Rav MagenIsraeli information-security management framework · Rav-Magen

Rav Magen —
The Israeli government infosec regulation

Rav Magen is an Israeli information-security management framework developed by the National Cyber Directorate. It's required from IT and service providers to government bodies and critical infrastructure in Israel. CBE has guided Israeli organizations to compliance for 30 years.

CBE specializes in guiding and certifying organizations for the Rav Magen standard, tailoring the management system to the organization's needs.

Framework: Rav Magen 2023Authority: National Cyber DirectorateApplies to: IT providers to governmentValidity: government, critical infrastructure

Quick facts – Rav Magen

Goal

Information-security management for government suppliers

Who needs it

IT and service providers to Israeli government bodies

Importance in Israel

Mandatory for IT providers to government and critical infrastructure

Complements

ISO 27001, NIST, ISO 22301

CBE – success rate

100% – hundreds of certified clients

What is Rav Magen?

An Israeli information-security framework for government suppliers

Rav Magen is an information-security management framework developed by the National Cyber Directorate and is a requirement for any IT provider that wants to work with government bodies and critical infrastructure in Israel.

The framework is based on ISO 27001 and NIST and adapted to the requirements of the Israeli government. It includes different maturity levels according to the sensitivity of the environment — from government offices to defense systems.

CBE doesn't just guide you to Rav Magen — we build a GRC framework that combines Rav Magen, ISO 27001 and ISO 22301, because government suppliers are often required to meet all three.

Israeli government

Compliance with National Cyber Directorate requirements.

Tailored infosec

Unique requirements for government environments.

Supplier certification

Receiving approval to work with government bodies.

Critical-infrastructure protection

Meeting security requirements for national infrastructure.

Who needs Rav Magen?

Government IT providers

Any IT company providing services, software or infrastructure to government bodies.

Government cloud providers

IaaS and SaaS providers hosting government information.

Critical industries

Energy, transportation, health — critical infrastructure.

To sector page

Defense & security

Suppliers to the Ministry of Defense and the police.

Government finance

Bank of Israel, Tax Authority, and government financial bodies.

Local authorities

Municipalities looking for approved IT providers.

Benefits

What do you get from Rav Magen certification?

Access to government tenders

Rav Magen is an entry requirement to the Israeli government market

Proven security

Proof that your information security meets government standards

Regulatory compliance

Compliance with National Cyber Directorate requirements

Basis for ISO 27001

Rav Magen and ISO 27001 overlap — CBE builds both together

What does Rav Magen require?
1

Organizational context

Defining the organization's needs, stakeholders and the scope of the quality management system.

5

Operation

Process planning and control, managing customer requirements, external providers and output control.

2

Leadership

Management commitment, quality policy and defining roles and responsibilities.

6

Performance evaluation

Measurement, analysis, internal audit and management review.

3

Planning

Risk and opportunity management, quality objectives and plans to achieve them.

7

Improvement

Managing non-conformities, corrective actions and continuous improvement of the system.

4

Support

Resources, employee competence, internal communication and documentation.

Don't know where to start?

CBE performs a full Gap Analysis and builds a work plan tailored to your organization.

The compliance process with CBE

CBE accompanies you at every stage — from the first step to the certificate

1

Gap Analysis vs. Rav Magen

Mapping gaps against Cyber Directorate requirements

2

Building a security framework

Procedures, policies and controls aligned with Rav Magen

3

Implementation & testing

Implementing controls, Pen Testing and security tests

4

Documentation for the authority

Preparing an Evidence Package for the government

5

Ongoing support

Requirement updates from the Cyber Directorate

Why choose CBE for Rav Magen guidance?

30 years, hundreds of clients, 100% success — here's what sets us apart

100% success

Committed to success! No client has failed a certification audit. Not certified — you don't pay!

A pace that suits you

We adapt the schedule to your deadline — tender, supplier, client.

We write for you

CBE's skilled human team writes your procedures and documentation tailored to your organization.

Full GRC framework

Rav Magen is the government base. CBE also guides ISO 27001, ISO 22301 and more — under one roof.

Years-long support

We don't disappear after the certificate. Annual audits, standard updates, organizational changes.

4,000 satisfied clients

From startup to corporation — experience with every type of organization in every field.

Rav Magen as part of a government GRC framework

Rav Magen covers the Israeli requirement — ISO 27001 complements for the global market. CBE guides both.

About CBE's GRC framework

FAQ about Rav Magen

A question you didn't find here?

Call for a free consultation

03-5105232

What's the difference between Rav Magen and ISO 27001?

Which bodies require Rav Magen?

Is ISO 27001 enough for government suppliers?

How long does compliance take?

CBE specializes in guiding and certifying organizations for the Rav Magen standard. The service is provided by CBE's experts, with 30 years of experience in ISO standards, over 4,000 satisfied clients and 100% success in audits.

A consultation call — at no cost and with no obligation

For example: we submitted a government tender and were required to meet Rav Magen requirements...

Prefer to talk?

03-5105232

Address

Nationwide service