Our services: information security, privacy and regulatory compliance

Three areas of expertise for organizations in Israel, focused on what an auditor, a regulator or a customer will actually check.

Talk to an expert

IT infrastructure & architecture

Active Directory & Entra ID security assessment and hardening

Active Directory, and increasingly Entra ID, holds the keys to every system. Whoever controls it controls the whole environment: a forgotten privileged account, an excessive delegation or an administrator session left on a workstation is enough.

We assess the security of your Active Directory and Entra ID environment, design the Tier 0-1-2 administration model with your team and support hardening through remediation.

What you get

A security assessment report: privileged accounts, delegations, attack paths, Entra ID configuration and hybrid synchronization
A Tier 0-1-2 model adapted to your environment: administration accounts, workstations and rules for each tier
A hardening plan prioritized by risk and effort
Support during implementation, with a re-test of each fixed finding
Merge or split of directories for mergers, acquisitions and carve-outs, without service interruption

Cybersecurity & governance

Data Security Regulations & Amendment 13 compliance

The Data Security Regulations (2017) set concrete obligations by security level, including a periodic audit at least every 24 months for the medium and high levels. Amendment 13, in force since August 2025, strengthened the enforcement powers of the Privacy Protection Authority.

What we do

Inventory of your databases and classification by security level
Periodic audit against the Data Security Regulations, with a report your management can act on
Amendment 13 gap analysis: governance, DPO obligation, documentation
Database definition document, security procedure and incident response procedure

Read our summary of the Israeli framework

Security governance

Fractional CISO

An experienced CISO as your dedicated point of contact, a few days a month: to steer your security, report to management and keep your obligations on track, without a full-time hire.

What the role covers

Security policy, roles and security committee
Risk analysis and a prioritized security roadmap
Reporting to management and the board
Customer and insurer security questionnaires
Incident response procedures and crisis preparation
Follow-up of the Data Security Regulations audit and of its remediation

Privacy

GDPR compliance advice and support

Many Israeli organizations process personal data of people in the European Union: patients, customers, students, employees of European subsidiaries, or data entrusted to them by European clients. The GDPR then applies alongside Israeli law.

We provide professional support to your DPO and the teams responsible for implementing GDPR requirements in your organization, without replacing them. Need to appoint a data protection officer (DPO)? Contact us to discuss your needs and the scope of the service.

What we do

GDPR applicability analysis for your activities
Records of processing activities and DPIAs
Review of data processing agreements with European clients and suppliers
Mapping of data transfers between the EU and Israel
Alignment of GDPR compliance with Amendment 13

Discuss appointing a data protection officer (DPO)

CISO and DPO: two separate roles

The DPO must be free to challenge security choices. That is why we never act as CISO and support the DPO at the same client: each service is quoted and contracted separately.

AI & automation

AI as a supporting tool

Once the framework is in place, AI can lighten the recurring work. A person validates every output.

Retrieval (RAG) over your policies, procedures and regulatory texts, to answer compliance questions with sources
Agents that prepare DPIA drafts and keep records of processing up to date
Automated collection of evidence for the next audit

Each engagement is quoted after a first conversation, in NIS (₪).

What does your organization need?

Tell us about your audit, requirement or incident. Together, we will define the scope, priorities and format of the engagement.

Talk to an expert

contact@axiomata.eu

Or message us on WhatsApp