חוק התמודדות עם תקיפות סייבר חמורות במגזר השירותים הדיגיטליים ושירותי האחסון (הוראת שעה – חרבות ברזל) (תיקון), התשפ"ד-2024Law on Coping with Serious Cyber Attacks in the Digital Services Sector and Storage Services (temporary provision – Iron Swords) (Amendment), 2024 · automatic translation · suggest a correction

Official summary of the law (Knesset)

On 26 December 2023, the Law on Dealing with Severe Cyberattacks in the Digital Services and Storage Services Sector (Temporary Provision – Swords of Iron) (Amendment), 2024, was published as a temporary provision for a period of seven months. The Law authorizes an authorized director from the Israel Security Agency, the Cyber Directorate, or the Military Intelligence Directorate's National Security Information Center to determine that a cyberattack occurring or about to occur against a provider of storage services or digital services is a severe cyberattack, if he believes there is a real concern that it will harm state security, public security, or the maintenance of essential supplies and services. This determination will be made subject to the following conditions: the attack occurred during the Swords of Iron war; the attack has a real impact that is not limited to the attacked provider, and the attack is a severe cyberattack in light of its characteristics. In cases where a cyberattack is determined to be severe, the Law establishes an action procedure for the purpose of detecting, preventing, or containing the attack as soon as possible. In addition, provisions were established regarding the duty of confidentiality and restriction of use of information, as well as a duty to report to the Attorney General and to the Knesset Foreign Affairs and Defense Committee. As part of the amendment to the Law, a reporting duty was added regarding the number of cases in which a provider was given an opportunity to present its claims when the authorized employee notified the provider of his intention to give it instructions to perform actions, including cyber defense actions on computer material, if the provider did not act appropriately to detect, prevent, or contain the attack, and did not submit an affidavit to the authorized employee regarding these actions. In addition, the aforementioned temporary provision was extended until 31 March 2025.

automatic translation · suggest a correction