According to Clause 14 of Article 2 of Law on Cybersecurity 2018, Cybersecurity emergency means an event in cyberspace that seriously violates national security, public order or the lawful rights and interests of an organization or individual

Cybersecurity emergencies include:

–           Provoking information in cyberspace that might lead to riots, disruption of public order or terrorism;

–           Attack on a national security information system;

–           Large-scale and intense attacks on multiple information systems;

–           Cyberattack meant to destroy a national security work or target;

–           Cyber attack that seriously violates national security, national interest, sovereignty, social order or the lawful rights and interests of an organization or individual.

According to Clause 3 of Article 21 of Law on Cybersecurity 2018, actions to be taken in response to a cybersecurity emergency including:

–           Promptly implement the cybersecurity emergency prevention and response plan; avoid, eliminate or minimize damage caused by the cybersecurity emergency;

–           Inform relevant organizations and individuals;

–         Collect relevant information; continuously monitor the cybersecurity emergency;

–       Analyze information; estimate damage and impacts caused by the cybersecurity emergency;

–         Stop providing cyber information within a certain area or disconnect from the international internet gateway;

–           Provide forces and equipment for prevention and elimination of the cybersecurity emergency:

–           Other measures specified in the Law on National security.

When the cybersecurity emergencies occur, the response of such emergencies is implemented as follows:

–           The organization or individual that detects a cybersecurity emergency must promptly inform a professional cybersecurity force and implement the measures: Promptly implement the cybersecurity emergency prevention and response plan; avoid, eliminate or minimize damage caused by the cybersecurity emergency; Inform relevant organizations and individuals;

–           The Prime Minister shall make decisions or authorize the Minister of Public Security to make decisions regarding cybersecurity emergencies that occur nationwide or locally or to a specific target. The Prime Minister shall make decisions or authorize the Minister of National Defense to make decisions regarding cybersecurity emergencies that occur to cryptography of Vietnam Government Certificate Authority;

–           Professional cybersecurity forces shall take charge and cooperate with relevant organizations and individuals in implementing the measures mentioned above to respond to cybersecurity emergencies;

–           Relevant organizations and individuals shall cooperate with professional cybersecurity forces in implementing measures for prevention and response to cybersecurity emergencies./.