1. The establishment, expansion and upgrading of national important information system shall be subject to network information security auditing prior to operation and exploitation. 2. The Ministry of Information and Communications shall preside over and cooperate with the Ministry of Defense, the Ministry of Public Security and relevant ministries and sectors to prepare a list of national important information systems and submit for the Prime Minister to issue. Article 27. Responsibilities for securing network information security for national important information systems 1. Owners of national important information systems shall: a) Implement regulations set forth in Article 25.2 of this Law; b) Periodically assess network information security risks. This shall be done by a specialized organization that is appointed by competent authorities; c) Deploy standby solutions for information systems; d) Make protective plans and maneuver plans for protecting national important information systems. 2. The Ministry of Information and Communications shall: a) Preside over and cooperate with owners of national important information systems, the Ministry of Public Security and relevant ministries and sectors to instruct, supervise, inspect and examine activities of network information security protection for national important information systems, except for the systems set forth in items 3 and 4 of this Article; b) Require telecommunications companies, information technology companies to participate in technical consultancy, support and response to network information security incidents for information systems of national importance. 3. The Ministry of Public Security shall preside over, instruct, supervise, inspect and examine activities of network information security protection for national important information systems under its administration; cooperate with the Ministry of Information and Communications, relevant owners of national important information systems, ministries, sectors and People’s Committees at various levels in safeguarding national important information systems upon request of competent agencies. 4. The Ministry of Defense shall preside over, instruct, supervise, inspect, and examine network information security protection activities for national important information systems under its administration. 5. The Government Information Security Commission shall preside and apply encoding solutions to national important information systems that belong to state bodies, political and social-political organizations; cooperate with owners of national important information systems in network information security monitoring under current laws. Section 4 PREVENTION OF NETWORK INFORMATION CONFLICTS Article 28. Responsibilities of organizations and individuals in prevention of network information conflicts 1. Organizations and individuals shall, within their duties and power: 10