However, how long can those last after an actual war is started?

The rot goes deep enough that it will be a significant undertaking that should have been done 20 years ago. Better late than never I suppose but how do you do counterintelligence when your counterintelligence people are deeply infiltrated too? Doesn’t help that there are plenty of willing traitors and Shah supporting diaspora in the recruiting pool.