On 1 July 2016, Decree No. 85/2016/ND-CP on the security of information systems by classification entered into force. It defines criteria, authority, procedures and formalities to classify the safety of information systems and responsibilities for s…