Nguyen Phi-Hung, Pham The-Vu, Nguyen Lan-Anh Thi, Pham Hong-Anh Thi, Nguyen Thu-Hoai Thi, Vu Tra-Giang
Research Center of Applied Sciences, Faculty of Business, FPT University, Hanoi, 100000, Viet Nam.
Heliyon. 2024 Sep 14;10(19):e37893. doi: 10.1016/j.heliyon.2024.e37893. eCollection 2024 Oct 15.
The financial and banking system in Vietnam is currently confronted with a myriad of cybersecurity risks, a matter of paramount concern for the government, businesses, and individuals alike. These risks threaten the financial system's security, reliability, and integrity, potentially resulting in significant economic losses. This research endeavors to identify the prevailing cybersecurity risks in Vietnam's financial and banking system, assess their impact, and elucidate the interrelationships among these risks. Employing the Multi-Criteria Decision Making (MCDM) approach, the study integrates the DELPHI technique, Decision-Making Trial and Evaluation Laboratory (DEMATEL), and Combined Compromise Solution (COCOSO) methods, complemented by Neutrosophic Sets (NS) and Z-number concepts to enhance the accuracy and reliability of the findings. The research findings reveal the existence of 15 cybersecurity risks in Vietnam's financial and banking system, with Malware Infections and Supply Chain Vulnerabilities emerging as the most consequential risks. Moreover, the study identifies investing in advanced threat detection systems as the optimal strategy for mitigating cybersecurity risks in Vietnam. The results underscore the importance of addressing these critical risks to safeguard the financial infrastructure, focusing on deploying robust cybersecurity measures to enhance overall system resilience.
越南的金融和银行系统目前面临着众多网络安全风险,这是政府、企业和个人都极为关注的问题。这些风险威胁着金融系统的安全性、可靠性和完整性,可能导致重大经济损失。本研究旨在识别越南金融和银行系统中普遍存在的网络安全风险,评估其影响,并阐明这些风险之间的相互关系。该研究采用多准则决策方法(MCDM),整合了德尔菲技术、决策试验与评价实验室(DEMATEL)和组合折衷解(COCOSO)方法,并辅以中立集(NS)和Z数概念,以提高研究结果的准确性和可靠性。研究结果表明,越南金融和银行系统存在15种网络安全风险,其中恶意软件感染和供应链漏洞是最严重的风险。此外,该研究确定投资先进的威胁检测系统是减轻越南网络安全风险的最佳策略。结果强调了应对这些关键风险以保护金融基础设施的重要性,重点是部署强大的网络安全措施以增强整体系统弹性。