Abstract
This study examines the current legal framework governing information technology software management in universities, with a case analysis of Ho Chi Minh City University of Banking. Drawing on both doctrinal analysis and institutional practice, the study identifies significant gaps and inconsistencies between technological infrastructure and existing regulations, particularly in the areas of interconnected system governance, IT service contracting, and personal data protection under prevailing law. The findings reveal that these misalignments constrain effective system integration and expose institutions to compliance risks. Overall, the study underscores the need for a more coherent and adaptive legal framework to standardize technical procedures, ensure interoperability, and strengthen sustainable digital trust within the higher education sector