information systems, management systems for network information security with standards
of network information security.
5. The Ministry of Science and Technology shall preside over, coordinate relevant
agencies to appraise and promulgate national standards of network information security under
current laws on standards and norms.
6. The Ministry of Information and Communications shall:
a) Draft the national standards of network information security, excepting national
standards mentioned in Clause 7 of this Article;
b) Issue the norms of network information security, excepting national standards
mentioned in Clause 7 of this Article; and stipulate network information security regulation
conformity assessment;
c) Administer the quality of network security products and services, except for civil
cryptographic products and services;
d) Register, appoint and manage operations of the organization in charge of
certification of network information security conformity; except for the organization in
charge of conformity certification for civil cryptographic products and services.
7. The Government Cipher Committee shall assist the Minister of Defense to draft the
national standards applicable to civil cryptographic products and services, submit same for
competent agencies to promulgate and instruct for implementation; prepare and submit same
for the Minister of Defense to promulgate the national norms of civil cryptographic products
and services, appoint and manage operations of the organization in charge of conformity
certification for civil cryptographic products and services; manage the quality of civil
cryptographic products and services.
8. Provincial People’s Committees shall establish, issue and instruct for
implementation of local norms of network information security; manage the quality of civil
cryptographic products and services in their administration areas.
Article 39. Assessment of network information security conformity to standards
and norms
1. Assessment of conformity to standards and norms of network information security
shall be performed for the cases as follows:
a/ Regulation conformity certification or announcement shall be conducted and
regulation conformity stamps shall be used before an organization or individual markets
network information security products;
b/ To serve the state management of network information security.
2. Assessment of conformity to standards and norms of network information security
for national important information systems and for state management of network information
security shall be performed by the conformity assessment organization appointed by the
Minister of Information and Communications.
3. Assessment of conformity to standards and norms of civil cryptographic products
and services shall be performed by the conformity assessment organization appointed by the
Minister of Defense.
4. The mutual recognition of assessment results regarding conformity to standards and
norms of network information security between Vietnam and a country or territory and
16
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents