Urgent Public Security Audit: Expand AI Use and Strengthen Security, Accelerate N2SF Transition

Blocking all cyber attacks on public sector institutions with a single technology is practically impossible. Public agencies must adopt AI and cloud technologies to overcome limitations of one-size-fits-all security systems. A tiered approach is needed to identify protected assets and data, apply security levels based on importance, and rapidly transition to this framework. The N2SF system classifies information into confidential (C), sensitive (S), and public (O) categories, applying differentiated security controls. Public data is integrated with AI and cloud systems, while confidential/sensitive data receives strict access controls and leak prevention measures. This approach redefines protection levels based on data importance rather than blanket network segmentation. The government formalized this transition direction in 2025 guidelines and incorporated it into the National Cybersecurity Basic Guidelines in May 2026.