Israeli Cyber Regulations
Verified91/100Israeli cybersecurity regulatory framework guidance covering INCD (Ma'arach HaSyber) national directives, Bank of Israel Directive 361 (cyber for financial institutions), Directive 364 (the consolidated IT, information security, and cyber framework), ISA requirements for TASE-listed companies, and sector-specific rules for fintech and healthtech. Use when user asks about cyber regulation Israel, INCD compliance, Bank of Israel directives, ISA cyber requirements, or sector cyber rules. Do NOT use for privacy law compliance (use israeli-privacy-compliance instead).
Trust score 91/100 (Verified) · 62+ installs · 2 GitHub contributors · MIT license
Israeli cybersecurity regulation evolves rapidly, with specific requirements from the National Cyber Directorate, the Privacy Protection Authority, and sector-specific regulators. Businesses struggle to track all relevant guidelines, regulations, and standards, and to understand how they actually apply to their organization in practice.
skills-ilnpx skills-il add skills-il/security-compliance@v1.2.0-israeli-cyber-regulations --skill israeli-cyber-regulations -a claude-codeInstall on Claude.ai, Claude Desktop, ChatGPT, Manus, or other platforms
- 1. Click "Download ZIP" to download the skill files.
- 2. Open Claude Desktop and go to Customize > Skills.
- 3. Click "+" and select "Upload a skill", then upload the ZIP file.
- 4. Start a new conversation. The skill will activate automatically when relevant.
When to Apply
- When building or auditing a system that handles Israeli citizens' personal data and needs to comply with the Protection of Privacy Law.
- When an organization experiences a cyber incident and must assess INCD and CERT-IL reporting obligations.
- When designing new banking, insurance, or healthcare software that falls under sector-specific cyber directives (e.g., Proper Conduct Directive 361).
- When registering a database with the Privacy Protection Authority or preparing for a compliance audit.
- When evaluating third-party vendors or cloud providers against INCD critical-infrastructure requirements.
Try These Prompts
We are a small bank and need to comply with Bank of Israel Directive 361. What are the main requirements we need to implement and where do we start?
What are the latest National Cyber Directorate guidelines for organizations in critical infrastructure and how do I implement them practically?
Help me perform a gap analysis between our current information security posture and Israeli cyber regulatory requirements
Frequently Asked Questions
Changelog
Update: fixed the Directive 357 mislabel (Management of Information Technology, not payment security), corrected breach reporting to immediate per Amendment 13 (not 72 hours), attributed incident reporting to Directive 366, added Directive 364 effective date, and refreshed the 2026 cyber-defense draft-bill note.
May 28, 2026
Added BOI Directive 364 (November 2024, consolidates 357/361/363) as primary current cyber framework. Surfaced Directive 366 (incident reporting) and Directive 362 (cloud). Cross-referenced Amendment 13 72-hour PPA window. Added National Cybersecurity Bill draft (January 2026) callout.
Apr 28, 2026
Added Reference Links section pointing to official sources for fact verification.
Apr 15, 2026
Related Skills
Author: skills-ilCoordinate Israeli-built cybersecurity tools for security operations including threat triage, vulnerability management, compliance checking, and incident response. Use when user mentions security operations, "SOC", vulnerability scanning, threat triage, compliance assessment, or asks to coordinate Wiz, Snyk, Check Point, CyberArk, SentinelOne, Armis, Torq, or Pentera tools. Embeds Israeli security best practices including INCD guidelines and Israeli Privacy Protection Law compliance. Do NOT use for offensive security testing or creating exploits.
Author: skills-ilGuide Israeli ML teams through the AI governance and compliance stack: Ministry of Innovation December 2023 AI policy principles, Privacy Protection Law (PPL) and Amendment 13 applied to ML training data, sector-specific rules (Bank of Israel Directive 364, Ministry of Health AMAR medical-device AI), and EU AI Act exposure for Israeli exporters. Generates model cards, data statements, and DPIA templates tailored to Israeli context. Use when preparing AI governance docs, answering an enterprise customer's AI risk review, classifying a system under the EU AI Act, or building an internal responsible-AI checklist. Prevents costly compliance gaps when shipping AI to regulated markets. Do NOT use for general PPL policy (use israeli-privacy-shield), web app security (use israeli-appsec-scanner), or SOC/threat triage (use israeli-cybersecurity-ops).
Author: skills-ilAudit and ensure Israeli e-commerce legal compliance, Consumer Protection Law, return policies, price display, accessibility, and cookie consent. Use when user asks about "online store compliance Israel", "Chok Hagnat HaTzarchan", "consumer protection Israel", "return policy Israel", "IS 5568 ecommerce", "cookie consent Israel", or "חוק הגנת הצרכן". Covers cooling-off period validation, price display requirements, Hebrew terms of service generation, accessibility compliance (IS 5568), and business disclosure verification. Do NOT use for food-specific compliance (use israeli-food-business-compliance) or privacy/GDPR (use israeli-privacy-shield).
Use at your own risk. Terms of Use · Security
Want to build your own skill? Try the Skill Creator · Submit a Skill