Vietnam Law on Cybersecurity (No. 116/2025/QH15) VNCS-17-18: Prevent and block malware and cyberattacks; email and storage services filter malware and ISPs stop its spread

All organisations must proactively prevent, detect and block malware; managers must apply technical measures against the listed attack types and review systems to remove cyber-terrorism risks; email, transmission and storage service providers must filter malware in sending, receipt and storage and report as the law requires; Internet service providers must stop malware spreading and act on authorities' requests; critical-system managers must deploy dedicated anti-malware systems.