Illustrative image

According to Official Dispatch No. 3297/BHXH-CNTT dated August 24, 2026, on strengthening cybersecurity assurance during the 2026 National Day holiday, VSS requires the Office of VSS and Social Security offices of centrally governed provinces and cities to focus on reviewing and addressing information security vulnerabilities and weaknesses; fully updating security patches; checking for and handling malware; and disabling or restricting unnecessary services and connection gateways. The units must also review user accounts, VPN accounts, and administrative accounts, and promptly lock, revoke, or adjust access privileges for accounts that are no longer appropriate.

During the holiday period, the units must arrange on-duty personnel and strengthen the monitoring and supervision of information systems, network devices, and information security solutions; promptly detect, prevent, and handle signs of cyberattacks, vulnerability exploitation, malware dissemination, unauthorized access, and other abnormal activities. Incident response must prioritize maintaining the operation of critical systems and minimizing impacts on professional operations.

VSS also requires strengthened communication and awareness-raising among civil servants and employees regarding the risks of online fraud, impersonation of social security offices, and emails or messages requesting the provision of accounts, passwords, authentication codes, or internal information. Civil servants and employees must not open links or attachments from unknown sources, share confidential information, or use public or unauthorized devices to access VSS’s information systems and business operation systems.

To be prepared to respond to incidents, the units must fully assign personnel to be on duty for system administration and information security, as well as designate leadership focal points throughout the holiday period. When an incident is detected or suspected, they must proactively implement measures to prevent and isolate the incident, while reporting to and coordinating with Information Technology and Digital Transformation Center for handling; they must not arbitrarily delete, alter, or destroy logs, data, or electronic evidence related to the incident.

VSS requires the units to strictly implement the above-mentioned measures, proactively prevent, detect, and promptly handle information security risks and incidents, and ensure the stable and continuous operation of information systems throughout the 2026 National Day holiday.