State comptroller: Israel unprepared for major cyberattack as ministries lag on defenses

Threats from Iran are expected to drive strong cyberattack readiness, but emergency agencies including the Israel Police and the National Fire and Rescue Authority were not properly prepared for emergency scenarios. Exposure risks were not sufficiently examined, and preparedness guidelines drafted by the National Cyber Directorate after October 7 were not distributed to some emergency bodies. After the Hamas-led October 7 attack, information security incidents at Israeli diplomatic missions abroad increased by about 500%. The Foreign Ministry, targeted by Iranian, Hezbollah, and Hamas actors, has a long-standing technological gap and an organizational culture considered inappropriate for the threat level. The audit found serious deficiencies in handling sensitive information, including an open network drive accessible to all employees containing tens of thousands of personal and sensitive documents, and months-long use of a digital tool exposed to cyberattacks. Without a comprehensive, up-to-date cybersecurity policy, exposure to cyberattacks and leaks increases.

"Exposure risks to cyberattacks were not sufficiently examined and, more seriously, explicit preparedness guidelines drafted by the National Cyber Directorate after October 7 were not distributed to some emergency bodies."

"Since the Hamas-led Oct. 7 attack, there has been a troubling increase of about 500% in information security incidents at Israeli diplomatic missions abroad. The Foreign Ministry, a key target for attacks by Iranian, Hezbollah and Hamas actors, continues to suffer from a long-standing technological gap stretching over many years."

"The audit found serious deficiencies in the handling of sensitive information, including an open network drive accessible to all employees that contained tens of thousands of personal and sensitive documents. Most government ministries used for months a digital tool exposed to cyberattacks."

"In the absence of a comprehensive and up-to-date cybersecurity policy, the exposure to cyberattacks and leaks of sensitive information increases. Serious deficiencies were found in the Foreign Ministry regarding the protection of sensitive and personal information, the comptroller said."

Read at www.ynetnews.com