Decision No. 39/2008/QD-BTTTT stipulates the functions, tasks, powers, and organizational structure of the Vietnam Computer Emergency Response Team (VNCERT).

Pursuant to …;

||| Regulations on functions, tasks, powers, and organizational structure of

Vietnam Computer Emergency Response Team (VNCERT) Center

 _________________________

MINISTER OF INFORMATION AND COMMUNICATIONS

Pursuant to Decree No. 178/2007/NĐ-CP dated December 3, 2007 of the Government stipulating the functions, tasks, powers, and organizational structure of Ministries and ministerial-level agencies;

BASED ON THE GOVERNMENT DECREE NO. 187/2007/NĐ-CP OF DECEMBER 25, 2007 ON THE FUNCTIONS, TASKS, POWERS, AND ORGANIZATIONAL STRUCTURE OF THE MINISTRY OF INFORMATION AND COMMUNICATIONS;

Pursuant to Decision No. 339/2005/QĐ-TTg dated December 20, 2005 of the Prime Minister on the establishment of the Vietnam Computer Emergency Response Team (VNCERT) Center;

Pursuant to Decision No. 370/QĐ-TTg dated April 10, 2008 of the Prime Minister on units under the Ministry of Information and Communications;

At the proposal of the Director of the Organization and Cadres Department and the Director of the Vietnam Computer Emergency Response Team (VNCERT) Center.

DECISION:

Article 1. Position and Functions

The Vietnam Computer Emergency Response Team (VNCERT) Center is a unit under the Ministry of Information and Communications, performing the function of coordinating activities for computer incident response nationwide; promptly warning about issues related to computer network security; building and collaborating in building technical standards for computer network security; promoting the formation of computer emergency response teams (CERTs) within agencies, organizations, and enterprises; serving as the focal point for cooperation with foreign CERT organizations.

The Vietnam Computer Emergency Response Team (VNCERT) Center is a self-financing public service unit with legal personality, having its own seal and separate bank account for transactions in accordance with the law; its main office is located in Hanoi City.

b) Draft five-year and annual socio-economic development plans for the province; major economic and social balances for the province; draft five-year and annual plans, programs, projects, measures to organize and implement tasks related to socio-economic development, finance-budget, planning-investment, and other tasks within the scope of state management of the Department of Finance as prescribed by law;

The Vietnam Computer Emergency Response Team (VNCERT) Center has the following tasks and powers:

1. Coordinating national internet incident response activities to prevent and combat cyber incidents and participate in combating cybercrime and terrorism within the country and within the framework of international cooperation.

Coordinating and guiding organizations and businesses providing internet services in handling incidents and fulfilling their obligations to process and retain original data for the purpose of ensuring national internet security.

Coordinating domestic organizations and businesses providing cybersecurity services to handle major incidents on the national internet according to regulations. International coordination in coordinating responses to incidents from abroad or from within the country.

2. Collecting information on internet security. Statistics, compiling, and analyzing data on national internet security to assist state management activities regarding cybersecurity in information technology and telecommunications activities. Monitoring and detecting potential risks and cybersecurity incidents to provide early warnings to relevant authorities and the community; participating in cybersecurity management activities in information technology and telecommunications.

3. Collecting and evaluating the latest technologies and solutions for ensuring computer network security to widely recommend them. Organizing regular research to master new techniques while developing Vietnamese-specific solutions and techniques for computer network security to propose emergency incident response solutions and recommend preventive measures.

4. Organizing research and collaborating with functional units to develop technical standards and norms for computer network security, including technical standards for information systems, training frameworks for network users, procedures for preventing and handling incidents, and other legal documents on computer network security.

5. Promoting the capacity for computer emergency response and forming CERT systems within agencies, organizations, and enterprises. Raising public awareness about computer information security; publishing publications on computer network security in accordance with the law.

6. Participating and cooperating with international CERT organizations. Serving as the focal point for exchanging information with international cybersecurity centers. Participating in international forums, training activities, and seminars related to the field.

Cooperating with international organizations to exploit information, techniques, and knowledge for preventing and combating cyber incidents and cybercrime, promoting Vietnamese computer network security, and seeking international assistance to enhance Vietnam's cybersecurity capabilities.

7. Participating in state management activities concerning the operations of associations and non-governmental organizations in the field of computer information security. Having the right to request organizations and individuals operating on the national internet to provide relevant information and statistical data on cybersecurity issues.

8. Providing technical cybersecurity evaluation services for information systems and products and technologies ensuring cybersecurity used in computer networks. Inspecting, evaluating, and certifying compliance with standards for organizations providing computer incident response and cybersecurity services.

Organizing training and development services for network construction and cybersecurity, conducting examinations and issuing certificates for network management and cybersecurity qualifications in accordance with current state regulations and the Ministry of Information and Communications' classification.

Providing other services in consultancy, research, implementation, production, storage, and provision of information for cybersecurity purposes; generating additional revenue to expand the scope and scale of operations consistent with the Center's functions, tasks, and powers, and in accordance with the law, preserving and developing assigned resources.

10. Being entitled to collect, manage, and use fees and charges as prescribed by law.

11. Managing the organization of civil servants and assets of the Center in accordance with the law and the classification of the Minister.

12. Performing other tasks assigned by the Minister.

Article 3. Organizational Structure and Staffing

The Vietnam Computer Emergency Response Center shall have a Director, Deputy Directors, an administrative apparatus, and subordinate units.

The Director shall be responsible to the Minister for the results of performing the functions, tasks, and authorities stipulated in this Decision.

Deputy Directors assist the Director in directing and managing the operations of the Center and shall be responsible to the Director for the assigned tasks.

Organizational Structure:

- Administrative Office- General Department

- Planning and Accounting Office

- Operations Office

- System Engineering Office

- Research and Development Office

- Consulting and Training Office

- Branch in Ho Chi Minh City

- Branch in Da Nang City

The branches in Ho Chi Minh City and Da Nang City shall have their own seals and separate accounts for transactions in accordance with the provisions of the law.

CFunctions, tasks, authorities of the offices and branches and the working relationships between the units of the Center shall be defined by the Center's Director.

The staffing of officials and employees of the Center shall be established by the Center's Director and submitted to the Minister for decision.

Article 4. Effective date

This Decision shall take effect fifteen days from the date of publication in the Official Gazette. Decree No. 13/2006/QĐ-BBCVT dated April 28, 2006 of the Minister of Posts and Telecommunications on the functions, tasks, authorities, and organizational structure of the Vietnam Computer Emergency Response Center is hereby repealed.

Article 5. Responsibilities for Implementation

The Head of the Office, the Director of the Cadre and Civil Servant Department, the Director of the Vietnam Computer Emergency Response Center, and the Heads of agencies and units under the Ministry of Information and Communications are responsible for implementing this Decision.