4. The Ministry of Public Security has the following responsibilities, except for those prescribed in clauses 5 and 6: (a) To inspect [audit] cybersecurity of information systems critical for national security in order to detect and remove malicious codes and malicious hardware, to remedy security weaknesses and vulnerabilities, and to discover, prevent and deal with unlawful acts of infringement; (b) To inspect cybersecurity of communications equipment, products and services, digital equipment and of e-equipment prior to commissioning same for use on information systems critical for national security; (c) To supervise cybersecurity of information systems critical for national security in order to detect and deal with activities of unlawfully gathering information classified as State secret; (d) To detect and deal with unlawful acts of posting, storing or exchanging in cyberspace information and data containing contents classified as State secret; (dd) To participate in research and manufacture of products which store and transmit information and data with contents classified as State secret; and products which code information in cyberspace in accordance with the functions and duties allocated [to such Ministry]; (e) To check and inspect the work of State agencies protecting State secrets in cyberspace and the work of cybersecurity protection by administrators of information systems critical for national security; (g) To arrange training courses to raise the awareness of and knowledge on protection of State secrets in cyberspace, and on prevention of and combatting cyberattacks, and on cybersecurity protection for the cybersecurity task forces prescribed in article 30.2 of this Law. 5. The Ministry of National Defence is responsible to implement the items prescribed in sub-clauses (a), (b), (c), (d) and (dd) of clause 4 above with respect to military information systems. 6. The Government Cipher Committee is responsible to arrange implementation of provisions of the law on use of cryptography in order to protect information classified as State secret which is stored and exchanged in cyberspace. Article 18 Prevention of and combatting use of cyberspace, information technology and electronic media in order to breach the law on national security, social order and safety 1. Conduct being the use of cyberspace, IT and electronic media in order to breach the law on national security, social order and safety comprises: (a) Posting and/or disseminating information in cyberspace with the contents prescribed in clauses 1 to 5 of article 16 and the conduct prescribed in article 17.1 of this Law; (b) Appropriating assets/property; organizing gambling including gambling via the Internet; stealing international telecom charges on the Internet; and breaching copyright and intellectual property rights in cyberspace; (c) Falsifying websites of agencies, organizations or individuals; forging, circulating, stealing, buying or selling, collecting or exchanging unauthorized credit card information or bank accounts of other people; unlawfully issuing, providing or using payment means; (d) Disseminating, advertising or purchasing and selling goods or services on the list of those prohibited by law; (dd) Guiding other people to conduct acts in breach of law;  Allens - Vietnam Laws Online Database on www.vietnamlaws.com 13

Select target paragraph3