Proactive Prevention and Enhancement of System Protection Capabilities

Speaking at the conference, Mr. Chu Manh Sinh Deputy Director of Viet Nam Social Security emphasized that in the process of promoting digital transformation, data and information systems are increasingly playing an important role in the management, operation, and implementation of social insurance (SI), health insurance (HI), and unemployment insurance (UI) policies. Therefore, ensuring information security and cybersecurity is not only a technical requirement but also a crucial condition for maintaining stable and continuous operation and improving the quality of service to citizens and businesses.

This requirement becomes even more urgent as information systems expand their connectivity, interoperability, and data exploitation on a large scale. The risks of cyberattacks, unauthorized access, or service disruptions require organizations to proactively prevent them, enhance monitoring, and be prepared with contingency plans in case of incidents.

To strengthen the legal framework for data protection and enhance the capacity to ensure information system security,VSS issued Decision No. 504/QD-BHXH dated June 25, 2026, promulgating the VSS’ Regulations on Network Information Security and Cybersecurity, effective from July 1, 2026.

The regulations cover many important contents such as account management, multi-factor authentication, device and network system management, data backup and recovery, risk control, vulnerability handling, malware prevention and response, and incident response. This serves as a basis for organization to strengthen discipline in system management and operation, while also enhancing the responsibility of staffs in implementing information security requirements.

In addition, VSS focuses on synchronous implementation of technical and administrative solutions; strengthen access control, system monitoring, review and fix security weaknesses; Coordinate with specialized agencies in information security assessment. Training, skill enhancement, and drills are also continuously implemented to help relevant officials and units be more proactive in dealing with potential situations in their work.

Realistic drills to test incident response capabilities

The conference included a drill themed "Strengthening internal network defenses and responding to spoofing attacks," combining three forms: live-action drills, simulation drills, and command drills.

Combining various forms of drills helps test many aspects of information security, from the professional skills of technical personnel to the ability to analyze and assess situations, organize and coordinate response when incidents occur. Through this, social insurance agencies have the opportunity to review the suitability of their response procedures, their ability to mobilize resources, and the readiness of relevant forces.

Through the drills, VSS’ technical staffs have the opportunity to hone their professional skills in realistic simulated conditions; participating units can also test their operational capabilities, coordination between forces, and handling of unforeseen situations. The identified shortcomings provide an important basis for adjusting response plans, improving procedures, and enhancing the effectiveness of implementation.

In the coming period, VSS will continue to review and strengthen its incident response capabilities, helping to improve system protection solutions throughout the organization. This will contribute to data protection, maintaining the stable operation of information systems, and ensuring the safe and smooth provision of SI, HI, and UI services, meeting the requirements of digital transformation and serving citizens and businesses even better.