EXTENDMAX - On July 20, 2022, the Minister of Information and Communications signed and promulgated Circular No. 10/2022/TT-BTTTT to amend and supplement a number of articles of Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Ministry of Information and Communications. The Minister of Information and Communications shall stipulate the list of cybersecurity products (CSP) imported under the CSP trading license and the order, procedures and dossiers of application for CSP import permit to import cybersecurity products with new updates in the Circular 10/2022/TT-BTTTT.
The key changes by Circular No. 10/2022/TT-BTTTT are as follows:
1) Authority of Information Security (AIS) (a subsidiary of the Ministry of Information and Communications) is the authority that issues the import permit for cyber security products (formerly the Ministry of Information and Communications is the authority to issue this permit)
2) Remove the requirement for copy of Cybersecurity dealer license for import permit application
3) Guidance on the public service portal in case of online licensing application. Enterprises can apply through the public service of the Ministry of Information and Communications or the national public service portal (Vietnam Single Window portal).
4) Simplify and shorten the processing time of some licensing procedures.
5) Adding product and goods names, in some cases, adding names in English so that enterprises and Customs offices can easily track, implement and supervise.
6) Adding many new products, especially those in headings with HS codes 8517.62.43 and 8517.62.49
ExtendMax's recommendations on the implementation of Circular No. 10/2022/TT-BTTTT:
According to the new list promulgated together with Circular No. 10/2022/TT-BTTTT, there are many product HS codes identical with the HS codes prescribed by Decree No. 53/2018/ND-CP on the list of civil cryptography products import and export under license. For example, HS codes 8471.30.90, HS 8471.41.90, HS 8471.49.90, HS 8517.62.49... So how will we determine the type of license needed? Are both Civil Cryptography and Cybersecurity licenses applicable to products with that HS code?
From ExtendMax's point of view, only one type of license can be applied to the same product category.
The reason is as follows:
► Pursuant to Point c, Clause 6, Article 38 of the Law on Cyberinformation Security No. 86/2015/QH13, civil cryptographic products are not within the scope of responsibility of the Ministry of Information and Communications
► Pursuant to Clause 1, Article 42 of the Law on Cyberinformation Security No. 86/2015/QH13, civil cryptographic products are not within the scope of licensing for trading in cyberinformation security products and services.
So, to determine the type of license required to import products in case the HS code belongs to both lists, enterprises need to base on the following main points to determine:
1) Name of the product (on datasheet, specification sheet, catalog)
2) Product features, specifications, and key functions
3) Product operation model in LAN or IoT network
4) Data encryption function or security function operating mechanism
In case your business is still having trouble determining the type of license required, please contact our experts for advice.
Original circular from MIC website: download link
In case you find out that your product is fallen under control list, or your importer is not qualified enough for Cybersecurity product trading license application, you can contact us for support.
With many years of experience in applying for business licenses and import and export licenses of cybersecurity products and civil cryptography products for many organizations, we can assist you:
→ Classify products into groups that do not require a license, require a license but do not have to certify for conformity, and require both a license and certification of conformity
→ Support clients to prepare documents in the fastest time according to the requirements of the authorities
→ Representing enterprises in carrying out testing and certification procedures for civil cryptography products and cybersercurity products
→ Support other legal procedures related to imported products such as applying for licenses and certificates of conformity from the Ministry of Information and Communications
→ In case the business is not yet eligible to apply for a license to trade in civil cryptography products and cybersecurity products, ExtendMax can provide Importer of Record (IOR) services to support.
CONTACT INFO
EXTENDMAX VIETNAM COMPANY LIMITED
Hotline: 0915 836 555 | Hanoi: 024 6666 3066
Email: consultant@extendmax.vn | phuong.tran@extendmax.vn
HO: ExtendMax Villa, C01-L18 An Vuong, Duong Noi urban area, Duong Noi ward, Ha Dong district, Hanoi City, Vietnam
Test laboratory: BT02-21, An Hung urban area, To Huu street, La Khe ward, Ha Dong district, Hanoi City, Vietnam
Learn more:
IOR and EOR service for Vietnam
Procedure and requirements to obtain Cybersecurity Product Trading license
Procedure and requirements to apply for CCP dealer license
Indepth guide on CCP dealer license and CCP import permit
Conformity certification for civil cryptographic products
| MINISTRY OF INFORMATION AND COMMUNICATIONS | THE SOCIALIST REPUBLIC OF VIETNAM |
| No. 10/2022/TT-BTTTT | Hanoi, July 20, 2022 |
AMENDMENTS TO SOME ARTICLES OF THE CIRCULAR NO. 13/2018/TT-BTTTT DATED OCTOBER 15, 2018 OF THE MINISTER OF INFORMATION AND COMMUNICATIONS PROVIDING FOR LIST OF CYBERINFORMATION SECURITY PRODUCTS IMPORTED UNDER LICENSE, AND PROCEDURES AND APPLICATION FOR ISSUANCE OF LICENSE FOR IMPORT OF CYBERINFORMATION SECURITY PRODUCT
Pursuant to the Law on Cyberinformation Security dated November 19, 2015;
Pursuant to the Law on Foreign Trade Management dated June 12, 2017;
Pursuant to the Government’s Decree No. 108/2016/ND-CP dated July 01, 2016 elaborating conditions for provision of cyberinformation security services and products;
Pursuant to the Government’s Decree No. 69/2018/ND-CP dated May 15, 2018 on guidelines for the Law on Foreign Trade Management;
Pursuant to the Government’s Decree No. 17/2017/ND-CP dated February 17, 2017 defining functions, tasks, entitlements and organizational structure of the Ministry of Information and Communications;
At the request of the Director General of the Authority of Information Security,
The Minister of Information and Communications hereby promulgates a Circular on amendments to some Articles of the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Minister of Information and Communications providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product.
Article 1. Amendments to some Articles of the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Minister of Information and Communications providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product
1. Article 6 is amended as follows:
“The Authority of Information Security - Ministry of Information and Communications is the issuing authority”.
2. Clause 2 of Article 7 is abrogated.
3. Clause 5 of Article 8 is amended as follows:
“The application can be submitted electronically on the public service portal of the Ministry of Information and Communications at https://dichvucong.mic.gov.vn or on the National Public Service Portal”.
4. Clause 6 of Article 8 is amended as follows:
“The import license shall be received directly at the Authority of Information Security or by post or electronically on the public service portal”.
5. Clause 3 of Article 9 is amended as follows:
“Within 05 (five) working days from the receipt of the satisfactory application, the Authority of Information Security - Ministry of Information and Communications shall appraise it and respond to the applicant. If all conditions mentioned in Clause 3 Article 48 of the Law on Cyberinformation Security are met, the Authority of Information Security - Ministry of Information and Communications shall issue the import license to the applicant according to the Form No. 03 in the Appendix II hereof. If all conditions fail to be met, the Authority of Information Security - Ministry of Information and Communications shall send a notification specifying reasons for its refusal to issue the import license to the applicant”.
6. Article 10 is amended as follows:
“1. If the import license remains valid but is lost or damaged, the applicant shall submit an application form for reissuance of the import license according to the Form No. 02 in the Appendix II hereof to the Authority of Information Security - Ministry of Information and Communications.
2. “Within 02 (two) working days from the receipt of the valid application form, the Authority of Information Security - Ministry of Information and Communications shall reissue the import license to the applicant”.
7. Appendix I and Appendix II in the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Minister of Information and Communications are replaced with the Appendix I and Appendix II enclosed with this Circular.
Article 2. Grandfather clauses
1. Any import license issued before the effective date of this Circular shall continue to be used until its expiry date.
2. The HS 8517.62.43 in the Appendix I to this Circular shall apply as of December 01, 2022.
Article 3. Effect and responsibility for implementation
1. This Circular comes into force September 15, 2022.
2. Difficulties that arise during the implementation of this Circular should be reported to the Authority of Information Security - Ministry of Information and Communications for consideration and resolution.
3. If there is a discrepancy between HS codes of products and goods in the Appendix I to this Circular and those on the Vietnam’s nomenclature of exports and imports, the Ministry of Information and Communications (the Authority of Information Security) shall cooperate with the Ministry of Finance (General Department of Vietnam Customs) in deciding to assign HS codes to exports and imports.
4. The Chief of Office, Director General of Authority of Information Security, heads of affiliates of the Ministry of Information and Communications, enterprises and organizations and individuals concerned are responsible for the implementation of this Circular./.
|
| THE MINISTER |
LIST OF CYBERINFORMATION SECURITY PRODUCTS IMPORTED UNDER LICENSE
(Enclosed with the Circular No. 10/2022/TT-BTTTT dated July 20, 2022 of the Minister of Information and Communications)
| No. | Name of product/good | Description of cyberinformation security functions | HS code | Description |
|
|
| |||
| 1 | Personal computer/server security | Attack and hacking combat; cyberinformation security monitoring; cyberinformation security testing and assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 2 | Mobile Security products | Attack and hacking combat; cyberinformation security monitoring; cyberinformation security assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
|
|
| |||
| 3 | Network Access Control products | Cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 4 | Network-base Firewall | Attack and hacking combat | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 5 | Intrusion Prevention/ Detection System (IPS/IDS) | Attack and hacking combat; cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 6 | DDoS Prevention products | Attack and hacking combat | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 7 | IoT Security products | Attack and hacking combat; cyberinformation security monitoring; cyberinformation security assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 8 | SIEM products | Cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 9 | UTM products | Attack and hacking combat; cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 10 | Network Monitoring products | Cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 11 | Virtual Private Network (VPN) | Attack and hacking combat on transmission line | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
|
|
| |||
| 12 | Web Application Firewall | Attack and hacking combat | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 13 | Email Security products | Attack and hacking combat | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 14 | Web application security control/monitoring/assessment system | Attack and hacking combat; cyberinformation security monitoring; cyberinformation security assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 15 | Information security vulnerability testing and review products | Cyberinformation security monitoring; cyberinformation security testing and assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
|
|
| |||
| 16 | Database system security products | Attack and hacking combat; cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 17 | Data storage security products | Attack and hacking combat; cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 18 | Data loss prevention (DLP) products | Attack and hacking combat; cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
|
|
| |||
| 19 |
Threat Intelligence solutions | Cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 20 | Centralized information security monitoring solutions | Cyberinformation security monitoring | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 21 | Cyberinformation security testing and assessment solutions | Cyberinformation security testing and assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 22 | Incident investigation and handling solutions | Cyberinformation security testing and assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 23 | Information security products for industrial control systems | Attack and hacking combat; cyberinformation security monitoring; cyberinformation security assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
| 24 | Other products | Attack and hacking combat; cyberinformation security monitoring; cyberinformation security assessment | 8471.30.90 8471.41.90 8471.49.90 | Automatic data processing machines and units thereof; magnetic or optical readers, machines for transcribing data onto data media in coded form and machines for processing such data, not elsewhere specified or included: - Other, of portable digital automatic data processing machines, weighing not more than 10 kg, consisting of at least a central processing unit, a keyboard and a display. - Other, of goods comprising in the same housing at least a central processing unit and an input and output unit, whether or not combined. - Other, presented in the form of systems. |
| 8517.62.43 8517.62.49 | Other apparatus for the transmission or reception of voice, images or other data, including apparatus for communication in a wired or wireless networks (such as a local or wide area network) including: - Control and adaptor units, including gateways, bridges, routers and other similar apparatus designed only for connection with automatic data processing machines of heading 84.71 of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. - Other, of machines for the reception, conversion and transmission or regeneration of voice, images or other data, including switching and routing apparatus. | |||
TEMPLATES FOR APPLICATION FOR ISSUANCE OF LICENSE AND LICENSE
(Enclosed with the Circular No. 10/2022/TT-BTTTT dated July 20, 2022 of the Minister of Information and Communications)
| Template No. 01 | Application for issuance of license for import of cyberinformation security product |
| Template No. 02 | Application for re-issuance of license for import of cyberinformation security product |
| Template No. 03 | License for import of cyberinformation security product |
| (NAME OF THE APPLICANT) | THE SOCIALIST REPUBLIC OF VIETNAM |
| No. ............. | ..., (Place name), date (dd/mm/yyyy) ... |
APPLICATION FOR ISSUANCE OF LICENSE FOR IMPORT OF CYBERINFORMATION SECURITY PRODUCT
To: The Authority of Information Security.
- Pursuant to the Law on Cyberinformation Security dated November 19, 2015;
- Pursuant to the Law on Foreign Trade Management dated June 12, 2017;
- Pursuant to the Government’s Decree No. 108/2016/ND-CP dated July 01, 2016 elaborating conditions for provision of cyberinformation security services and products;
- Pursuant to the Government’s Decree No. 69/2018/ND-CP dated May 15, 2018 on guidelines for the Law on Foreign Trade Management;
- Pursuant to the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Minister of Information and Communications providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product;
- Pursuant to the Circular No. /2022/TT-BTTTT dated (dd/mm), 2022 of the Minister of Information and Communications on amendments to some Articles of the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product;
(Name of the applicant) kindly request the Authority of Information Security to issue the license for import of cyberinformation security product as follows:
Part 1. General information
1. Name of the applicant: ..................................................................................................
2. Legal representative: ......................................................................................
3. Enterprise Registration Certificate No. ........................................ issued by ......................... on (dd/mm/yyyy) …. at (Place name) ...............................................................
4. Address of the headquarters: ..........................................................................................
5. Telephone: ..................................... 6. Email: ............................................
7. License for sale and provision of cyberinformation security products and services No. ..................... issued by the Minister of Information and Communications on (dd/mm/yyyy) ...................
Part 2. Imports
1. Name of the product: ......................................................................................................
2. Symbol: ...........................................................................................................................
3. Information security functions: .......................................................................................
4. HS code: .........................................................................................................................
5. Quantity: .........................................................................................................................
6. Manufacturer: .................................................................................................................
(In case of multiple products, a list thereof shall be enclosed)
7. Purpose of import: ........................................................................................................
8. Users and purposes: ......................................................................................
(If users are yet to be identified, the applicant is required to supplement a distribution plan and identify users, and send a notification immediately after the users have been identified)
Part 3. Attached documents
1. ...........................................................................................................................................
2 ...........................................................................................................................................
3 ............................................................................................................................................
...............................................................................................................................................
Part 4. Undertaking
(Name of the applicant) undertake to correctly and sufficiently implement regulations on import of cyberinformation security products imposed by the State and the Ministry of Information and Communications./.
|
| LEGAL REPRESENTATIVE OF THE APPLICANT |
| (NAME OF THE APPLICANT) | THE SOCIALIST REPUBLIC OF VIETNAM |
| No. ............. | ..., (Place name), date (dd/mm/yyyy) ... |
APPLICATION FOR RE-ISSUANCE OF LICENSE FOR IMPORT OF CYBERINFORMATION SECURITY PRODUCT
To: The Authority of Information Security.
- Pursuant to the Law on Cyberinformation Security dated November 19, 2015;
- Pursuant to the Law on Foreign Trade Management dated June 12, 2017;
- Pursuant to the Government’s Decree No. 108/2016/ND-CP dated July 01, 2016 elaborating conditions for provision of cyberinformation security services and products;
- Pursuant to the Government’s Decree No. 69/2018/ND-CP dated May 15, 2018 on guidelines for the Law on Foreign Trade Management;
- Pursuant to the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Minister of Information and Communications providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product;
- Pursuant to the Circular No. /2022/TT-BTTTT dated (dd/mm), 2022 of the Minister of Information and Communications on amendments to some Articles of the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product;
(Name of the applicant) kindly request the Authority of Information Security to re-issue the license for import of cyberinformation security product as follows:
1. Name of the applicant: ...................................................................................................
2. Legal representative: ......................................................................................
3. Address of the headquarters: .........................................................................................
4. Telephone: ..................................... 5. Email: ............................................
6. The License for import of cyberinformation security products No. ........ issued by the Director General of the Authority of Information Security on (dd/mm/yyyy) .................................................................................
7. Reason for applying for re-issuance of the license: ………………………………………………………………
(Name of the applicant) undertake to correctly and sufficiently implement regulations on import of cyberinformation security products imposed by the State and the Ministry of Information and Communications./.
|
| LEGAL REPRESENTATIVE OF THE APPLICANT |
| MINISTRY OF INFORMATION AND COMMUNICATIONS | THE SOCIALIST REPUBLIC OF VIETNAM |
| No. /GP-CATTT | (Place name), date (dd/mm/yyyy) .... |
LICENSE FOR IMPORT OF CYBERINFORMATION SECURITY PRODUCT
(Valid until (dd/mm/yyyy) ….)
DIRECTOR GENERAL OF AUTHORITY OF INFORMATION SECURITY
- Pursuant to the Law on Cyberinformation Security dated November 19, 2015;
- Pursuant to the Law on Foreign Trade Management dated June 12, 2017;
- Pursuant to the Government’s Decree No. 108/2016/ND-CP dated July 01, 2016 elaborating conditions for provision of cyberinformation security services and products;
- Pursuant to the Government’s Decree No. 69/2018/ND-CP dated May 15, 2018 on guidelines for the Law on Foreign Trade Management;
- Pursuant to the Government’s Decree No. 17/2017/ND-CP dated February 17, 2017 defining functions, tasks, entitlements and organizational structure of the Ministry of Information and Communications;
- Pursuant to the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 of the Minister of Information and Communications providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product;
- Pursuant to the Circular No. /2022/TT-BTTTT dated (dd/mm), 2022 of the Minister of Information and Communications on amendments to some Articles of the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product;
- In view of the application for issuance/re-issuance of license for import of cyberinformation security product dated … of (name of the importer);
- At the request of (head of the submitting authority),
HEREBY DECIDES:
Article 1. (Name of the importer), holder of the Enterprise Registration Certificate No. … issued by ... on (dd/mm/yyyy) …. and the License for sale and provision of cyberinformation security products and services No. … issued by the Minister of Information and Communications on (dd/mm/yyyy) …. is permitted to import the following cyberinformation security product(s):
1. Name of the product: .......................................................................................................
2. Symbol: ............................................................................................................................
3. Information security functions: .........................................................................................
4. Quantity: ..........................................................................................................................
5. Manufacturer: ..................................................................................................................
6. Purpose of import: ...........................................................................................................
7. HS code: .........................................................................................................................
(If multiple products are imported, a list thereof shall be enclosed)
Article 2. (Name of the importer) must comply with all regulations set forth in the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product; the Circular No. /2022/TT-BTTTT dated (dd/mm), 2022 of the Minister of Information and Communications on amendments to some Articles of the Circular No. 13/2018/TT-BTTTT dated October 15, 2018 providing for list of cyberinformation security products imported under license, and procedures and application for issuance of license for import of cyberinformation security product, and other relevant regulations of law.
Article 3. This License comes into force from the date of signature and remains valid until (dd/mm/yyyy) …. ./.
|
| DIRECTOR GENERAL |
