Company: NOAH
Filing Date: 2025-04-24
Form Type: 20-F
Source: 0001410578-25-000852
Chunk: 275

Company: NOAH HOLDINGS LTD
Filing Date: 2025-04-24
Form: 20-F
Item: Item 16K
Chunk 275
---
Item 16K. Cybersecurity

Risk Management and Strategy

We have implemented comprehensive cybersecurity risk assessment procedures to ensure effectiveness in cybersecurity management, strategy and governance and reporting cybersecurity risks. We have also integrated cybersecurity risk management into our overall enterprise risk management system.

We have developed a comprehensive cybersecurity threat defense system to address both internal and external threats. This system is based on an information labeling system that categorizes our internal data and personal data collected from clients into different levels based on their sensitivity. It implements specific procedures for handling each level of information. For instance, investment-related data and clients’ personal information are assigned the highest protection level, subject to the most rigorous scrutiny in terms of storage, transmission, and dissemination. We are dedicated to managing cybersecurity risks and safeguarding sensitive information through various measures. These measures include technical safeguards, procedural requirements, and an intensive incident response program. Additionally, we provide regular cybersecurity awareness training for our employees. Our cybersecurity team, a specialized unit within our IT department, consistently monitors the performance of our platforms and infrastructure. This enables us to respond promptly to potential issues, including cybersecurity threats.

As of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.

Governance

We have implemented a hierarchical governance system to oversee cybersecurity risks. Our dedicated cybersecurity team, led by the experienced general manager of our IT department, is
responsible
for assessing and managing cybersecurity risks. They also handle the prevention, detection, mitigation, and remediation of cybersecurity incidents. The General Manager of the IT department reports directly to our chief executive officer and provides regular updates to the Noah Group Technology Committee, which is chaired by the chief executive officer. These updates cover any significant cybersecurity incidents or material risks resulting from cybersecurity threats. Periodic reviews are conducted to assess the cybersecurity landscape, potential threats, and our overall readiness to address cybersecurity risks that may affect our company. In the event of a significant cybersecurity incident, the information security team of IT department and Noah Group Technology Committee assume responsibility for reviewing the relevant information and issues involved. They also oversee the disclosure process and ensure appropriate procedures are followed to handle the incident effectively.

Table of Contents

PART III

Item 17. Financial Statements

We have elected to provide financial statements pursuant to Item 18.

Item 18. Financial Statements

The consolidated financial statements of Noah Holdings Limited and its subsidiaries and consolidated entities are included at the end of this annual report