A Practice Note describing the laws, regulations, enforcement practices, and local resources to consider when developing, implementing, and maintaining an information security program in Israel or as applied to data originating from Israel. This Note also addresses the Protection of Privacy Law, 5741-1981, the Protection of Privacy Regulations (Data Security), 5777-2017, the Privacy Protection Regulations (Provisions Regarding Information Transferred to Israel from the European Economic Area), 5783-2023, sector-specific obligations, and cybersecurity industry standards, including those from the Israel National Cyber Directorate (INCD). The Israel-specific guidance in this Note may be used with the generally applicable resources listed in the Global Information Security Toolkit.