7. Cooperating, giving conditions for competent state bodies to take professional measures when required. Article 36. Responsibility of organizations, individuals using civil cryptographic products and services 1. Complying with regulations undertaken with the provider of civil cryptographic products regarding the use management of cryptographic keys, transfer, repair, maintenance, abandonment and destruction of civil cryptography products, and other relevant contents. 2. Providing necessary information relating to cryptographic keys for competent state bodies upon request. 3. Cooperating, giving conditions for competent state bodies to take measures to prevent crimes of stealing information or cryptographic keys and using civil cryptographic products for illegal purposes. 4. Organizations, individuals using a civil cryptographic product which is provided by a provider not licensed for trading in civil cryptographic products shall declare it with the Government Cipher Committee, except for diplomatic agencies, foreign consulates and representative agencies of inter-governmental organizations in Vietnam. CHAPTER V STANDARDS AND NORMS ON NETWORK INFORMATION SECURITY Article 37. Standards and norms of network information security 1. Network information security standards include international standards, regional standards, foreign standards, national standards and manufacturer standards on information systems, hardware, software, and systems for management and safe operation of network information which are announced and recognized for application in Vietnam. 2. Technical regulations of network information security include national and local norms on information systems, hardware, software products, and information systems, procedures of management and operation of network information security that are established, issued and applied in Vietnam. Article 38. Management of Standards and norms of network information security 1. Certification of network information security norms conformity means certifying that hardware, software products, information systems, management systems for network information security conform to technical norms of network information security. 2. Publication of network information security norms conformity means an organization or company announces the conformity of hardware, software products, information systems, management systems for network information security with technical norms of network information security. 3. Certification of network information security standard conformity means certifying that hardware, software products, information systems, management systems for network information security conform to standards of network information security. 4. Publication of network information security standard conformity means an organization or company announces the conformity of hardware, software products, 15