issued by the Government, on the functions, tasks, powers, and organizational structure of the Ministry of Information and Communications;

The phrase "or examination" is abolished pursuant to Clause 6, Article 8 of Circular No. 15/2025/TT-BVHTTDL dated November 25, 2025, of the Minister of Culture, Sports and Tourism amending and supplementing certain articles of Circulars prescribing job codes, qualification standards, and salary grades for civil servants in the heritage culture, library, grassroots cultural activities, sports, fine arts, art performance, film, and cultural propaganda sectors, which takes effect from January 15, 2026.

The Minister of Information and Communications issues this Circular regulating job codes, occupational standards, and salary grading for information technology and cybersecurity professionals,

PART I

GENERAL PROVISIONS

Article 1. Scope of Regulation and Applicability

1. This Circular stipulates code number, standards for occupational titles and grading of salaries for specialist civil servants in information technology and information security (in cases where units arrange dedicated positions for information security according to approved job position plans).

2. This Circular applies to the positions of information technology and cybersecurity professionals working at public service units and other related organizations and individuals.

Article 2. Interpretation of Terms

The terms used in this Circular shall be understood as follows:

1. Information technology training fields include: Computer Education, Applied Mathematics, Mathematical Computing, Computer Mathematics, Electronics and Informatics, Telecommunications Technology, Communication Engineering, Management Information Systems, Control and Automation Engineering, and Computer and Information Technology fields as defined in the Fourth-Level Education and Training Catalogue at bachelor's, master's, and doctoral levels issued by the Ministry of Education and Training, and the Fourth-Level Vocational Education and Training Catalogue at intermediate and college levels issued by the Ministry of Labor, Invalids and Social Affairs.

2. Related information technology training fields include: Electronics and Telecommunications; Telecommunications Engineering; Electronic Engineering; Telecommunication Engineering; Electrical and Electronic Engineering; Electronic and Telecommunication Engineering; Management Information Systems; Electronic and Telecommunication Engineering; Control and Automation Engineering; Control and Automation Engineering; Mathematical Foundations for Computing.

Article 3. Job Codes for Occupational Titles

1. Occupational titles for cybersecurity professionals include:

a) Cybersecurity Level I - Job Code V.11.05.09

b) Cybersecurity Level II - Job Code V.11.05.10

c) Information Security Level III - Code Number V.11.05.11

d) Information Security Level IV - Code Number V.11.05.12

2. Occupational titles for information technology professionals include:

a) Information Technology Level I - Code Number V.11.06.12

b) Information Technology Level II - Code Number V.11.06.13

c) Information Technology Level III - Code Number V.11.06.14

d) Information Technology Level IV - Code Number V.11.06.15

3. Performing professional tasks as prescribed by the law on notarization.

1. Implement the Party’s guidelines, policies, and state laws, as well as industry and local regulations on information and communications.

2. Be honest, objective, and highly responsible for assigned tasks; fulfill all duties of a public official in professional activities.

3. Have a sense of self-improvement in ethics, maintaining professional integrity, honor, and reputation; not to abuse work positions or assigned tasks for personal gain; be united, creative, willing to learn new things, and continuously improve their qualifications; have a sense of cooperation, helping colleagues, sharing work experience; actively participate in scientific research projects, technical improvements to enhance professional development and qualifications.

4. Adhere to laws on protecting state secrets; ensure information security and confidentiality, as well as national defense and security.

Chapter II

OCCUPATIONAL STANDARDS

Section 1. INFORMATION SECURITY OCCUPATIONAL TITLES

Article 5. Level I Information Security - Code V.11.05.09

1. Duties:

a) Take the lead in building and organizing the implementation of programs, projects, and plans on information security at the ministry or sector level or equivalent and above;

b) Direct the organization of design, construction, and implementation of information system security assurance plans according to levels for specialized information systems, integrated databases at national, sectoral, inter-sectoral, ministry levels, or economic zones, inter-provincial, or provincial levels;

c) Direct the development of information system protection plans; develop information network security policies; implement inspections and evaluations of compliance with approved information system security assurance plans according to levels;

d) Review proposals and projects on information security for information systems, specialized databases, integrated databases;

d) Resolve complex information security issues; directly participate in maintaining, servicing, and repairing security systems for information systems of the unit or sector according to assigned tasks; respond to and resolve information network security incidents, disruptions of technical infrastructure, software systems, information systems, and databases when required;

e) Lead the compilation of technical guidance materials, regulations, and procedures for information security; develop programs, materials, and training sessions for lower-level information security civil servants;

g) Lead or participate in research topics in the field of information security; summarize and draw lessons from professional and operational experiences, technical management, and the implementation of information security in practice;

h) Participate in implementing tasks related to cybersecurity as prescribed or upon request from competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's guidelines, laws, and development orientations, strategies, and policies in the field of information security;

b) Proficient in professional skills; understand the situation and trends in domestic and international information security; capable of organizing research, updating, and applying new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Have the ability to organize and direct the execution of tasks, possess skills in drafting professional documents, and present issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

4. Requirements for candidates participating in examinations or being considered for promotion to the Level I Information Security Professional Title

a) Must have held the Information Security Level II occupational title or equivalent for a minimum of six years (72 months). In case of equivalent time, must have held the Information Security Level II occupational title for at least one year (12 months) up to the deadline for submitting registration forms for examination or promotion;

b) During the period holding the Information Security Level II occupational title or equivalent, must have led the research and development of at least two (2) national, ministerial, departmental, or provincial level information security projects, programs, or initiatives that have been accepted and promulgated by competent authorities; or led the development of security assurance plans for at least two (2) level 4 and 5 information systems approved by competent authorities; or led the research and development of at least one (1) information security product or solution that has won a ministerial-level award or higher;

Article 6. Information security level II - Code V.11.05.10

1. Duties:

a) Take the lead or participate in building and organizing the implementation of information security programs, projects, and plans for agencies and units;

b) Lead or participate in organizing the design, construction, and implementation of information system security assurance plans according to levels for specialized information systems, integrated databases at national, sectoral, inter-sectoral, ministry levels, or economic zones, inter-provincial, or provincial levels;

c) Take the lead or participate in building information system protection plans; implement inspections and evaluations of the degree of compliance with approved information system security assurance schemes according to levels;

d) Review proposals and projects on information security for information systems, specialized databases, integrated databases;

d) Resolve complex information security issues; directly participate in maintaining, servicing, and repairing security systems for information systems of the unit or sector according to assigned tasks; respond to and resolve information network security incidents, disruptions of technical infrastructure, software systems, information systems, and databases when required;

e) Lead or participate in compiling technical guidance materials, regulations, procedures, and norms for information security; develop information security policies; develop programs, materials, and training sessions for lower-level information security civil servants;

g) Lead or participate in research topics in the field of information security; summarize and draw lessons from professional and operational experiences, technical management, and the implementation of information security in practice;

h) Participate in building economic-technical norms in analyzing, designing, and deploying information security systems;

i) Participate in implementing cybersecurity coordination tasks as prescribed or upon request from competent authorities;

Clause 2. Professional and vocational competence criteria:

a) Proficiently grasp the Party's guidelines, laws, development orientations, strategies, and policies in the field of information security;

b) Proficient in specialized industry practices; thoroughly understand the situation and development trends of the information security sector both domestically and internationally; capable of organizing research, updating, and applying new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Capable of working independently or in teams; have skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

Clause 3. Education and training criteria:

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

4. Requirements for professionals participating in examinations or being considered for promotion to the information security level II occupational title

a) Must have held the title of information security profession level III or equivalent for at least nine years (one hundred eight months, excluding probationary and trial periods). In cases with equivalent time, must have held the title of information security profession level III for at least one year (twelve months) up to the deadline for submitting registration applications for examination or promotion;

b) During the period holding the title of information security profession level III or equivalent, must have led or participated in researching and developing at least two (two) projects, plans, programs on information security fields from the grassroots level upwards, which have been approved and issued by competent authorities; or led or participated in building security assurance plans for information systems at level three or higher, which have been approved by competent authorities; or led in formulating at least two (two) regulations, rules, technical procedures on information security that have been issued by competent authorities; or participated in researching and developing at least one (one) information security product or solution that has won a ministry-level, provincial-level, or equivalent award;

Article 7. Information Security Level III - Code V.11.05.11

1. Duties:

a) Maintain, warranty, and service the systems ensuring safety for the unit's and industry's information systems according to assigned tasks; resolve incidents related to system software, information systems, databases when requested;

b) Develop and implement plans to ensure information system security at appropriate levels for information systems and databases;

c) Review projects and plans concerning information security for specialized information systems, integrated databases; implement inspections and evaluations of compliance with security assurance plans for information systems according to levels that have been approved;

d) Establish standard procedures for responding to and handling computer incidents;

đ) Participate in developing and organizing the implementation of programs, projects, and plans on information security for agencies and units;

d) Participate in compiling technical guidance materials, procedures, norms on information security; train and enhance skills for lower-level information security professionals; establish economic-technical standards in analyzing, designing, and deploying information security systems;

e) Participate in research topics in the field of information security; summarize and draw lessons from professional and operational experiences, technical management, and the implementation of information security in practice;

g) Participate in performing coordinated cybersecurity tasks as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's policies, laws, and development orientations, strategies, and policies in the field of information security;

b) Understand the situation and development trends of the information security sector both domestically and internationally; capable of organizing research, updating, and applying new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Capable of working independently or in teams; have skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

4. Requirements for candidates applying for or being considered for promotion to the Information Security Level III position

Must have held the title of information security profession level IV or equivalent for at least two years (twenty-four months, excluding probationary and trial periods). In cases with equivalent time, must have held the title of information security profession level IV for at least one year (twelve months) up to the deadline for submitting registration applications for examination or promotion;

Article 8. Information Security Level IV - Code V.11.05.12

1. Tasks

a) Maintain, warranty, and service the systems ensuring safety for the unit's and industry's information systems according to assigned tasks; collaborate to resolve incidents related to system software, information systems, databases when requested;

b) Implement standard procedures for responding to and handling computer incidents;

c) Participate in implementing programs, projects, and plans on information security for agencies and units;

d) Participate in supporting the compilation of technical guidance materials, procedures, and regulations on information security;

d) Participate in scientific research projects in the field of information security;

e) Participate in performing coordinated cybersecurity tasks as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's policies, laws, and development orientations, strategies, and policies in the field of information security;

b) Understand the situation and trends in the development of the information security industry both domestically and internationally; have the ability to organize research, update, and apply new technologies in professional activities;

c) Effectively perform tasks as stipulated by laws on information security and other relevant laws;

d) Have the ability to work independently or in teams, possess skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

3. Educational and Training Standards

a) Hold a college degree or higher in information technology or closely related fields;

b) Possess a certificate in professional career standard training for information security;

Mục 2. INFORMATION TECHNOLOGY PROFESSIONAL TITLES

Article 9. Information Technology Category I - Code V.11.06.12

1. Tasks

a) Lead in building and organizing the implementation of programs, projects, and plans on information technology at the ministry or sector level or equivalent;

b) Lead the organization in designing, developing, managing, and ensuring information security for specialized information systems, integrated databases at the national, sectoral, inter-sectoral, ministry level, or for economic zones or inter-provincial, provincial levels;

c) Lead in building regulations, procedures, technical guidance documents, and overall information technology architecture;

d) Lead in developing data strategies; guide and supervise the implementation of data management activities, data sharing, and exploitation activities at the ministry or sector level or higher;

đ) Lead the inspection, testing, evaluation of compliance with requirements, regulations, policies on information technology and information security of agencies, organizations, and information technology products and services; technical assessment of solutions to ensure information system security according to levels for projects, programs, tasks applying information technology; evaluate operational effectiveness, inspect, and determine the degree of compliance with approved basic and detailed designs of information systems;

e) Resolve complex issues related to the development, connection, and integration of information technology products and services; address incidents related to information security, information systems, and databases when required;

g) Lead or participate in scientific research topics on information technology; summarize professional experiences, management techniques, and practical applications of information technology;

h) Lead or participate in building programs, materials, and training for lower-level information technology staff;

i) Participate in establishing economic-technical norms in analysis, design, and application of information technology and information security;

k) Participate in implementing coordination tasks on cybersecurity as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's guidelines, laws, and development orientation, strategies, and policies on information technology and information security;

b) Proficient in specialized business operations; understand the situation and trends in the development of the domestic and international information technology industry; capable of organizing research, updating, and applying new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks in accordance with laws on information technology and information security and other relevant laws;

d) Have the ability to organize and direct the execution of tasks, possess skills in drafting professional documents, and present issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

4. Requirements for candidates applying for or being considered for promotion to the information technology job title category I;

a) Have held the title of information technology professional grade II or equivalent for a minimum of 06 years (72 months). In cases where the equivalent period is met, there must be at least 01 year (12 months) holding the title of information technology professional grade II up to the deadline for submitting registration forms for examination or promotion;

b) During the time holding the title of information technology professional grade II or equivalent, have led the research and construction of at least 02 (two) topics, plans, projects, programs in the field of information technology at the state, ministry, department, or provincial level, which have been accepted and issued by authorized bodies; or have led the review of at least 02 (two) group A and B information technology projects approved by authorized bodies; or have led the research and development of at least 01 (one) information technology product or solution that has won a ministry-level or equivalent award;

Article 10. Information Technology Level II - Code V.11.06.13

1. Tasks

a) Lead or participate in building and implementing programs, projects, and plans on information technology for agencies and units.

b) Lead or participate in analyzing, designing, developing specialized software and applications; establishing, installing, operating, and ensuring the security of specialized information systems and databases;

c) Lead or participate in drafting regulations, procedures, technical guidance documents; participate in establishing economic-technical norms in analysis, design, and application of information technology and information security;

d) Inspect, test, evaluate compliance with requirements, regulations, and policies on information technology and information security of agencies, organizations, and information technology products and services;

đ) Resolve complex issues related to the development, connection, and integration of information technology products and services; address incidents related to information security, information systems, and databases when required;

e) Lead or participate in managing and operating infrastructure technical systems for information technology, data integration centers, information systems, application programs, shared software of agencies and units;

g) Lead or participate in scientific research topics on information technology; summarize professional experiences, management techniques, and practical applications of information technology;

h) Participate in building training programs, materials, and conducting training sessions for lower-level information technology staff;

i) Participate in implementing cybersecurity coordination tasks as prescribed or upon request from competent authorities;

Clause 2. Professional and vocational competence criteria:

a) Proficiently understand the Party's guidelines, laws, and development directions, strategies, and policies in the field of information technology and information security;

b) Proficient in specialized business operations; understand the situation and trends in the development of the domestic and international information technology industry; capable of updating and applying new technologies, platforms, and standards in professional activities;

c) Effectively perform tasks in accordance with laws on information technology and information security and other relevant laws;

d) Capable of working independently or in teams; have skills in drafting professional documents and presenting issues entrusted for advisory and proposal purposes;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

4. Requirements for staff participating in examinations or evaluations for promotion to Information Technology Level II occupational title

a) Have held the title of information technology professional grade III or equivalent for a minimum of 09 years (108 months, excluding probationary and trial periods). In cases where the equivalent period is met, there must be at least 01 year (12 months) holding the title of information technology professional grade III up to the deadline for submitting registration forms for examination or promotion;

b) During the time holding the title of information technology professional grade III or equivalent, have led or participated in researching and constructing at least 02 (two) topics, plans, projects, programs in the field of information technology from the grassroots level upwards, which have been accepted and issued by authorized bodies; or have led or participated in reviewing at least 02 (two) information technology projects approved by authorized bodies; or have led or participated in drafting at least 02 (two) regulations, rules, technical procedures on information technology issued by authorized bodies; or have participated in researching and developing at least 01 (one) technological solution that has won a ministry-level or provincial-level award or equivalent;

Article 11. Information Technology Level III - Code V.11.06.14

1. Tasks

a) Manage and operate the technical infrastructure system, data integration centers, information systems, application programs, and shared software for agencies and units;

b) Inspect, test, evaluate compliance with requirements, regulations, and policies on information technology and information security of agencies, organizations, and information technology products and services;

c) Participate in building and implementing programs, plans, and projects on information technology for agencies and units;

d) Participate in analyzing, designing, programming, and ensuring the security of specialized information systems and databases;

đ) Participate in drafting regulations, procedures, technical guidance documents; participate in establishing economic-technical norms in analysis, design, and application of information technology and information security; train and enhance skills for lower-grade information technology professionals;

e) Conduct scientific research on information technology; summarize and draw lessons from professional and operational management, and implement the application of information technology in practice;

g) Participate in performing coordinated cybersecurity tasks as prescribed or upon request of competent authorities;

Clause 2. Professional Competence Standards

a) Proficiently understand the Party's guidelines, laws, and development directions, strategies, policies, and regulations in the field of information technology and information security;

b) Be informed about the situation and trends in the development of the information technology industry both domestically and internationally; have the ability to update and apply new technologies, platforms, and standards in professional activities;

c) Have the ability to work independently or in teams, and have the skills to draft professional documents assigned for advisory and proposal purposes;

d) Fulfill tasks according to laws on information technology and information security and other relevant laws;

đ) Be able to use foreign languages or ethnic minority languages (for staff working in ethnic minority areas) as required by job positions;

3. Educational and Training Standards

a) Hold a bachelor's degree or higher in information technology or closely related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

4. Requirements for staff participating in examinations or evaluations for promotion to Information Technology Level III occupational title

Have held the title of information technology professional grade IV or equivalent for a minimum of 02 years (24 months, excluding probationary and trial periods) for those recruited with an associate degree, and 03 years (36 months) (excluding probationary and trial periods) for those recruited with a diploma degree. In cases where the equivalent period is met, there must be at least 01 year (12 months) holding the title of information technology professional grade IV up to the deadline for submitting registration forms for examination or promotion.

Article 12. Information technology level IV - Code V.11.06.15

1. Tasks

a) Participate in analyzing, designing, developing, ensuring information security for information systems, specialized databases;

b) Participate in inspecting, testing, evaluating compliance with requirements, regulations, policies on information technology, information security, and information technology products and services of agencies and organizations;

c) Participate in managing and operating technical infrastructure systems for information technology, information systems, common application programs, and software of agencies and units; repair and resolve simple faults of information systems, computer networks, software, and databases of agencies and organizations;

d) Participate in implementing cybersecurity coordination tasks as prescribed or at the request of competent authorities;

Clause 2. Professional Competence Standards

a) Understand the Party's guidelines, laws, development orientation, strategies, policies, and regulations of the information technology and information security sector;

b) Possess the ability to research, update, and apply new technologies in professional activities;

c) Perform duties in accordance with laws on information technology, information security, and other relevant laws;

d) Possess the ability to work independently or in teams;

3. Educational and Training Standards

a) Hold a diploma or higher degree in information technology or related fields;

b) Hold a certificate for professional career training in the specialized field of information technology according to the job title criteria;

Chapter III

SALARY GRADING FOR INFORMATION SECURITY AND INFORMATION TECHNOLOGY PROFESSIONAL RANKS

Article 13. Principles of salary rating

1. The appointment and salary grading into professional ranks of information technology and information security specialized staff as prescribed in this Circular must be based on the job position, responsibilities, tasks, and professional qualifications and expertise assumed by the staff member.

2. When appointing from the current professional rank of staff to a corresponding specialized information technology and information security professional rank, it shall not combine with increasing salary grade or promotion of professional rank of staff.

Article 14. Appointment of information technology and information security professional positions

1. Staff who have been appointed to various levels of professional ranks of information technology staff according to Circular No. 45/2017/TT-BTTTT dated December 29, 2017 of the Minister of Information and Communications prescribing standards for professional ranks of information technology specialized staff (hereinafter referred to as Circular No. 45/2017/TT-BTTTT) and Circular No. 29/2020/TT-BTTTT dated October 28, 2020 of the Minister of Information and Communications guiding the appointment and salary grading for professional ranks of information technology specialized staff (hereinafter referred to as Circular No. 29/2020/TT-BTTTT) and the unit does not allocate a dedicated position for information security shall be appointed to corresponding information technology professional ranks, specifically as follows:

a) Level I System Administrator (code V11.06.12), Level I Information Technology Tester (code V11.07.16), Level I Software Developer (code V11.08.19), Level I Information Security Specialist (code V11.05.09) shall be appointed to Level I Information Technology Professional Rank (code V11.06.12);

b) Level II System Administrator (code V11.06.13), Level II Information Technology Tester (code V11.07.17), Level II Software Developer (code V11.08.20), Level II Information Security Specialist (code V11.05.10) shall be appointed to Level II Information Technology Professional Rank (code V11.06.13);

c) Level III System Administrator (code V11.06.14), Level III Information Technology Tester (code V11.07.18), Level III Software Developer (code V11.08.21), Level III Information Security Specialist (code V11.05.11) shall be appointed to Level III Information Technology Professional Rank (code V11.06.14);

d) System administrator grade IV (code V11.06.15), software developer grade IV (code V11.08.22) shall be appointed to information technology professional position grade IV (code V11.06.14);

2. Dedicated Information Security Specialists (in cases where the unit allocates a dedicated position for information security) who have been appointed to various levels of professional ranks of information security staff according to Circular No. 45/2017/TT-BTTTT and Circular No. 29/2020/TT-BTTTT shall continue to hold corresponding information security professional ranks according to this Circular;

3. The time holding information security, system administrator, information technology tester, and software developer professional ranks as prescribed in Circular No. 45/2017/TT-BTTTT shall be counted as the time holding information technology professional ranks to determine the conditions for taking the examination for promotion to higher information technology professional ranks according to this Circular;

Article 15. Salary Classification

1. The professional ranks of information technology and information security staff specified in this Circular shall apply the Specialized Professional Salary Scale for State-Owned Enterprise Staff (Table 3) issued together with Decree No. 204/2004/NĐ-CP dated December 14, 2004 of the Government on the remuneration system for cadres, civil servants, staff members, and armed forces personnel (hereinafter referred to as Decree No. 204/2004/NĐ-CP), specifically as follows:

a) Information Technology Grade I and Cybersecurity Grade I shall apply the salary coefficient of Category A3, Group 1 (A3.1) with 6 levels, from salary coefficient 6.20 to salary coefficient 8.00;

b) Information Technology Grade II and Cybersecurity Grade II shall apply the salary coefficient of Category A2, Group 1 (A2.1) with 8 levels, from salary coefficient 4.40 to salary coefficient 6.78;

c) Information Technology Grade III and Cybersecurity Grade III shall apply the salary coefficient of Category A1 with 9 levels, from salary coefficient 2.34 to salary coefficient 4.98;

d) Level IV Information Technology Professional Rank, Level IV Information Security Professional Rank shall apply the salary coefficient of type B staff with 12 grades, from salary coefficient 1.86 to salary coefficient 4.06. In case staff with college degree or higher are recruited into positions requiring Level IV professional rank, they shall be placed at grade 2; if there is a probationary period, during the probationary period, they shall enjoy 85% of the Level IV professional rank grade 2 salary.

2. The salary grading for staff transitioning from their current professional ranks to information technology and information security specialized staff professional ranks shall be implemented according to the guidance provided in Clause 2, Section II of Circular No. 02/2007/TT-BNV dated May 25, 2007 of the Minister of Home Affairs guiding salary grading when upgrading, transferring, or changing categories of civil servants and staff members (hereinafter referred to as Circular No. 02/2007/TT-BNV).

3. In cases where staff with college degree were hired and already graded at type A0 staff according to Decree No. 204/2004/NĐ-CP, now being appointed to Level IV information technology and information security professional ranks, the basis for determining the salary grade shall be based on the time of work with mandatory social insurance contributions according to the scale and table of salaries prescribed by the State (excluding the probationary period) as follows:

For the second-level scale, the salary grade B table, every two years (twenty-four months), the employee shall be promoted to the next salary grade (if there is non-consecutive working time without social insurance benefits, it will be accumulated). In cases where the working period is extended due to failure to complete assigned tasks or disciplinary actions under the law, the regular salary promotion period will be extended accordingly. If the employee is promoted ahead of schedule due to outstanding achievements in their duties, the time for such early promotion shall be counted towards being promoted to a higher salary grade earlier than scheduled. After converting the working time to be ranked in the salary grade of the appointed occupational title, if there are months that have not reached twenty-four months, these months shall be counted towards the next salary promotion review period or the review for exceeding the tenure allowance framework (if applicable).

After transferring the salary ranking to the information technology occupational title grade IV or cybersecurity occupational title grade IV, if the salary coefficient assigned to these occupational titles plus the exceeding tenure allowance (if applicable) is lower than the salary coefficient enjoyed at the previous occupational title, the employee shall enjoy the retained difference coefficient to equalize the salary coefficient (including the exceeding tenure allowance, if applicable) currently enjoyed at the previous occupational title. This retained difference coefficient shall be enjoyed throughout the time the employee is ranked in the information technology occupational title grade IV or cybersecurity occupational title grade IV. Thereafter, if the employee is promoted to a higher occupational title, this retained difference coefficient shall be added to the current salary coefficient (including the exceeding tenure allowance, if applicable) to rank the salary for the newly appointed occupational title upon promotion and cease enjoying the retained difference coefficient from the date of receiving the new occupational title salary.

4. The promotion of occupational title grades for information technology and cybersecurity professionals shall be carried out after they have been appointed and ranked salaries for the specified information technology and cybersecurity occupational titles according to this Circular and implemented according to the guidance provided in Clause 1, Section II of Circular No. 02/2007/TT-BNV.

Chapter IV

IMPLEMENTING PROVISIONS

Article 16. Effective Date

1. This Circular takes effect from August 15, 2022.

2. Repeal Circular No. 45/2017/TT-BTTTT dated December 29, 2017, issued by the Minister of Information and Communications, specifying the standards for information technology professional occupational titles.

3. Repeal Circular No. 29/2020/TT-BTTTT dated October 28, 2020, issued by the Minister of Information and Communications guiding the appointment and salary ranking for information technology professional occupational titles.

4. In cases where the legal normative documents cited in this Circular are amended, supplemented, or replaced, implementation shall follow the amended, supplemented, or replaced legal normative documents.

Article 17. Transitional Provisions

1. Employees who have been appointed to the cybersecurity professional, system administrator, information technology certification officer, software development occupational titles as stipulated in Circular No. 45/2017/TT-BTTTT or other occupational titles, now appointed to the information technology and cybersecurity professional occupational titles as stipulated in this Circular, the competent authority managing and using employees shall be responsible for creating conditions for employees to supplement the remaining criteria of the information technology and cybersecurity professional occupational titles appointed.

2. For agencies and units that have been approved by the competent authority to implement plans for promoting occupational title grades for information technology professionals before the effective date of this Circular, they may continue to implement according to the approved plans until completion.

Article 18. Responsibility for Implementation

1. The Minister, the Heads of Ministries equivalent to Ministries, the Heads of Government Agencies, the Chairpersons of Provincial People's Committees directly under the Central Government, and related organizations, entities, and individuals shall be responsible for implementing this Circular.

2. During the implementation process, if there are difficulties or obstacles, organizations and individuals are requested to report to the Ministry of Information and Communications for consideration and resolution./.

Place of Receipt: - Prime Minister and Deputy Prime Ministers (for comments); - Ministries, ministries-equivalent agencies, and government agencies; - Central Party Office and Party Committees; - National Assembly's Office; - President's Office; - Supreme People's Procuracy; - Supreme People's Court; - State Audit Office; - CENTRAL ORGANIZATIONS OF ASSOCIATIONS; - People's Committees of provinces and centrally governed cities; - Legal Documents Supervision Bureau (Ministry of Justice); - Official Gazette, Government Portal; - Ministry of Information and Communications: the Minister and Deputy Ministers, the Ministry’s Online Portal; - For record: Legal Department, Cadre and Civil Servant Affairs Department, Archives.

THE MINISTER Nguyen Manh Hung