Who May Sell Cybersecurity in Việt Nam: Nghị định 332/2026/NĐ-CP Puts Vendors, SOCs and Bug-Bounty Platforms Under a Bộ Công an Licence
Nghị định 332/2026/NĐ-CP, signed and in force on 19 August 2026, replaces the decade-old Nghị định 108/2016/NĐ-CP regime for cybersecurity vendors — Bộ Công an now issues a 10-year licence within 28 working days, assessment and consulting firms need at least five qualified staff and monitoring providers twelve, IP-masking services and vulnerability-reporting platforms join the licensed list, and covert-collection, jamming and forensics tools are reserved for Bộ Công an and Bộ Quốc phòng.




