The State Comptroller: National Insurance Institute's information systems - are outdated

The State Comptroller, Matanyahu Engelman, states in a special report published that deals with upgrading the computer system at the National Insurance Institute, that some of the organization's information systems are outdated and have been in use for 30 years or more. 47 and 34 years.
The State Comptroller examined the Tevel project to upgrade the computer system in the National Insurance Institute, which is one of the largest, most complex and expensive computer projects in the public sector in recent years. The project is designed to improve the service to the public through the implementation of a central data infrastructure that will provide an overall view of each insured, while focusing on the exercise of his rights. The audit took place from February to November 2019.
The project began in 2010 and is intended to last until 2020. Over the years, quite a few difficulties have arisen in the management of the project and there have been many delays. As part of the auditor's audit, the contents of the project, its budget and its work plan were examined, including correcting the deficiencies that the former State Comptroller Yosef Shapira warned about in the auditor's report from 2015. The aspects of information security in the project and the professional relationship with the government The government.
The Comptroller notes that Social Security has implemented some important and advanced systems as part of the project, but these are only a small part of the systems originally planned in 2009: out of 31 core systems, only five systems were implemented ten years after the project began, even partially compared to planning.
Despite the partial execution of the contents, the budget used at the end of the audit was actually 58% higher than the original planned budget. NIS 755 million was used, while the original budget approved for the project in 2009 was NIS 477 million.
Following a crisis in the project in 2017, Social Security re-examined its condition and outlined a follow-up plan until the end of 2019, which included limited contents relative to the original plan.
The audit found that in 2019 there was a real delay in the planned activity due to many glitches, after most of the budget approved for it had already been used. It was further found that the project budget did not include all the direct costs associated with the project, such as direct manpower and contracting with consultants.
These costs amounted to NIS 50 million in the years 2010 - 2019 - about 7% of the total cost of the project. The audit shows that in the first half of 2019, the National Insurance Institute advanced the implementation of the project without reaching an agreement between the parties involved regarding the existence of a detailed annual work plan. "This was to impair the execution of the budgetary supervision of the project as required."
 As part of a risk survey conducted by the National Insurance Institute for all information systems in the organization, some of the risks of ICT and information security were mapped, and the reasonableness and damages for each risk were not estimated, even though some systems contain sensitive information. In addition, the National Insurance Institute performed resilience tests on one of the world's systems more than a year after the system had already been launched.
However, the Comptroller notes that in recent years there has been an increase in the involvement of senior Social Security management in the project. Anyone who reads the report can get the impression that in any case, 47-year-old computer systems probably deserve to be displayed in a museum rather than serve as the largest social institution in the State of Israel.
The National Insurance Institute stated in response: "The audit report indicates the administrative improvement that has taken place in recent years with regard to the system of decision-making, supervision and budgetary control related to the Tevel project. In the past year, another tier of the system has been assimilated in about 50% of the Social Security branches, while now it is assimilated in the other branches. "The National Insurance Administration took seriously the comments of the auditor's report regarding the conduct of the system in the matter of the world since 2009. In this framework, lessons were learned, conclusions were drawn and decisions were made that would prevent the recurrence of these failures in the future