Company: FENG
Filing Date: 2025-04-18
Form Type: 20-F
Source: 0000950170-25-055759
Chunk: 166

Company: Phoenix New Media Ltd
Filing Date: 2025-04-18
Form: 20-F
Item: Item 16J
Chunk 166
---
ITEM 16J. INSIDER TRADING POLICIES

We haveadopted an Insider Trading Policy governing the purchase, sale, and other dispositions of our securities by directors, senior management, and employees. A copy of the Insider Trading Policy has been filed herewith as Exhibit 19.1.

ITEM16K. CYBERSECURITY
Risk Management and Strategy
We have adopted a comprehensive risk management system to manage various risks that we face, including financial risks, operational risks, compliance risks, public opinion risks, risks associated with stability of information technology systems, cybersecurity risks and supplier management risks. Cybersecurity risk management is a core component of our overall risk management framework. We have established an array of risk management procedures to identify, assess and manage such risks, including risk identification, risk assessment, risk control and risk monitoring. We have also implemented procedural design, evaluation mechanism as well as risk grading and liability assessment mechanism to enhance our risk management. Set forth below are measures that we undertake to manage cybersecurity risks.
Cybersecurity Leadership Team
We have formed a Cybersecurity Leadership Team, which is led by our Chief Executive Officer, Chief Financial Officer and Vice President of technology department and comprised of personnel from our legal department, internal audit, technology department and various business and content production departments, to carry out cybersecurity risk management. The Cybersecurity Leadership Team is a professional technical team dedicated to managing cybersecurity risks, and is in charge of devising cybersecurity strategies, conducting security audits of operating source code, tracking and analyzing risks, and solving technology related troubles.
Internal Policies
Preventive Policies
We have adopted the following internal policies and procedures to prevent cybersecurity incidents:
•
Information Security Management Policy, which prevents unauthorized access, use and control of network resources to enhance the safety and stability of our network space;
•
Data Security Management Policy, which standardizes the management of data classification, backup and destruction, and ensures reasonable storage of historical data and data security;
•
Technology Department Cybersecurity Management Policy, which specifies the operation process of network equipment to ensure its safe, stable and continuous operation.
Remediation Policies
We have also adopted a Cybersecurity Emergency Response Plan which sets out the procedures for reporting, response and handling of cybersecurity incidents to reduce losses caused by cybersecurity incidents and enhance business continuity.
Technical Measures
We have implemented various technical measures, such as real-time monitoring of traffic logs, host-based vulnerability scanning, transmission encryption and authentication, firewalls and intrusion prevention systems, in order to timely identify and

address cybersecurity threats and protect the security