Company: PERI
Filing Date: 2025-03-25
Form Type: 20-F
Source: 0001178913-25-001021
Chunk: 152

Company: Perion Network Ltd.
Filing Date: 2025-03-25
Form: 20-F
Item: Item 16K
Chunk 152
---
 For the year ended December 31, 2024, and as of the date of this report, we have not identified cybersecurity incidents that have materially affected us, including our operations, business strategy, results of operations, or financial condition. Despite our efforts to prevent, detect, mitigate, and remediate cybersecurity incidents, complete protection in the field of cybersecurity cannot be guaranteed and we can make no assurances that we have not experienced an undetected cybersecurity incident, including an incident that may have been material. For more information, see the Risk Factor titled – “Our business and financial performance may be materially adversely affected by information technology issues, data breaches, cyber-attacks and other similar incidents, as well as insufficient cybersecurity and other business disruptions.”

   Cybersecurity Governance
 
Our board of directors considers cybersecurity risk as part of its overall enterprise risk management function and oversees management’s implementation of our cybersecurity risk management program. As part of such oversight, our board of directors receives reports from management and our internal auditor on our cybersecurity risks. In addition, management updates our board of directors, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential. In addition, at least once a year, our board of directors receives a report from management on the topic.
 
   Our cybersecurity risk management team is led by our Chief Information Officer, or the CIO, and Chief Information Security Officer, of CISO. The team is responsible for detecting, assessing and managing our material risks from cybersecurity threats and incidents. Our CIO runs and oversees the cybersecurity risk management program, reports to our COO. Our CISO is reporting to our CIO and has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained third-party cybersecurity consultants. Our CISO has extensive experience working in management roles related to cybersecurity and risk in various high-technology global companies, as well as industry certifications such as the International Information System Security Certification Consortium’s Certified Information Systems Security Professional certification (also known as ISC² CISSP). Additionally, our CIO has over 2 decades of extensive experience in management roles across information systems, information technology, and information security.
 
 Our CISO and CIO periodically report directly to our board of directors on our cybersecurity risk management program and efforts to prevent, detect, mitigate, and remediate cybersecurity-related risks and incidents. In addition, we have an escalation process in place designed to inform senior management and, based on management’s assessment of risk, our board of directors of material cybersecurity-related risks