The National CERT handles cyber incidents in the civilian cyber sphere of the State of Israel. Located in Be'er Sheva's high-tech park, the CERT receives and handles hundreds of reports and information about cyber-attack attempts or threats, from local and international partners, on a daily basis. The CERT is part of the operational unit of the Israeli National Cyber Directorate (INCD) - a state-run, defense-technological entity devoted to protect the Israeli cyberspace.
A Computer Emergency Response Team (CERT) is a designated center for dealing with cyber incidents that exists in about 100 countries, led by a state-government, sectorial, academy or private organization. The existing model in Israel is considered unique in the world because it incorporates five sectorial sub-centers dedicated to specific industries in the economy, which all operate under the same roof and work in synergy. The Israeli CERT maintains working relationships with most of the world's leading cyber organizations and industries, sharing information as well as providing assistance and advice to state partners and trusted partners.
Among the roles of the CERT: Responding to cyber incidents, promoting preventive activities, creating tailor made partnerships and coordination between industries, government and international partners when dealing with and responding to cyber incidents, enhancing information sharing, and preparing and issuing alerts to the public. The CERT is the heart of the ecosystem built in Be'er Sheba among high-tech companies, academia, government and the cyber industry. Alongside these, the Israel National Cyber Directorate also established three innovation arenas in Be'er Sheva specifically aimed at exploring innovative ways of coping with new cyber threats in the areas of Transport, Fintech and Energy. Over 2,400 official visitors from Israel and worldwide have visited the CERT in the past year, bringing international exposure to companies that are located in the city.
The CERT has five sub-centers dedicated to different industries and target audiences that operate around the clock. The information they supply allows us to put together a broad picture of the cyber threats and attacks in Israel and provide a unique answer for each industry.
The main center is the National Incident Management Center. The center, which operates 24/7, regularly receives reports on cyber-attacks, threats and attempts, vulnerabilities and security breaches identified in the Israeli economy. The center, which is operated by analysts who graduated from technological units and universities, maintains continuous contact with the public, organizations and companies in the economy in order to share and receive information on cyber-attacks and threats.
The center provides incident handling capabilities to the Israeli economy and recommendations in case of a cyber incidents. The center can be contacted 24/7 by dialing the free, emergency number 119 - the world's first initiative of its kind that allows any citizen to report a cyber incident and receive initial assistance.
The four other sub-centers are sectorial centers set up by the Israeli National Cyber Directorate in cooperation with the relevant government ministries, which provide solutions to sector-specific cyber threats: The Financial sector; the Government sector; the Public Security sector and the Energy sector. Sectorial centers in the fields of Communications, Transportation and Environment are also planned to be established within the next two years. The centers receive information from entities in their regular field, guide and share relevant information with them, handle cyber incidents, assist back to functional continuity and investigate incidents.
In addition, the CERT includes a number of operating teams:
Technologies and exposure containment: Cyber-technology experts conduct proactive research to detect and mitigate threats, generate alerts and warnings of new threats and initiate studies of future threats.
Reactive Response: Incident response experts in light of indications, or need, providing assistance with incident handling, as well as conducting technical researches to identify and analyze harmful activities.
Operational Collaboration: Running an operational axis with other CERTs worldwide as well as the local and global cyber industry, to promote information sharing, and strengthen global cyber resilience.
Contact the CERT center hotline for cyber incident handling: By calling 119 – 24 hours a day.