Directive 57-CT/TW: tightening data security in the state sector

In early 2026, the Secretariat issued Directive 57-CT/TW on strengthening cybersecurity, information security and data security across the political system. It is a top-level political signal on something already urgent: protecting the state sector's data.

Why this directive matters

• It makes data security a political task, not just IT's technical job.
• It comes as a chain of incidents on state systems shows real risk (see the CIC incident).
• It resonates with the 2025 Cybersecurity Law and PDPL — legal frame and directive tightening together.

What state agencies must do

• Classify and protect information systems by level (under the 2025 Cybersecurity Law).
• Manage access, least privilege and tight monitoring — identity is a top target.
• Keep sensitive data in controllable infrastructure; limit exposure.

Tetra

Manta Security centralizes device management, permissions and access monitoring; Tetra eOffice keeps documents in your systems. See also enterprise cyber defense. For advice, book a consultation.