between the conformity certification organization of Vietnam and those of other nations and territories shall observe legal regulations on standards and technical norms. CHAPTER VI NETWORK INFORMATION SECURITY BUSINESS Section 1 GRANT OF LICENSE FOR BUSINESS IN NETWORK INFORMATION SECURITY PRODUCTS AND SERVICES Article 40. Business in network information security 1. Business in network information security shall be conditional. Business in network information security includes business in network information security products and business in network information security services. 2. Businesses in network information security products and services set forth in Article 41 herein shall obtain licenses for business in network information security products and service that are granted by competent state bodies. The term of a license for business in network information security products and services shall be valid for 10 years. 3. Trading in network information security products and services shall comply with this Law and others relevant laws. The conditions applicable to business, procedures of granting business license for trading in civil cryptographic products and services, importation and exportation of civil cryptographic products and services, responsibilities of companies trading in civil cryptographic products and services and the use of civil cryptographic products and services shall observe regulations in Chapter III of this Law. Conditions and the order and procedures for grant of licenses for provision of digital signature certification services must comply with the law on electronic transactions. Article 41. Network information security products and services 1. Information security services include: a) Information security test and assessment; b) Information confidentiality without civil cryptography; c) Civil cryptographic services d) Digital signature services; đ) Network information security consultancy; e) Network information security monitoring; g) Network information security incident response serices; h) Date recovery services; i) Cyber attack prevention services. k) Others 2. Information security products include: 17