Perion

Perion Automates ITGC Testing with Scytale

Perion, a leader in AI-powered advertising solutions, needed a more efficient way to manage its IT General Controls (ITGC) audit process. With a complex system environment, manual audits were inefficient and risked financial and operational integrity. By partnering with Scytale, Perion automated its ITGC processes, achieving 100% coverage, improving efficiency, and ensuring continuous compliance.

Challenges

Perion’s self-developed systems and diverse IT environment presented significant challenges in managing ITGCs. The traditional audit process was labor-intensive, requiring coordination between multiple departments and external advisors. This complexity made audits time-consuming and difficult to scale. Additionally, as a technology-driven company, any failure in ITGC could have severe financial and operational consequences.

Solution

To address these challenges, Perion adopted Scytale’s compliance automation platform to streamline SOX ITGC management. Scytale replaced the periodic audit approach with continuous monitoring, providing real-time control evaluation and enhancing overall compliance efficiency. 

The platform seamlessly integrated with Perion’s self-developed systems, automating data collection and self-auditing across multiple platforms. This transition enabled Perion to automate 71 ITGC controls, eliminating manual processes and ensuring consistent, comprehensive coverage.

Highlights

Scytale automated 71 critical ITGC controls, significantly reducing manual effort and streamlining the audit process.

The shift to continuous compliance ensured real-time oversight and faster issue resolution.

Scytale enabled seamless integration with Perion’s systems, automating evidence collection and auditing across platforms.

Automated ITGC audits were extended to newly acquired subsidiaries, including Vidazoo and Hivestack, supporting scalability.

Results

By automating ITGC testing across its systems, Perion moved from limited manual sampling to continuous monitoring of the full control population, significantly strengthening audit reliability while reducing the operational effort required to support compliance. Scytale integrates directly with Perion’s systems to automatically collect evidence, evaluate controls, and provide ongoing visibility into control effectiveness.

Automated change management testing

Change management controls are continuously validated by linking code changes across repositories to their corresponding Jira tickets and verifying that each change followed the required approval workflow before reaching production.

Continuous monitoring of terminated employee access

Through integration with Okta, the system verifies that access for each departing employee is revoked on time and confirms that no login activity occurred after the employee’s termination date.

Automated GitHub branch protection validation

Branch protection rules are automatically collected and evaluated across repositories, with configurations compared against audit best practices. This replaces a manual process that previously required reviewing numerous screenshots and repository settings.

By automating these and dozens of additional controls, Perion is able to continuously test the full population of ITGC controls rather than relying on manual sampling, significantly reducing the risk of undetected control failures while streamlining internal compliance operations.

Key outcomes

  • 71 ITGC controls are automated and continuously tested

  • 100% control population coverage instead of manual sampling 

  • Automated evidence collation across repositories, identity systems, and internal platforms

  • Continuous monitoring across Perion’s systems and subsidiaries 71 ITGC controls are automated and continuously tested