Widespread Cybersecurity Deficiencies Found in Israeli Government and Emergency Services

Executive Summary

A report issued by Israeli State Comptroller Matanyahu Englman has revealed significant and, in some cases, "highly severe" cybersecurity deficiencies across Israel's emergency services and other critical government ministries. The report, which comes after a 55% increase in cyberattacks in 2025, points to systemic weaknesses, including compromised databases, vulnerable remote work systems, and a dangerous lack of coordination and standardization between key institutions. A central criticism is the continued use of fragmented, separate authentication systems by major agencies, which undermines security and efficiency. The findings suggest a national cybersecurity framework that is struggling to keep pace with the growing threat landscape.

Regulatory Details

The State Comptroller's office in Israel serves as an independent government oversight authority, and its reports carry significant weight. This report is a formal assessment of the nation's cyber readiness, particularly within its public sector and emergency response infrastructure.

Key Findings:

• Systemic Vulnerabilities: The report identified weaknesses across a wide range of critical bodies.
• Lack of Coordination: A primary failure is the lack of a unified national cybersecurity framework, leading to fragmented, agency-level policies.
• Fragmented Authentication: The report specifically called out the failure to implement a unified authentication system. Agencies like the Tax Authority, National Insurance Institute, and Defense Ministry each maintain their own separate systems, increasing the attack surface and preventing a holistic view of user identity and access.

Affected Organizations

The report identified deficiencies in numerous government bodies, including:

• Israel Police
• Israel Fire and Rescue Authority
• Courts Administration
• Ministry of Economy and Industry
• National Digital Directorate (including the Government Cyber Defense Unit)
• Prime Minister's Office
• Privacy Protection Authority
• Tax Authority
• National Insurance Institute
• Defense Ministry

Compliance Requirements

The implicit requirement from the report is for the Israeli government to move from its current fragmented approach to a unified national cybersecurity framework. This would involve:

1. Centralized Policy and Oversight: Establishing a single body with the authority to set and enforce cybersecurity standards across all government agencies.
2. Unified Identity and Access Management: Implementing a single, secure, and modern authentication system for all government services to replace the current disparate systems.
3. Coordinated Incident Response: Creating a national-level plan for responding to major cyberattacks that affect multiple agencies.

Impact Assessment

The vulnerabilities identified in the report pose a direct threat to Israel's national security and the functioning of its civil society.

• Disruption of Emergency Services: A successful cyberattack on the police or fire and rescue services could have catastrophic real-world consequences.
• Exposure of Sensitive Data: Compromise of government databases could lead to the leak of vast amounts of sensitive citizen and state information.
• Loss of Public Trust: The inability to secure government systems can erode public trust in the state's ability to function and protect its citizens.
• Inefficiency and Waste: Maintaining multiple, duplicative authentication systems is inefficient and wastes taxpayer money.

Compliance Guidance

For the affected Israeli agencies, the path forward involves a significant overhaul of their cybersecurity strategy.

• Prioritize a Unified IAM Solution: The most critical and repeatedly mentioned issue is the lack of a unified Identity and Access Management (IAM) system. The government should prioritize the selection and implementation of a modern, MFA-enabled IAM platform for all agencies.
• Conduct Comprehensive Risk Assessments: Each agency named in the report must conduct a thorough, independent risk assessment to identify and prioritize the specific vulnerabilities within its systems.
• Invest in Coordination: The National Cyber Directorate must be empowered and resourced to enforce a unified framework and facilitate coordination between agencies.
• D3FEND: The report's findings strongly advocate for the implementation of foundational D3FEND techniques like D3-MFA - Multi-factor Authentication and D3-DTP - Domain Trust Policy at a national level.