Certified Level 3 Information Security
Security is not an empty promise. BKNS operates its systems under Level 3 information security certification and an internally reviewed control framework — from IPv6 Ready infrastructure to compliance with Decree 13 on personal data protection.
Compliance summary
Certifications BKNS holds
Each certification represents an independent assessment and an ongoing commitment to maintaining that standard.
3
Level 3 information security
The system is classified and protected at Level 3 under the regulations on information system security assurance.
READY
IPv6 Ready
The entire BKNS network runs dual-stack IPv4/IPv6, ready for Vietnam's next-generation Internet infrastructure.
13
Decree 13/2023
Full compliance with personal data protection regulations, including a DPO and a data-subject rights process.
.VN registrar
Accredited by VNNIC as an official registrar for the .VN national domain.
256
TLS 1.2+ encryption
Every connection to our systems and customer portal is encrypted with 256-bit SSL/TLS.
Partner infrastructure CMC · FPT · VNPT
Physical infrastructure hosted at partner data centers, with concurrently maintainable power and cooling redundancy.
6 control groups we apply
Security is organised into clearly defined control groups that are reviewed and assessed on a regular basis.
Access control
Role-based access control (RBAC), mandatory two-factor authentication for admins, least-privilege principles, and periodic access review.
Encryption & data
Encryption in transit (TLS 1.2+) and at rest for sensitive data, centralised key management, and clear data classification and lifecycle.
Network security
Multi-layer firewalls, network segmentation, large-scale DDoS mitigation, IDS/IPS, and continuous anomalous-traffic monitoring.
Backup & recovery
Regular multi-version backups stored in a separate location, frequent restore testing, and a documented disaster recovery (DR) plan.
Monitoring & response
A 24/7 operations center (NOC/SOC), centralised logging, real-time alerting, and a tiered incident-response process.
Compliance & people
Clearly published security policies, security-awareness training for staff, vendor assessments, and periodic compliance review.
Download documents & policies
The documents your procurement process, vendor assessment, and compliance team need.
Need more documents for procurement?
The BKNS compliance team can provide a detailed security profile, sign a DPA, and complete vendor assessment questionnaires.