Protect your workforce. Strengthen cyber resilience.
Support compliance in Vietnam.
Vietnam’s cyber risk environment is becoming more demanding for businesses. Official reporting indicates that Vietnamese organizations faced an estimated 659,000 cyberattacks in 2024, with 46.15% of surveyed entities reporting at least one attack and 14.59% reporting ransomware incidents. In parallel, Vietnam’s legal framework now places clearer emphasis on cybersecurity knowledge, staff awareness and training.
Law on Cybersecurity in Vietnam
The Law on Cybersecurity No. 116/2025/QH15, adopted on 10 December 2025 and effective from 1 July 2026, includes an explicit article on the dissemination of cybersecurity knowledge. It states that the State promotes cybersecurity knowledge nationwide and encourages cooperation to implement education and awareness initiatives, while also assigning ministries, sectoral authorities, local authorities and organizations specific responsibilities for organizing such dissemination. The same law also requires certain personnel directly administering and operating Level 3, Level 4 and Level 5 information systems in authorities, organizations and enterprises to receive in-depth cybersecurity training and certificates, unless already trained in cybersecurity majors.
For companies operating in Vietnam, cybersecurity training is therefore not just a good practice. It is increasingly part of a robust compliance, governance and operational resilience posture. MAET helps organizations turn these legal expectations into a practical and scalable e-learning program for employees, managers and operational teams.
Why MAET’s training matters
MAET’s program is designed to help companies in Vietnam:
- support compliance with Vietnamese cybersecurity training and awareness expectations;
- operationalize the knowledge-dissemination requirements introduced by the December 2025 Cybersecurity Law;
- reduce phishing, fraud, ransomware and social-engineering exposure;
- improve day-to-day cyber hygiene across the workforce;
- equip employees with clear reporting and escalation reflexes;
- demonstrate a structured awareness approach for HR, compliance, risk and management purposes.
A program aligned with regulatory expectations
Vietnamese law already contained training language before the 2025 reform. Under the Law on Cyberinformation Security No. 86/2015/QH13, “the managing body of an information system shall provide training in cyberinformation security knowledge and skills for managerial and technical staff members.” This gives a solid regulatory basis for formal cybersecurity training within organizations managing information systems.
The 2025 Cybersecurity Law goes further by expressly framing cybersecurity knowledge dissemination as a legal expectation and by mandating deeper training for certain operators of higher-level systems. This makes MAET’s program especially relevant for companies that want to combine operational awareness with compliance readiness.
On the data-protection side, Decree 13/2023/ND-CP also states that agencies, organizations and individuals shall disseminate knowledge and skills on personal data protection for awareness-raising. That strengthens the case for a joined-up awareness program covering both cybersecurity and secure handling of personal data.
Who this training is for
This program is suitable for:
- all employees, including non-technical populations;
- managers and team leaders;
- HR, finance, procurement, sales and operations teams;
- IT support and digital project teams;
- compliance, legal, risk and internal control functions;
- managerial and technical staff involved in operating, administering or supporting information systems.
100% e-learning access
- self-paced access on desktop and mobile;
- short micro-learning video capsules;
- easy rollout across one or multiple sites;
- quizzes and knowledge checks;
- straightforward integration into onboarding and annual awareness campaigns.
- optional certificates of completion;
- optional certificates of completion;
- completion tracking for HR and compliance teams;
Course curriculum :
More than 8 hours of HD videos, case studies and quizzes
- Understand the basic concepts of cybersecurity.
- Identify different cyber threats.
- Importance of crisis management in cybersecurity.
- Establish a crisis management plan.
- Define roles and responsibilities within the team.
- Prepare attack scenarios and simulation exercises.
- Implement incident detection systems.
- Procedures to follow when detecting an attack.
- Initial response and threat containment.
- Communication strategies internally and externally.
- Coordination with stakeholders and authorities.
- Managing the company’s reputation during a crisis.
- Steps for recovery after an attack.
- Continuous improvement of the crisis management plan.
- Post-crisis learning and feedback.
- The Cybersecurity Regulation in Vietnam
- Which institutions and organizations are affected
- The pillars of the regulation
- How to prepare and be compliant