EXECUTIVE SUMMARY
- Vietnam’s efforts to enhance its cyber capabilities are driven by the need to protect the regime of the Communist Party of Vietnam, defend national sovereignty and achieve socio-economic development goals.
- Vietnam has made significant investments in developing digital infrastructure, training a skilled cybersecurity workforce, and strengthening the legal framework for cyberspace governance through domestic initiatives and international cooperation.
- The government must strike a delicate balance between ensuring stability and effective regulation of cyberspace on the one hand and protecting individual rights and promoting innovations on the other
- Vietnam’s ability to effectively leverage its growing cyber capabilities will be a key determinant of its success in the 21st century.
* Bich Tran is a postdoctoral fellow at the Lee Kuan Yew School of Public Policy and a former visiting fellow at the ISEAS – Yusof Ishak Institute.
ISEAS Perspective 2024/78, 3 October 2024
INTRODUCTION
In the rapidly evolving digital landscape of the 21st century, Vietnam has emerged as a significant player in the realm of cybersecurity and has been impressive in its digital transformation. This article examines Vietnam’s multifaceted approach to developing its cyber capabilities, driven by the imperatives of regime survival, national defence, and socio-economic development. As the country navigates the complex challenges and opportunities presented by cyberspace, it has made substantial investments in digital infrastructure, cyber personnel, and legal frameworks. By analysing Vietnam’s motivations, strategies, and specific initiatives in enhancing and leveraging its cyber capabilities, the article provides comprehensive insights into the country’s approach in the digital age.
VIETNAM’S PERCEPTION OF CYBERSPACE AND CYBERSECURITY
The Vietnamese government considers cyberspace an integral and inseparable component of national sovereignty, akin to land, islands, maritime zones, and airspace. It asserts that each nation holds supreme and absolute rights over the cyberspace within its control.[1] This concept of cyber sovereignty is understood as “the right of a nation to exercise independent, complete and full legislative, executive and judicial control within the scope of its national network territory, in accordance with international law and the nature of cyberspace”.[2]
Cyberspace has become an integral part of Vietnam’s society. As of April 2024, the country’s internet penetration rate stands at 79.3 per cent of the population, surpassing the global average and neighbouring countries such as China, the Philippines, and Indonesia.[3] This high level of internet usage has contributed to Vietnam’s emergence as a major software hub in Southeast Asia.[4] This high level of internet usage presents new opportunities for national development, but it also serves as an environment for conducting cyber warfare and information operations. Consequently, Vietnam maintains that protecting national sovereignty in cyberspace safeguards its independence, sovereignty, and territorial integrity, and provides a peaceful and stable environment for national development.[5]
Ensuring cybersecurity in Vietnam is a whole-of-government endeavour that involves the coordinated efforts of multiple ministries and stakeholders. The Ministry of Defence, Ministry of Public Security, and Ministry of Information and Communications play pivotal roles in shaping and implementing the country’s cybersecurity strategies. Additionally, the Ministry of Foreign Affairs contributes to international cooperation and diplomatic aspects of cybersecurity, while the Ministry of Science and Technology focuses on technological innovations and research in this domain. The Ministry of Finance is involved in allocating resources and managing the financial aspects of cybersecurity initiatives. Beyond these key ministries, other government departments also contribute to Vietnam’s cybersecurity efforts, each bringing their specific expertise and responsibilities. This collaborative approach extends beyond government entities to include various organisations, individuals, telecommunications companies, and Internet service providers,[6] reflecting Vietnam’s recognition of cybersecurity as a multifaceted challenge that requires a unified and diverse response from all sectors of society.
MOTIVATIONS
Regime Survival
One of the primary drivers behind Vietnam’s endeavours to enhance its cyber capabilities is the preservation of the Communist Party of Vietnam’s (CPV) ruling power and survival. The CPV is determined to guard against what it sees as a “peaceful evolution”[7]—efforts by external forces to seek regime change without using military means. The late General Secretary Nguyen Phu Trong, for example, urged all cadres, party members, civil servants and public employees to remain loyal to the Party’s principles and vigilant against signs of “peaceful evolution”, including “self-evolution” and “self-transformation”.[8] These terms refer to the erosion of socialist ideals and the adoption of capitalist or Western values. Dissidents and opposition groups have leveraged platforms such as Facebook, TikTok, Twitter (now X), and Zalo to spread anti-government messages and challenge the CPV’s authority.[9] By enhancing its cyber capabilities, the CPV aims to better monitor, control, and counter the spread of anti-government sentiments online, thus safeguarding its power and the stability of the regime.A
National Defence
Vietnamese officials regard cyberspace as an important battlefield, alongside air, land, sea, and outer space domains.[10] In July 2016, two weeks after the arbitral tribunal ruling that invalidated China’s nine-dash line, a hacking group known as 1937cn, believed to be Chinese, took control of flight information screens and sound systems at Vietnam’s two major airports. They displayed messages supporting Beijing’s claims in the South China Sea, while renouncing claims by Hanoi and Manila.[11] This incident heightened Vietnam’s awareness of its vulnerabilities in cyberspace.
China also employs subtler tactics to promote its claims in the digital realm, such as inserting the nine-dash line in popular media. In 2019, for instance, Vietnam only realized that Abominable—a collaboration between DreamWorks Animation and China-based Pearl Studio—contained the infamous nine-dash line after it had been shown in theatres for a week.[12] The inclusion of the line in the movie was seen as an attempt by China to legitimize its territorial claims. These incidents, whether carried out by state or non-state actors, serve as clear examples of how cyberspace has become an arena in the territorial disputes between Vietnam and China.
In its 2022 “National Cybersecurity and Safety Strategy to Proactively Respond to Challenges from Cyberspace, with a Vision toward 2030”, Vietnam explicitly identifies the protection of national sovereignty in cyberspace as one of its main priorities.[13] As tensions in the South China Sea persist, Vietnam will need to continue strengthening its cyber capabilities to deter, detect, and deal with threats in the digital domain and defend its national interests.
Socio-Economic Development
Vietnam has also recognized the crucial role of cyber capabilities in achieving its socio-economic objectives. Its government has set ambitious goals of becoming an upper-middle income economy by 2030 and a high-income developed country by 2045.[14] To support these objectives, the 2022 “National Strategy on Digital Economy and Digital Society Development to 2025, with a Vision to 2030” has been implemented. It aims to increase the share of the digital economy to 20 per cent of GDP by 2025 and 30 per cent by 2030. In terms of the digital society, the strategy sets targets for smartphone ownership among adults, with a goal of reaching 80 per cent by 2025 and 95 per cent by 2030.[15]
Recognizing the potential of e-government, Vietnam has also placed emphasis on streamlining administrative processes, reducing corruption, and enhancing the delivery of public services to its citizens and businesses. By 2025, the government aims to have 100 per cent of administrative procedures available through fully online public services, and be ranked among the top 30 leading e-Government nations by 2030.[16]
However, the country has faced challenges in the form of cyberattacks and online fraud, resulting in significant financial losses and public distress. According to the Vietnam National Cyber Security Company, there were 13,900 reported cyberattacks targeting government agencies, banking systems, financial institutions, industrial systems, and other critical infrastructure in 2023.[17] In the same year, there were also nearly 16,000 reports from Vietnamese internet users concerning online fraud, resulting in an estimated loss of 390 trillion dong (approximately 16.6 billion USD), equivalent to 3.6 per cent of GDP.[18] These figures only represent reported incidents, and the actual damages could be significantly higher. As a result, Vietnam has recognized the urgent need to enhance its cyber capabilities to address these threats effectively.
EFFORTS TO ENHANCE CYBER CAPABILITIES
Improving Digital Infrastructure
Vietnam recognizes that a robust and reliable digital infrastructure is essential for its digital transformation. In recent years, the government has committed to developing the country’s broadband networks, data centres, and cloud computing, as well as to meeting international IT standards.
The country has heavily invested in broadband telecommunications networks to ensure large capacity and high speed. The “Planning of Information and Communication Infrastructure for the Period 2021-2030, with a Vision to 2050” was approved in 2024, setting ambitious targets. By 2025, the goal is to provide 100 per cent of households with access to fibre optic cables, and 90 per cent of fixed internet users with an average speed of 200 Mb/s. By 2030, the goal is to ensure that all users have access to speeds exceeding 1 Gb/s, with 99 per cent of the population covered by the 5G mobile broadband network.[19]
To achieve these targets, Vietnam plans to develop 4-6 more international submarine fibre optic cable routes. For remote, border, sea, island, and currently uncovered areas, the use of satellite coverage systems is being prioritized. To enhance its satellite transmission system, Vietnam has plans to replace the Vinasat 1 and 2 satellites.[20]
Vietnam has also invested in data centre and cloud computing infrastructure. By 2025, the aim is to establish at least three national-level multi-purpose data centre clusters, with 70 per cent of Vietnamese enterprises using domestic cloud computing services. By 2030, the goal is to develop large-scale data centre clusters according to green standards, interconnected and shared to form a network of data centre clusters.[21] These investments will enable Vietnam to store, process, and analyse large amounts of data for various purposes.
In addition to domestic efforts, Vietnam has recognized the importance of international cooperation in developing its digital infrastructure. In 2022, for example, Vietnam signed a Memorandum of Understanding (MOU) on cooperation in digital economy development with Singapore,[22] and in 2023, it signed an MOU with Indonesia related to digital infrastructure development.[23] The United States has also pledged support for Vietnam’s efforts in developing high-quality digital infrastructure.[24] These partnerships will provide Vietnam with access to expertise, technology, and financial resources.
In developing its cyber infrastructure, Vietnam has made use of standards set by the Common Criteria Recognition Arrangement (CCRA), despite not being a member of this organisation. The CCRA is an international agreement enabling 31 participating countries to mutually recognise each other’s information technology security certifications.[25] By utilising this widely recognised standard, Vietnam aims to ensure that its digital infrastructure meets high benchmarks for security and reliability, which is crucial for attracting investment and fostering innovation in the digital economy.
By investing in digital infrastructure, encompassing both physical assets and security standards, Vietnam aims to create a strong foundation for its digital transformation and socio-economic development. However, Vietnam will need to address challenges such as ensuring equitable access to digital services across the country, developing the necessary skills and expertise to operate and maintain these systems, and securing the financial resources required for these investments.
Training Cyber Personnel
Vietnam is dedicated to building a strong and skilled cyber workforce, with efforts focused on both quantity and quality. A significant step in this direction was the establishment of the Vietnam Cyber Emergency Response Centre (VCERC) in 2019.[26] The centre is tasked with organising simulation exercises, training, and workshops to enhance information security knowledge and skills for agencies, organisations, and businesses. Moreover, it develops an information security incident response force, thereby contributing substantially to the growth and proficiency of Vietnam’s cybersecurity workforce.
In January 2022, Prime Minister Pham Minh Chinh approved the “Raising Awareness, Universalizing Skills, and Developing Human Resources for National Digital Transformation By 2025, with Orientations to 2030” project. The goal of this project is to provide digital skills training to all government employees and train 5,000 high-quality digital technology graduates each year by 2025, increasing to 20,000 per year by 2030.[27]
Vietnam has also collaborated with international partners to enhance the quality of its cyber personnel. For instance, in 2016, the Vietnamese Ministry of Public Security signed an MOU on cyber security with the Indian Ministry of Electronics and Information Technology, which includes training and capacity building programmes.[28] The United States, Japan, and Australia also pledged to support Vietnam’s human resource development in digital capability enhancement.[29] The United States, in particular, is supporting Vietnam’s transition to a competent digital workforce to accelerate the growth of its digital economy. For example, the United States Agency for International Development allocated US$2.2 million for the period 2021-2023 for the “Workforce for an Innovation and Start-up Ecosystem” project, focusing on Hanoi, Ho Chi Minh City, and Mekong Delta provinces. [30] After two years, this project has collaborated with nine private and non-profit educational organizations, providing funding for digital skills training for 500 educators and over 3,000 students from more than 60 colleges and universities.[31]
Since 2019, Vietnam’s cyber personnel has benefited from training, workshops and exercises offered by the ASEAN–Singapore Cybersecurity Centre of Excellence (ASCCE). These cover diverse areas such as international law, cyber strategy development, legislative frameworks, cyber norms, and other crucial cybersecurity policy matters. Additionally, the centre offers specialized technical training for Computer Emergency Response Teams (CERTs). The ASCCE also facilitates the exchange of open-source intelligence on cyber threats and attacks, as well as sharing best practices among member states.[32]
On 19 June 2023, Vietnam also participated in the “Project for Enhancing ASEAN-Japan Capacity Building Program for Cybersecurity and Trusted Digital Services”. This initiative aims to enhance the ability of ASEAN countries to effectively respond to and handle cybersecurity threats and incidents by expanding training programmes for their cyber workforces.[33]
Vietnam is a member of the Global Forum on Cyber Expertise (GFCE), an international platform that brings together over 200 stakeholders from around the world. This forum serves as a hub for collaboration on various cybersecurity domains, including policy development, strategy formulation, cybercrime prevention, incident response, safeguarding critical infrastructure, and fostering a culture of cybersecurity awareness and skills. Through its member-driven working groups, the GFCE aims to enhance global cooperation, disseminate effective practices across regions, and stimulate research to address knowledge gaps in the field of cybersecurity.[34]
By investing in the quantity and quality of its cyber personnel, Vietnam aims to create a robust and resilient cybersecurity workforce that can protect the country’s digital sovereignty, support its digital transformation, and contribute to its socio-economic development. However, Vietnam will need to address challenges such as ensuring the relevance and effectiveness of training programmes, attracting and retaining skilled personnel in the public sector, and keeping pace with the rapidly evolving technological landscape.
Strengthening Legal Framework
Vietnam has made significant efforts to regulate cyber activities through the establishment of a relatively comprehensive legal framework, including several documents that collectively govern various aspects of cyberspace.
The 2015 Law on Cyber Information Security contains a civil code, along with technical standards and regulations on cyber information security.[35] The 2015 Criminal Code includes articles 286, 287, 289, and 290 addressing various cybercrimes, such as spreading disruptive programmes, obstructing network operations, illegal access to networks, and using networks for property appropriation.[36] The 2018 Law on Cyber Security serves to govern and oversee various activities and measures aimed at safeguarding national security, as well as maintaining public order in cyberspace.[37] The 2018 Law on Protection of State Secrets prohibits drafting or storing documents with state secrets on Internet-connected devices, except when legally required for preservation.[38] The 2023 Telecommunications Law opens the door for wholly foreign-owned investments in basic telecommunications services, data centres, and cloud computing services.[39]
Notably, Vietnam’s international cooperation has played a significant role in drafting these documents. For instance, the European Union’s sharing of experience and legal expertise contributed to the development of Vietnam’s 2018 Cybersecurity Law and subsequent decrees.[40] Furthermore, Vietnam’s participation in the UN framework of responsible state behaviour in cyberspace has provided valuable guidance for developing its domestic laws.[41]
These legal documents demonstrate Vietnam’s commitment to regulating cyber operations and addressing the challenges posed by the digital age. While the effectiveness of these laws and regulations in practice may vary, they provide a foundation for Vietnam to further develop its cyber capabilities and protect its national interests in cyberspace. However, as Vietnam continues to strengthen its legal framework for cyber governance, it is also crucial for the country to balance the need for effective regulation with the protection of individual rights and the promotion of innovation in the digital economy.
EXAMPLES OF LEVERAGING CYBER CAPABILITIES
Task Force 47
To protect the CPV, the General Political Department of the People’s Army of Vietnam has established Task Force 47, named after its Directive No. 47 issued in 2016. Its mission is to counter “wrongful views” promoted by “hostile forces”, often labelled as elements of a “peaceful revolution” by the regime.[42] Comprised of over 10,000 members, Task Force 47 reportedly includes military officials and personnel who perform their regular duties, but also serve as Internet commentators when needed.[43] The unit operates under the military’s chain of command, with members receiving training and guidance on how to identify and counter unfavourable content online. Rather than focusing on the technical aspects of cyberspace, their strategy revolves around countering unfavourable views through propaganda approaches.
Cyberspace Operations Command
In August 2017, Vietnam created the Cyberspace Command, a combat unit that operates directly under the Ministry of National Defence. The Command is responsible for “defending national sovereignty in cyberspace, countering information warfare, cyberwarfare and safeguarding the Homeland in cyberspace”.[44] It is also expected to have advanced capabilities in cyber defence, cyber intelligence, and possibly even offensive cyber operations. The establishment of this unit reflects Vietnam’s awareness of the growing importance of cyberspace as a domain of military operations and its need for specialized resources and expertise to address cyber threats.
National Public Service Portal
In 2019, Vietnam launched the National Public Service Portal. The portal aims to simplify and digitize government processes, making it easier for citizens and businesses to interact with government agencies and access essential services. As of June 2024, 4,536 administrative procedures have been made available as online public services.[45] By investing in e-government and digital transformation, Vietnam aims to create a more efficient, transparent, and responsive government that can better serve the needs of its citizens and support the country’s socio-economic development goals.
CONCLUSION
Vietnam’s efforts to boost its cyber capabilities reflect the country’s recognition of the critical importance of cyberspace for its national security, economic prosperity, and social development. The country has made significant investments in developing digital infrastructure, training cyber personnel, and strengthening legal framework. Its ability to effectively leverage its cyber capabilities will be a key determinant of its success in the 21st century.
ENDNOTES
For endnotes, please refer to the original pdf document.
| ISEAS Perspective is published electronically by: ISEAS – Yusof Ishak Institute 30 Heng Mui Keng Terrace Singapore 119614 Main Tel: (65) 6778 0955 Main Fax: (65) 6778 1735 Get Involved with ISEAS. Please click here: /support/get-involved-with-iseas/ | ISEAS – Yusof Ishak Institute accepts no responsibility for facts presented and views expressed. Responsibility rests exclusively with the individual author or authors. No part of this publication may be reproduced in any form without permission. © Copyright is held by the author or authors of each article. | Editorial Chairman: Choi Shing Kwok Editorial Advisor: Tan Chin Tiong Editorial Committee: Terence Chong, Cassey Lee, Norshahril Saat, and Hoang Thi Ha Managing Editor: Ooi Kee Beng Editors: William Choong, Lee Poh Onn, Lee Sue-Ann, and Ng Kah Meng Comments are welcome and may be sent to the author(s). |