INFORMATION SECURITY PROGRAM – FROM THEORY TO PRACTICAL EXPERIENCE IN AUSTRALIA
Marking the Conclusion of the International Training Program on Information Security: Bridging Theory and Real-World Practice
From August 12 to 20, 2025, the Center for Research and Communication Training (CRC) under the Vietnam Digital Communications Association, in partnership with RMIT University in Australia, successfully hosted the International Training Program “Information Security – From Theory to Practice.”
The program is part of CRC’s ongoing efforts to connect Vietnamese leaders and experts with global knowledge and best practices, reflecting its long-term commitment to advancing professional excellence and international collaboration in the digital era.
Training Course under the International Security Program – From Theory to Practice
Expanding the Horizon: From Digital Transformation to Information Security
After the success of its earlier collaboration with Nanyang Technological University (Singapore) on “Digital Transformation: Lessons in Strategy and Execution,” the Center for Research and Communication Training (CRC) continues to push boundaries in 2025 by deepening its focus on Information Security – From Theory to Practice.
The shift reflects a natural evolution — as Vietnam accelerates its digital transformation, cybersecurity has become not just a technical concern but the backbone of sustainable progress. This year’s program gathered senior leaders and experts from key government bodies and technology enterprises — including the Ministry of Public Security’s Department of Cybersecurity, Vinacomin – Mining Chemical Industry Holding Corporation Limited, Viettel – CHT Company Limited, and TKM Technology Joint Stock Company — creating a vibrant exchange of perspectives and real-world experiences across sectors.
Participants engaging in training sessions at RMIT University campus
A Learning Journey at RMIT
At RMIT University, participants embarked on a dynamic learning journey exploring the many dimensions of information security. The program went beyond textbooks — combining essential topics like governance, risk management, and AI-driven defense with practical case studies drawn from real-world incidents.
One of the most engaging moments came when learners analyzed major cyberattacks such as the Optus and Medibank breaches in Australia, connecting lessons from global crises to Vietnam’s own cybersecurity framework, including the new national standard TCVN 14423:2025.
It wasn’t just about learning concepts — it was about understanding how to apply them. The experience equipped each participant with insights and tools to manage risks, respond effectively to incidents, and foster a stronger culture of digital resilience.
Highlights from International Experts
Training Experience at RMIT University in Australia
Mr. Richard Magalad, CEO of ITR Australia, opened the program with sessions on cybersecurity governance, offering participants a deeper understanding of how to identify information assets, assess risks, and respond to incidents in line with international standards. Using a real-world case involving a multimillion-dollar Business Email Compromise (BEC) attack, he illustrated the severe consequences of weak security practices — reinforcing the message that strong governance is the cornerstone of risk reduction and effective recovery.
Professor Richard Magalad delivering a session on Cybersecurity Governance
Continuing the program, Professor Matthew Warren from RMIT University delivered an insightful session on building a cybersecurity culture within organizations and strengthening the legal foundations that support it. He emphasized that cybersecurity is not merely a matter of technology, but must be cultivated through people and organizational culture. By analyzing the role of Cyber Security Ambassadors and sharing real-world practices for embedding security awareness at all levels, Professor Warren highlighted how organizations can enhance internal resilience against cyber threats. He also introduced Australia’s Security of Critical Infrastructure (SOCI) Act 2018 (amended in 2024) — a landmark regulation designed to protect national critical systems, particularly in the wake of major incidents such as Optus and Medibank.
Professor Matthew Warren engaged with participants in a discussion on the SOCI Act and the development of a cybersecurity culture.
At the same time, Dr. Shah Khalid Khan provided a real-world perspective on how cybersecurity should be embedded into every stage of system design. Through clear and engaging explanations, he underscored that true security begins with thoughtful architecture, not last-minute fixes. By highlighting concepts like layered defense, secure software development, and identity management, Dr. Khan helped participants understand how a well-designed system can prevent threats before they arise.
Dr. Shah Khalid Khan delivers a lecture on the Cyber Security Capability Training Program
Instead of merely studying theory, participants took part in interactive discussions and case analyses, drawing key insights and developing practical solutions to apply directly within their organizations.
Participants engaged in active discussions and collaboration throughout the group exercises
Concluding the training series, Dr. Pham Cong Hiep delivered two key topics: the application of AI in cybersecurity and the emerging legal frameworks in Vietnam. He highlighted the dual nature of AI — a powerful tool for threat detection and automated defense, yet also a potential source of risks such as data poisoning and model theft. In parallel, Dr. Hiep introduced Decree No. 13 on personal data protection and the new national standard TCVN 14423:2025 on the security of critical information systems. His insights equipped participants with both a technological outlook and a solid understanding of the evolving legal landscape to strengthen their cybersecurity posture.
Dr. Pham Cong Hiep delivers a lecture on AI and Cybersecurity
A lively discussion moment with experts at RMIT
An experiential journey — from local culture to cutting-edge technology
The study tour in Australia extended far beyond the classroom, offering participants a well-rounded experience that intertwined culture, business, technology, and academia. Alongside exposure to advanced models and global best practices, the program provided opportunities for participants to engage directly with leading Australian institutions and enterprises. These included the North Shore Police Community Safety Unit in Sydney, the Australian Investment and Finance Network, Auschain – a blockchain technology company, and faculty members from Macquarie University. Through these exchanges, participants gained valuable insights into how public agencies and communities collaborate to combat cybercrime, while also deepening their understanding of risk management in digital finance — a sector particularly vulnerable to the impacts of cyberattacks.
The delegation met with the Australian Investment and Finance Network at Macquarie University
The journey also took the delegation to the Sovereign Hill Mine in Ballarat — the birthplace of Australia’s mining community. Here, participants explored resource management practices and observed how heritage preservation is integrated with sustainable tourism development. The visit offered a vivid example of how technology can revitalize traditional industries while preserving cultural values in the face of modernization.
Field Visit to Sovereign Hill Mine in Ballarat
Next, the delegation visited the RMIT Centre for Digital Innovation – STEM Centre. Not only did the participants have the opportunity to admire robotic models powered by artificial intelligence, IoT technologies, and digital innovation projects, but they also got hands-on experience and listened to experts share insights on how technology translates into real-life applications. These “learning from practice” moments broadened their international perspective, strengthened team cohesion, and offered a vivid sense of RMIT’s spirit of innovation.
Participants at the RMIT STEM Centre for Digital Innovation
Participants visited the lab – RMIT
Key Takeaways
Closing the nine-day journey in Australia, the international training program “Information Security – From Theory to Practical Experience” offered participants a comprehensive knowledge foundation: from standardized theoretical frameworks to engaging case studies, from hands-on enterprise experiences to the seamless integration of technology, people, and culture. All of these elements left a distinctive and unforgettable mark on CRC’s international training journey.
Commemorative photo marking the conclusion of the international training program ‘Information Security – From Theory to Practical Experience
More importantly, the program reaffirmed the distinctive identity of CRC’s annual international training series: a harmonious blend of knowledge and experience, technology and culture, theory and practice.
This perfectly reflects the message shared by participants after the journey:
“More than just learning – we lived through priceless experiences.”
.JPG?w=400&h=300&mode=crop)
