Skip to main content

Attacks on critical infrastructure: Vietnam

Power, water and transport are the systems on which every other national function rests, and for Vietnam their protection is inseparable from the coastal and offshore assets that anchor the economy. The threat arrives from several directions at once: a cyber intrusion into control systems, a physical or drone attack on the plant itself, and the cascading failures when one utility depends on another.

The systems a country cannot function without

These systems were built for reliability, not for adversarial resilience. Control networks often predate the current threat, exposing supervisory systems never designed to be attacked; physical sites sprawl across terrain and along the coast; and the airspace above them is now contested by cheap drones. Defending them piecemeal leaves whichever vector is least protected as the open door. Control-system hardening reduces the attack surface of the supervisory systems behind power, water and transport, so an intruder cannot manipulate a process, defeat a safety interlock or force a shutdown at a critical node.

Defend the network, clear the air, harden the controls

Around those controls, defensive cybersecurity provides continuous monitoring and incident response, detecting and containing an intrusion before it reaches the systems that matter rather than discovering a breach after the fact. Above the most exposed sites, counter-drone defence addresses the small aircraft that can surveil or strike a substation, pump station, port facility or rail node. Because all three are independent and non-aligned, the protection is accountable to the national operator and government, with no external disclosure obligation over the vulnerabilities of the infrastructure the nation depends on, a picture no outside party should hold.

How engagement works in Vietnam

Through an accountable single-channel arrangement, Unstrat fields one team to assess which control systems are most exposed and where a single failure would cascade, harden those systems, stand up continuous cyber defence and add counter-drone protection to the most exposed sites, then build the in-region teams who run the monitoring and sustain the capability. Equipment is end-use certified with disciplined export-control handling, and localisation arrangements are scoped per programme. All representation is subject to export controls and end-use approvals confirmed in advance.

Assessing where a single failure would cascade

Engagement starts with a briefing and assessment of the national operators to establish which control systems behind power, water and transport are most exposed and where one failure would cascade into others, including the coastal and offshore assets that anchor the economy. As a single accountable channel (one team standing behind the manufacturers rather than a distributor), Unstrat confirms export-control status and end-use approvals before any representation moves forward, since no outside party should hold a picture of these vulnerabilities. Capability is then matched to real conditions: control-system hardening to shrink the attack surface, continuous defensive cybersecurity to detect and contain an intrusion before it reaches what matters, and counter-drone defence over the most exposed sites. Fielding is phased, with in-region teams built to run the monitoring and sustain the capability. Localisation arrangements are scoped per programme, subject to export controls and end-use approvals, protecting the systems the country cannot function without under national command.

Relevant capability

Adjacent priorities in Vietnam

Relevant solutions

Vietnam: security context

Vietnam's long coastline shapes its priorities: maritime domain awareness across busy waters, protection of its exclusive economic zone and offshore energy, coastal surveillance, and security of critical infrastructure. It is an environment where economic assets at sea and continuous awareness of approaches are closely linked.

An accountable single-channel engagement gives Vietnam a coherent counterpart for those priorities, maritime domain awareness, EEZ and offshore energy protection, coastal surveillance and infrastructure protection. A defence ministry gains end-use certified equipment, disciplined export-control handling and localisation arrangements scoped per programme rather than promised in advance.

About this challenge

Power grids, water systems and transport networks face both physical and cyber attack. Hardening the control systems behind them, defending the networks around them and countering the drone threat above them keeps essential services running under pressure.

Frequently asked questions

Why protect control systems, networks and airspace together?

Because the threat to critical infrastructure arrives from several directions at once, and defending it piecemeal leaves whichever vector is least protected as the open door. Control-system hardening, continuous cyber defence and counter-drone protection reinforce one another so a substation, pump station or transport node is defended as a whole.

Who holds the knowledge of Vietnam's infrastructure vulnerabilities?

The national operator and government do. The hardening, cyber defence and counter-drone systems are independent and non-aligned, so the protection is accountable to the nation with no external disclosure obligation over the weaknesses of the infrastructure it depends on.

How is a critical-infrastructure programme delivered and governed?

As an accountable single channel from assessment through in-region sustainment. Equipment is end-use certified with disciplined export-control handling, localisation arrangements are scoped per programme, and representation is subject to export controls and end-use approvals confirmed in advance.

Attacks on critical infrastructure: Markets

Contact us

Tell us the requirement. Specifications and the export position are confirmed in briefing, not published here.