On the afternoon of December 24, at Quang Trung Software Park (QTSC), the Ho Chi Minh City Digital Transformation Center closed and reported the results of the program "Ho Chi Minh City Network Information Security Practice Exercise".
The scope of this year's practical exercise is the Ho Chi Minh City Digital Citizen application - which is a communication channel between the city government and the people, which has been in use since October 14 this year, with 12 important feature groups, especially the feedback and recommendation hotline 1022.
In addition to continuing to collect public opinions to perfect the features, the Ho Chi Minh City Digital Transformation Center used the application as a "test" for 60 personnel from 9 attack and defense teams to improve the capacity and skills of detecting and handling incidents for the Incident Response Team, the city's specialized unit in charge of information security; promptly detect weaknesses in people, technology, and processes to have measures to reinforce, improve, increase the ability to respond quickly, and handle promptly when an attack occurs with this application.
Sharing at the event, Ms. Vo Thi Trung Trinh - Director of Ho Chi Minh City Digital Transformation Center commented that the attack teams with diverse forms of attack with high technology have exploited many potential security vulnerabilities in the system, helping the system owner to have measures and plans to upgrade, update and patch these vulnerabilities in a timely manner.
Through the practical exercise, the administrators and system operators of the Ho Chi Minh City Digital Transformation Center, along with the supervisors, evaluators, and information security incident response officers of the service provider, had the opportunity to improve their knowledge and skills in ensuring network safety and security in the face of increasing risks.
“In general, participating units have basically detected and issued warnings about attacks. The jury highly appreciated the results achieved, however, incident response and system recovery plans need to be further improved to ensure the ability to respond quickly and effectively to real attacks,” Ms. Trinh emphasized.
In addition, information security training and coaching activities have provided a foundation of theoretical and practical knowledge for information technology and information security specialists at agencies and units in the city.
Here, students directly participated in handling simulated attack situations such as analyzing vulnerabilities, fighting malware, and identifying threats created by "deepfakes". The close combination of theory and practice helped specialized teams improve their ability to respond flexibly to real documents and data.
