Seoul Unveils 5-Year Cybersecurity Plan Centered on N2SF and AI
Seoul Metropolitan Government announced a 2027–2031 cybersecurity reform plan featuring N2SF adoption, expanded Zero Trust, and AI-based detection and response.
The Seoul Metropolitan Government has announced a five-year plan to reform its cybersecurity system, centered on the National Network Security Framework (N2SF), Zero Trust, and AI-based detection and response. Baek Jong-hyun, head of the city government's Information Security Division, disclosed the plan at the Korea Cybersecurity Conference 2026, held at COEX in Seoul on October 7, according to byline.network.
The basic plan covers 2027 to 2031 and focuses on N2SF adoption, expanded Zero Trust, AI-based active detection and response, a post-quantum cryptography transition, and strengthened security governance.
As part of the effort, Seoul plans to establish a "Seoul Cybersecurity Framework" that references the Cybersecurity Framework (CSF) of the U.S. National Institute of Standards and Technology (NIST). The city will also build an AI-based cybersecurity vulnerability analysis and response system to check vulnerabilities in externally exposed websites, data center equipment, and work terminals, and to manage patch implementation.
Seoul will establish a dedicated security zone in private cloud environments and connect it with the Cyber Safety Center to expand its monitoring scope. It also plans to expand the National Information Security Policy Council from general assemblies and conferences to practical working-level discussions.
The council currently has 12 steering committee members, and plans to create subcommittees by field such as policy, technology, and operations are under review.
Earlier Security Steps
Seoul established a dedicated information security department in July 2024 and enacted a cybersecurity ordinance in September 2025. The city plans to prepare enforcement rules and related guidelines within this year. The Korea Internet & Security Agency (KISA) conducted N2SF pilot and demonstration cases for public institutions, and Seoul has already applied Zero Trust to its remote work environment.
Quick answers
What is Seoul's five-year cybersecurity reform plan?
It is a basic plan to be applied from 2027 to 2031, centered on N2SF adoption, expanded Zero Trust, AI-based active detection and response, a post-quantum cryptography transition, and strengthened security governance.
When and where was the plan announced?
Baek Jong-hyun, head of the Seoul Metropolitan Government's Information Security Division, disclosed the plan at the Korea Cybersecurity Conference 2026 at COEX in Seoul on October 7.
What is the Seoul Cybersecurity Framework?
It is a framework Seoul plans to establish, referencing the Cybersecurity Framework (CSF) of the U.S. National Institute of Standards and Technology (NIST).