‫הלשממה ריכזמ‬ ‫םילשורי‬ THE GOVERNMENT SECRETARY Jerusalem Israel Government Resolution No 2444 of February 15 2015 33rd Government of Israel – Benjamin Netanyahu Resolution Advancing the National Preparedness for Cyber Security It is hereby resolved Furtherto Government Resolution No 3611of August7 2011 regarding Advancing the National Capacity in Cyberspace hereinafter Resolution 3611 and specifically Article E of Addendum B of Resolution No 3611 Definition Cyber security – The range of actions for the prevention mitigation investiga and handling of cyber threats and incidents and for the reduction of their effe and of the damage caused by them prior during and after their occurrence 1 To determine that protecting the proper and safe functioning of cyberspac an essential national security interest for the State and an essential govern interest for national security A National Cyber Security Authority 2 To establish in the Prime Minister's Office a National Cyber Security Autho hereinafter the Authority with the mission of defending cyberspace carrying out the following primary tasks a To conduct operateand implement as needed all the operational defensive effortsin cyberspace at the nationallevel from a holistic perspective for the purpose of providing a complete and continuo defensive response to cyber attacks including handling cyber threats incidents in real time formulating an ongoingsituational awareness consolidating and analyzing intelligence and working with the de Article community as detailed in Addendum B 2 Addendum B of this resolution is classified Secret and can be found at the Cabinet Secretariat 1 ‫הלשממה ריכזמ‬ ‫םילשורי‬ THE GOVERNMENT SECRETARY Jerusalem Israel b To operate an assistance center for handling cyber threats hereinafter National CERT for the entire market including working to improve cyb resilience providing assistance in handling cyber threats and inci consolidating and sharing relevant information with all the organizatio the market and to serve as a central point of interface between the de community and the organizations in the market The National CERT wi act in accordance with principles to be determined by the National Cyb Bureau hereinafter the Bureau in coordination with the Attorney Gen within 90 days of the passing of this Resolution c To build and strengthen the cyber resilience of the entire market throu preparedness training and regulation including increasing the readin sectors and organizations in the market instructing the market in the fi of cyber security regulating the cyber security services sector lic standardization conductingexercisesand training and providing incentives and other necessary tools d To design apply and implement a national cyber security doctrine e To execute any other task determined by the prime minister in accorda with the Authority's mission 3 To establish the National Cyber Directorate which includes the Authority a the Bureau as two independent auxiliary units in the Prime Minister hereinafter the Directorate as detailed in Addendum A Article 1 Claus The Head of the Authority will bear the full responsibility for execu Authority'smissionand tasks includingits operational activitiesand administering its assignments and staff The Head of the Bureau will conti leading the policy and strategy in the cyber field at the national level build the national capacity and strengthening the State of Israel as a global lead the cyber field in accordance with the Bureau's roles as outlined in Resolu No 3611 and Article 11 of this Resolution The Head of the Bureau will se as Head of the Directorate and will be charged with approving the Authori work plans In addition an advisory committee for the prime minister will established and entrusted with fundamental policy decisions related t Authority's activity The advisorycommittee will compriseat most five members to be appointed by the prime minister 2 ‫הלשממה ריכזמ‬ ‫םילשורי‬ THE GOVERNMENT SECRETARY Jerusalem Israel 4 To charge the Bureau in coordination with the Ministry of Finance Civil Service Commission with the task of establishing the Authority framework of a multi-year plan for 2015-2017 in a manner that will allow f properimplementation of its missionas a body with both civilianand defensive-operational characteristics as detailedin this Resolution and specifically in Addendum A Article 1 and Addendum B Article 1 At the en this period based on the experience accumulated the advisory committee present its recommendations to the prime minister regarding the lon structure of the Directorate National activity for cyber security 5 To charge the Bureau with the task of establishing in the Authority a natio technological and organizational infrastructure for early warning analysis and sharing of information in order to expose and identify cyber attacks o State of Israel This will be in accordance with the recommendations formulated as specifiedbelow with regardto aspectsrelatedto the establishment of this infrastructure which may affect basic rights includin scope of information to be collected the format of its use and how it is to protected and shared These recommendationsbewill formulated by the Bureau while balancing cyber security needs with protecting basic ri aforementioned and will be brought to the Attorney General for app within 90 days of the passing of this Resolution The aforementioned does limit in any manner the identification and analysis activities conducted by defense community 6 To charge the defense community with the task of working with the Autho on cyber security each organization in the framework of and according to legal responsibilities and in accordance with their mission and autho detailed in Addendum B Article 2 7 To establish a cyber security forum led by the Head of the Authority whic tasked with coordinating supervising and regularizing the joint activities Authority and the defense community as detailed in Addendum B Article 3 3 ‫הלשממה ריכזמ‬ ‫םילשורי‬ THE GOVERNMENT SECRETARY Jerusalem Israel 8 To instruct the Ministry of Foreign Affairs and the Authority to work coordination cooperation and consultation on relevant aspects vis-à-v international arena at the discretion of the authorized parties and in acco with a procedure regularizing the work between the Authority and the Min of Foreign Affairs to be formulated within nine months This procedu include inter alia joint participation in relevant forums 9 To charge the Bureau with the task of presenting to the prime minister wit six months in coordination with the Head of the National Security Counci outlineto transferthe areaof activityin the field of securing essential computerized systems as defined in the Law for Regularizing Security in P Bodies of 1998 hereinafter essential computerized systems from th Security Agency to the Authority within three years of its establishment w taking into account Addendum A Article 2 In addition to charge the Bure and the legal department of the Prime Minister's Office together wi Ministry of Justice with the task of preparing a memorandum of leg amendments needed to implement the outline which will be brought prime minister for approval at the same time 10 In cases of contradictions between this Resolution and the resolution Ministerial Committee for National Security Issues of December 11 2002 Resolution will take precedence 11 Further to the establishment of the Authority and in accordance with its ta to change Addendum A of Resolution No 3611 so that the tasks of the Bur will be amended as follows a To annul the following Articles 2 i 2 j 2 k 2 l 2 m b To delete Article 2 f and replace it with To advance research a development in the cyber field via the professional parties or in independent manner as required for cyber security needs at the level c To delete Article 2 n and replace it with To formulate a national strat for the development of human capital in the cyber field in coord with the professional parties and to advancenationalprojectsto implement it 4 ‫הלשממה ריכזמ‬ ‫םילשורי‬ THE GOVERNMENT SECRETARY Jerusalem Israel 12 It should be clarified that this Resolution does not authorize the Authority the Bureau to handle matters under the statutory authority of the Is Security Agency 13 To charge the Bureau and the legal department of the Prime Minister's Off in cooperation with the Ministry of Justice with the task of preparin memorandum for a cyber security law in accordance with the principles o Resolution including examining the need for legislative amendments bring it to the prime minister for approval within six months of the passing this Resolution 14 To allocatebudgetsand humanresources in orderto implement this Resolution as detailed in Addendum B Article 4 The above is a translation of Government Resolution No 2444 of Febru 15 2015 The binding language of this Government Resolution i held by the Government Secretariat in Hebrew The binding lang draft legislation and law memoranda mentioned in this Resolutio draft published on the record Budgetary decisions are subject to the A Budget Law 5