Checklist tuân thủ Luật An ninh mạng 2025

SMEs are frequent targets of ransomware and data-theft attacks, often with more severe consequences than large enterprises because they lack the resources to recover quickly. This 100-question checklist helps SMEs systematically audit their security posture across policy, infrastructure, and people, identify gaps, and put in place the controls needed to reduce the risk of compromise.

Insider activity is one of the leading causes of data-leak incidents - through privilege abuse, unauthorized copying, or employees taking data with them when they leave. This checklist helps organizations identify weaknesses in HR-related data governance, assess the current state, and put in place controls that prevent leaks from inside the organization. It's particularly relevant for businesses that collect, store, and process customer data - especially in finance, technology, real estate, and e-commerce - for HR, IT, and InfoSec teams that need to jointly build internal-control policies, and for organizations preparing to comply with Vietnam's Decree 13/2023/NĐ-CP on personal-data protection.

Complying with international standards such as ISO/IEC 27001:2022 not only protects information assets comprehensively but also builds trust with customers and partners. This document provides a detailed list of information-security controls aligned with the 2022 revision of ISO/IEC 27001, enabling organizations to track, assess, and implement optimal security measures.