National Intelligence Service's National Network Security Framework - Transitioning the public sector security paradigm from network isolation to Multi-Level Security (MLS) to enable the use of AI and cloud technologies.
The National Network Security Framework (N2SF) is a new public security model that classifies security levels according to data importance and risk (MLS) instead of traditional physical network isolation and applies optimized security controls accordingly. It aims to enable the public sector to safely use the latest technologies like AI and cloud while thoroughly protecting national information assets. The Security Guideline 1.0 was officially released in September 2025, and in May 2026 the revised national cybersecurity directive abolished the blanket network-separation mandate in favor of C/S/O classification with differentiated controls.
Key provisions and requirements of N2SF (National Network Security Framework).
Systems handling classified information whose disclosure could seriously harm national security.
Systems handling sensitive information that is not classified but whose disclosure could significantly affect government operations or citizens' interests.
Systems handling releasable information, with the highest flexibility for internet connectivity, cloud, commercial SaaS and AI services.