Company: DRTSW
Filing Date: 2025-03-12
Form Type: 20-F
Source: 0001213900-25-023187
Chunk: 284

Company: Alpha Tau Medical Ltd.
Filing Date: 2025-03-12
Form: 20-F
Item: Item 16K
Chunk 284
---
Item
16K. Cybersecurity

Cybersecurity
Risk Management and Strategy

We
have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability
of our critical systems and information.

As
part of our risk management program, we rely on guidance from external support who in turn refer to industry standards given the scope of our operations and other guidance to help us assess, identify and manage cybersecurity risks. This does not imply
that we meet any particular technical standards, specifications, or requirements, only that we use certain industry frameworks as a
guide to help us identify, assess, and manage cybersecurity risks relevant to our business.

Our
cybersecurity risk management program is integrated

Key
elements of our cybersecurity risk management program include but are not limited to the following:

  risk assessments designed                                                                            

  a designated team principally                                                                                                           

  the use of external service                                                                                

  cybersecurity awareness training of our employees, including our incident response personnel, and senior management; and                                                                              
  a third-party risk management process for service providers based on our assessment of their criticality to our operations, and based on our expectation of their access to sensitive company and...  

We
havenot identifiedparticular risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, which
have materially affected us. We face risks from cybersecurity threats which, if realized, are reasonably likely to materially affect us, including
our operations, business strategy, results of operations, or financial condition. Our information
technology systems, or those of any of our existing or potential future collaborators, trial sites, CROs or other contractors or consultants,
may fail or suffer system failures and security breaches, which could result in a material disruption of our product development programs.

Cybersecurity
Governance

Our
Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee (the “ Committee”)
oversight of cybersecurity risks, including oversight of management’s implementation of our cybersecurity risk management program. In addition, management is charged with updating the Committee, as necessary, regarding any material cybersecurity incidents. In turn,
management is advised by our Software and IT Manager, who has primary responsibility for our overall cybersecurity risk management program,
supervising both our internal cybersecurity personnel, who are experienced in data security and IT infrastructure, and are assisted by
our retained external cybersecurity consultants, who provide, manage, and support our infrastructure and advise on cyber and data security
matters. Additionally, our Software and