Real-life drill: State Audit proactively responds to cyber attacks

(Chinhphu.vn) - Faced with the threat of increasingly sophisticated cyber attacks, the State Audit Office has organized a real-life information security exercise. The goal is to improve security capacity, maintain the reputation of the auditing industry and transparency in public management.

State Audit Office organizes information security drills, tests data system defense capabilities

On the afternoon of September 23, the State Audit Office (SA) organized an information security drill to test its data system defense capabilities. This activity affirmed its determination to protect digital infrastructure and improve public administration efficiency in the digital transformation era.

The alarming cyber security situation

In the context of strong digital transformation, Vietnam is facing a wave of increasingly sophisticated and complex cyber attacks. Cyber ​​security experts recorded that in the first half of 2025 alone, the country had more than 8.5 million stolen accounts, nearly 530,000 distributed denial of service (DDoS) attacks and 191 data leaks with more than 3 billion records affected - 3 times higher than the same period last year. Ransomware attacks have caused damage of over 10 million USD, making Vietnam one of the 10 countries most attacked by cyber attacks in the world .

According to statistics from specialized agencies, many important systems in the fields of finance, banking, telecommunications and even state agencies have become targets of hackers. These attacks not only cause economic damage but also directly affect the reputation and data security of the country. A typical example is the hacker attack on the National Credit Information Center (CIC) under the State Bank, with signs of personal data appropriation.

Faced with this situation, the State Audit Office has determined that ensuring information security is a particularly important task, directly related to the quality and reputation of the industry. The State Audit Office's information technology system is one of the key national data infrastructures, not only serving auditing activities but also storing a large amount of data on budgets, finances and public assets.

Deputy General Auditor Bui Quoc Dung emphasized that ensuring information security is not only about protecting data but also about protecting transparency, publicity, reputation and social trust in the Auditing industry.

Viettel cyber security expert presents the process and results obtained after the information security drill

State Audit proactively responds

Conference on practical training on information security on information technology systems, with the coordination of Viettel Cyber ​​Security Company (attack unit - Red team) and NGS Equipment and Communication Joint Stock Company (defense unit - Blue team). The training is designed to test the defense capability against hypothetical attack situations, thereby detecting limitations for timely correction.

The drill scenario simulated common forms of attack, including exploiting leaked user accounts on the Darkweb. However, KTNN's system detected and responded quickly, successfully preventing the attacker from taking control of the core system. This is a testament to KTNN's increasingly enhanced security capabilities, and also shows the important role of training and coaching in building an information security "shield".

Deputy State Auditor General Bui Quoc Dung emphasized the need to strengthen access control solutions, deploy multi-factor authentication and raise security awareness across the industry.

Based on the results of the exercise, Mr. Bui Quoc Dung requested units to urgently fix vulnerabilities and upgrade the information security system to level 4 - the highest level according to current regulations. At the same time, he emphasized the need to strengthen access control solutions, deploy multi-factor authentication (MFA) and raise security awareness for the entire industry.

At the same time, the State Audit Office continues to coordinate with the Vietnam Cyberspace Emergency Response Center (VNCERT) and the Department of Cyber ​​Security (A05) - Ministry of Public Security in monitoring and responding to incidents. Maintaining this cooperation helps the State Audit Office's information technology system operate stably and safely, meeting the requirements of political tasks and the goal of national digital transformation.

Not only focusing on security, the State Audit leader said: This agency also promotes the application of information technology and digital transformation in professional activities. In particular, this agency is focusing on researching and deploying artificial intelligence (AI) applications.

According to the plan, AI will be used to support the identification and selection of audited units for annual planning; analysis, evaluation and synthesis of audit findings and recommendations; and development of a model to support quality control of audit activities. This is a step forward in line with the National Digital Transformation policy and the State Audit Development Strategy to 2030.

Deputy General Auditor Bui Quoc Dung highly appreciated the sense of responsibility and professional coordination of the units participating in the exercise.

"The units continue to accompany the Information Technology Department of the State Audit Office, and at the same time expand training and coaching so that officers and civil servants in the entire industry can master security skills, thereby strengthening the capacity to protect information systems," Mr. Bui Quoc Dung suggested.

Mr. Minh

Source: https://baochinhphu.vn/dien-tap-thuc-chien-kiem-toan-nha-nuoc-chu-dong-ung-pho-tan-cong-mang-102250923211115756.htm