JERUSALEM — State Comptroller Matanyahu Englman published a report on June 9, 2026, on Israel's cyber preparedness and wartime performance. The audit reviewed the Prime Minister's Office, the National Cyber Directorate, the Shin Bet, the National Security Council, government ministries, sectoral cyber units, and 21 key economic bodies from February 2023 to June 2025.
After October 7, 2023, the volume and complexity of cyberattacks against Israeli entities increased. In 2024, cyberattacks focused on collecting information on civilians, personal targets, and processes in Israel. Israel did not experience a cyber incident that substantially harmed its economy between October 7, 2023, and June 2025. The audit identified hundreds of cyber incidents with substantial potential for economic damage between October 7, 2023, and April 30, 2024.
From 2020 to June 2025, the directorate did not submit semiannual reports on the protection status of Israeli computerized systems to prime ministerial and security officials. The steering committee for essential computerized systems in critical state infrastructure did not meet in 2021 and did not convene for 14 months following October 7, 2023. This committee had previously convened in December 2020, January 2022, December 2022, June 2023, and December 2024. Prime ministers did not initiate dedicated security cabinet discussions on cybersecurity between 2014 and June 2025, with the exception of a single meeting in 2018.
Prior to the war, the directorate warned that cybersecurity protection levels in non-critical economic sectors were insufficient. These warnings were delivered to an interministerial team, then-intelligence minister Gila Gamliel, and a ministerial forum chaired by Prime Minister Benjamin Netanyahu. In October 2024, former directorate head Gaby Portnoy reported that the maturity level of cybersecurity protection in the economy remained insufficient. Portnoy said, "The dramatic improvement in the pace and capabilities of attacks required action to strengthen Israel's line of defense and ensure functional continuity at the economic and security levels."
Some critical state infrastructure bodies had pre-war certification scores indicating limited defensive capabilities against cyberattacks. By June 2025, certification scores for these bodies improved but remained below target levels. Israel did not complete dedicated cyber legislation for more than a decade, despite government decisions adopted between 2011 and 2021. In January 2024, Prime Minister Benjamin Netanyahu directed officials to submit a cyber bill memorandum for approval by the Ministerial Committee for Legislation within three months. As of June 2025, the memorandum had not been finalized, inter-ministerial disagreements remained, and no submission timetable was established.
The National Emergency Authority and the directorate did not conduct a national cybersecurity drill for six years before the war. A national cybersecurity drill was conducted in a tabletop format in November 2024. In March 2025, the National Emergency Authority conducted a broader national drill incorporating war and cyber scenarios, with the directorate assisting in planning and attending. Political leaders, including the prime minister, security cabinet members, and ministers, did not participate in national cybersecurity drills in 2018, 2024, and 2025. Sectoral cybersecurity units exhibited functional weaknesses during 2022 and 2023.
No independent assessment was available for this report.