Company: NYXH
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000398
Chunk: 27

Company: Nyxoah SA
Filing Date: 2025-03-20
Form: 20-F
Item: Item 16J
Chunk 27
---
Item 16J. Insider Trading Policy

OurInsider Trading Policy is included in our Corporate Code of Conduct and Ethics and Whistleblower Policy and is applicable to all of our employees, officers and directors. Our Insider Trading Policy governs the purchase, sale, and other dispositions of our securities by our employees, officers and directors and is designed to promote compliance with insider trading laws and rules and regulations, and any listing standards applicable to us. A copy of our Insider Trading Policy is included in our Corporate Code of Conduct and Ethics and Whistleblower Policy that is available on our website at http://www. nyxoah. com and filed as an exhibit to this Annual Report.

Table of Contents

Item 16K. Cybersecurity

We recognize the critical importance of maintaining the trust and confidence of customers, patients, business partners and employees toward our business and are committed to protecting the confidentiality, integrity and availability of our business operations and systems. Our board of directors is involved in oversight of our risk management activities, and cybersecurity represents an important element of our overall approach to risk management. Our cybersecurity policies, standards, processes and practices are based on recognized frameworks established by the National Institute of Standards and Technology, or NIST, and other applicable industry standards. In general, we seek to address cybersecurity risks through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information that we collect and store by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Cybersecurity Risk Management and Strategy; Effect of Risk

We face risks related to cybersecurity such as unauthorized access, cybersecurity attacks and other security incidents, including as perpetrated by hackers and unintentional damage or disruption to hardware and software systems, loss of data, and misappropriation of confidential information. To identify and assess material risks from cybersecurity threats, we maintain a comprehensive cybersecurity program to ensure our systems are effective and prepared for information security risks, including regular oversight of our programs for security monitoring for internal and external threats to ensure the confidentiality and integrity of our information assets. We
consider risks from cybersecurity threats alongside other company risks as part of our overall risk assessment process. We employ a range of tools and services, including regular network and endpoint monitoring, audits, vulnerability assessments and threat modeling to inform our risk identification and assessment. As discussed in more detail under “ Cybersecurity Governance” below, our board of directors provides oversight of our cybersecurity risk management and strategy processes, which are led by our Chief Financial Officer.

We also