Company: FENG
Filing Date: 2025-04-18
Form Type: 20-F
Source: 0000950170-25-055759
Chunk: 167

Company: Phoenix New Media Ltd
Filing Date: 2025-04-18
Form: 20-F
Item: Item 16J
Chunk 167
---
 and integrity of our information technology systems and data stored in our systems.
Engagement of Third-Party Service Providers
We have (i) communicated closely with several external security organizations, to acquire zero-day vulnerability information and (ii) purchased third-party security services, including vulnerability scanning services, and penetration and vulnerability testing every year.
In addition, to comply with the requirements under the Cybersecurity Law and Data Security Law of the PRC and enhance the security of our information technology systems, we haveengagedthird-party agencies to perform the Classified Cybersecurity Protection Evaluations on an annual basis, which evaluates the Company’s cybersecurity situation from aspects of physical environment, communication networks, perimeter, computing environment, management center, management systems, management institutions, personnel management, construction management, and operations and maintenance management.
Risks from Cybersecurity Threats
As we generate and process a large amount of data through our platform and rely on our IT systems for our business operations, we face risks associated with cybersecurity threats. For more details, see “ Item 4. Information on the Company - D. Risk Factors - Risks Relating to Our Business and Industry - Our business and operating results may be harmed by service disruptions, or by our failure to timely and effectively scale and adapt our existing technology and infrastructure”; “ - Security breaches or computer virus attacks could have a material adverse effect on our business prospects and operating results”; and “ - We are subject to a variety of laws and other obligations regarding cybersecurity, data security and personal information protection in China, and our failure to comply with any of them could result in proceedings against us by governmental entities or others and harm our public image and reputation, which could have a material adverse effect on our business, results of operations and financial condition. ”

Cybersecurity Governance

Management
Our management is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents primarily through (i) Cybersecurity Leadership Team, and (ii) review and approval of cybersecurity-related policies and procedures.
Cybersecurity Leadership Team
Our Cybersecurity Leadership Team, led by our Chief Executive Officer, Chief Financial Officer and Vice President of technology department, is in charge of cybersecurity risk management, including assessing and managing material risks from cybersecurity threats, prevention (through formulating and implementation of policies and procedures and cybersecurity awareness training), detection, mitigation and remediation of cybersecurity incidents. The Vice President of technology department reports the cybersecurity work to the management through periodic meetings.
Technology, Legal and Internal Audit Departments
Our technology, legal and internal audit departments