Digital safety has become a fundamental condition determining the effectiveness and sustainability of digital transformation, thereby directly affecting enterprises’ competitiveness and the stable development of the economy.
A key force, but highly vulnerable
Viet Nam has around 800,000 active enterprises, most of which are micro-enterprises and family-run enterprises. Small and medium-sized enterprises account for 97-98% of the total number of enterprises, contribute about 20% of GDP and create 80% of jobs in the private economic sector. This is an important force in maintaining production and business activities, creating employment and ensuring social security.
Viet Nam is regarded as one of the countries with strong potential for rapid digital economy development in the region. Sectors such as e-commerce, tourism and transport are witnessing strong growth, driving increasing demand for digital transformation among enterprises. The high rate of internet users and the widespread use of digital platforms have created favourable conditions for enterprises to reach customers and expand markets.
The government has also issued the project on digital transformation for small and medium-sized enterprises for the 2026-2030 period, setting a target of supporting at least 500,000 enterprises, including 300,000 enterprises in applying digital technologies, digital platforms and artificial intelligence. This is a strategic move aimed at improving the competitiveness of Vietnamese enterprises in the digital era.
However, as they enter the digital space, many small and medium-sized enterprises are facing a worrying reality: the risk of falling into “cybersecurity gap”, where defence capacity remains thin while threats are increasing in both scale and sophistication. Notably, these risks have become even more serious as the small and medium-sized enterprise sector still faces many unresolved internal bottlenecks. Rising input costs, unpredictable market fluctuations, and requirements for technological renewal and improved governance capacity are placing great pressure on enterprises. In fact, many enterprises have been forced to leave the market, showing that a harsh process of selection is underway. This also reflects the limited resilience of some enterprises in an increasingly fierce competitive environment.
Colonel Dr Nguyen Hong Quan, Deputy Director of the Department of Cybersecurity and High-Tech Crime Prevention and Control under the Ministry of Public Security, said data, digital platforms and artificial intelligence are becoming “strategic assets” for enterprises, determining productivity, quality and competitiveness.
Alongside this, however, cybersecurity risks are becoming increasingly complex, requiring enterprises to shift their approach from passive response to proactive defence. Many small and medium-sized enterprises risk becoming “weak links” in the digital ecosystem. Incidents such as data loss, system disruption or online fraud not only cause financial damage but also erode the trust of customers and partners.
Sharing this view, Vu Duy Hien, Deputy Secretary-General and Chief of Office of the National Cybersecurity Association, stressed that cyber safety and security do not stand apart from digital transformation, but form the “foundation” for digital transformation to take place effectively and sustainably. For small and medium-sized enterprises, a single cybersecurity incident can wipe out years of accumulated efforts.
Notably, the human factor remains a “weak point” in many security systems. Limited awareness of information safety, unsafe technology habits and the absence of strict control procedures have turned internal risks into a constant threat.
Building a “digital shield”
Nguyen Hoa Cuong, Deputy Director of the Institute for Policy and Strategy Research under the Central Policy and Strategy Commission, said Viet Nam’s cybersecurity ecosystem can be viewed at three levels: households, micro-enterprises and small enterprises; educational and research institutions and service providers; and the Government, ministries and sectors. This approach shows the need for policies tailored to each target group, ensuring effectiveness and feasibility in implementation.
For management agencies, it is necessary to step up policy communication in a clear and accessible manner so that enterprises not only “know the name” of policies but also understand “how to access” and “how to implement” them. At the same time, policy dialogue should be strengthened and public-private cooperation promoted to bring digital safety solutions into practice.
For the cybersecurity ecosystem, it is necessary to build centralised information portals and publish lists of reputable providers so that enterprises know where to find solutions and how to choose them. Market-oriented support programmes should also be operated, while early warning mechanisms should be established to help enterprises promptly identify and respond to risks.
For enterprises, they must shift from a passive position to one of proactively identifying challenges and seeking suitable solutions. Basic technical measures such as backing up data, migrating to cloud computing platforms and using professional security tools need to be implemented in a substantive manner. Enterprises should regularly update their knowledge and improve response capacity so that they do not fall into a passive position when incidents occur.
To build a strong “digital shield”, information safety must be regarded as a component of development strategy, rather than an additional cost. Investing in security means investing in long-term stability and reputation. At the same time, attention should be paid to training and raising awareness among employees, while building a culture of information safety within enterprises. Proactively connecting with experts and support organisations will also help enterprises update information, identify risks early and access suitable solutions.
In the digital era, the boundary between opportunity and risk is becoming increasingly fragile. For small and medium-sized enterprises, digital transformation is an inevitable path, but to go further, they need to be fully equipped with a safety “shield”. When “gaps” are filled and “weak links” are strengthened, small and medium-sized enterprises will become more resilient in the face of volatility and make a more active contribution to the development of the national digital economy.