Seoul City Responds to Cyber Threats... Cybersecurity Officers to Be Appointed Across All Agencies

Enactment of the "Ordinance on Cybersecurity of the Seoul Metropolitan Government"
Establishment of Cybersecurity Officer and Deputy Cybersecurity Officer Positions
Comprehensive Oversight of Security Policies... Response through Security Operations Center

The Seoul Metropolitan Government has decided to establish new positions for Cybersecurity Officers and Deputy Cybersecurity Officers within the city government and all affiliated organizations to respond to increasingly sophisticated cyber threats. These roles will be dedicated to overseeing security policies, and the city also plans to conduct annual cybersecurity audits.

On September 24, the Seoul Metropolitan Government announced that it has enacted the "Ordinance on Cybersecurity of the Seoul Metropolitan Government," which will be promulgated and take effect starting September 29.

The ordinance is designed to systematically support cybersecurity operations across all city agencies. In particular, it mandates the appointment of Cybersecurity Officers and Deputy Cybersecurity Officers in the city government and each affiliated organization. The Cybersecurity Officer will be responsible for developing security policies, supervising related work, and managing relevant organizations, while the Deputy Cybersecurity Officer will assist in these duties.

The ordinance also stipulates that regular annual cybersecurity audits and information system inspections will be conducted to assess the management level of each agency, address vulnerabilities, and enhance security capabilities through employee-wide education and simulation training.

Measures to respond to emerging cyber threats are also included. The ordinance requires the city to establish governance that enables real-time detection and response to attacks through its Security Operations Center, as well as immediate recovery in the event of an incident, thereby minimizing potential damage. Previously, in July 2024, the Seoul Metropolitan Government established a dedicated Information Security Division, and with this ordinance, it now has a legal framework in place as well.

According to the Korea Internet & Security Agency, the number of reported private-sector security incidents in the first half of 2025 reached 1,034 cases, an increase of 15% compared to the same period last year, and public sector networks are also being targeted.

Following the promulgation of the ordinance, the city will implement a detailed roadmap in stages. In October, it plans to hold briefing sessions for affiliated organizations to share the purpose and main direction of the ordinance and to explain the responsibilities and obligations of each agency. Within next year, a five-year master plan will be developed to outline the mid- to long-term cybersecurity policy goals and initiatives for the city and its affiliated organizations. The master plan will include analysis of domestic and international trends, strategies for adopting and responding to new technologies, and measures to strengthen workforce development and training.

Kang Okhyun, Director of the Digital City Bureau of the Seoul Metropolitan Government, stated, "Based on the enactment of this ordinance, we will further enhance the level of cybersecurity across all city agencies and strengthen proactive response capabilities through public-private cooperation. Ultimately, we aim to provide uninterrupted digital services that citizens can trust and rely on."

This content was produced with the assistance of AI translation services.