The Department of Financial Informatics and Statistics has just coordinated with the National Cyber Security Center (NCSC) and Viettel Cyber Security Company (VCS) to successfully organize training and drill on information system security in 2022 for members of the Cyber-information Security Incident Response Team of the Ministry of Finance and persons in charge, co-officers on network safety and security of 12 units under the Ministry of Finance.
Mr. Hoang Xuan Nam, Deputy Director, Department of Financial Informatics and Statistics making speech at the drill.
Photo: Information Security Management Division - Department of Financial Informatics and Statistics.
Attending the training and drill in 2022 were members of the Ministry of Finance's Cyber-information Security Incident Response Team; persons in charge, co-officers on network safety and security of the Department of Financial Informatics and Financial Statistics, General Department of Taxation, General Department of Customs, State Treasury, General Department of State Reserve, State Securities Commission Country, Academy of Finance, Hanoi Stock Exchange, Ho Chi Minh City Stock Exchange, Vietnam Securities Depository Center, Vietnam Computerized Lottery Company, Financial Publishing House, Vietnam Financial Times.
The system selected for drill in 2022 is the Ministry of Finance's web Portal (approved as level 3 proposals under Decision No. 1990/QD-BTC dated October 11, 2021 of the Minister of Finance). The attack role (Red Team) is taken by technical experts from the National Cyber Security Center. The defensive role (Blue Team) is played by the 24/7 Cyber Security Team of Viettel Cyber Security Company and the technical staff of the Ministry of Finance. The Red Team tries to find and exploit security vulnerabilities on the Portal of the Ministry of Finance. Meanwhile, the Blue Team strives to detect these offensive activities as early as possible and take effective preventive actions. The two teams operate independently without contact and communication during the drill.
The on-site drills on the Ministry of Finance's Portal system helps detect shortcomings in protection of the Portal and similar systems of the Ministry of Finance, summarized into recommendations for improving this protection.
Through on-site drills, participants from units under the Ministry of Finance have opportunities to recognize and re-evaluate the unit's network defense, safety and security; detect shortcomings to better perform this work. In addition, the training and drill is also a good opportunity for units under the Ministry of Finance to exchange experiences, learn from each other, to better ensure network safety and security for information systems of the Ministry of Finance.
According to Directive No. 18/CT-TTg dated October 13, 2022 of the Prime Minister on accelerating the implementation of activities to respond to cyber-information security incidents in Vietnam, ministries, ministerial-level agencies, Government agencies, People's Committees of provinces and centrally-run cities, state corporations and groups, organizations and enterprises being members of the national cyber-information security incident response network are requested to “organizes on-site drill at least once a year for information systems at level 3 or higher in order to assess the ability to prevent intrusions and promptly detect weaknesses in processes, technology and people”. Implementing the direction of the Prime Minister in Directive No. 18/CT-TTg and guiding documents of the Ministry of Information and Communications, being the unit in charge of cyber-information security of the Ministry of Finance, the Department of Financial Informatics and Statistics has submitted to the leaders of the Ministry of Finance proposals to organize and implement on-site training and drill activities on security to information systems at level 3 of the Ministry of Finance. The activities shall take place annually.
(Thu Hằng)
Loading...
