Company: FENG
Filing Date: 2025-04-18
Form Type: 20-F
Source: 0000950170-25-055759
Chunk: 168

Company: Phoenix New Media Ltd
Filing Date: 2025-04-18
Form: 20-F
Item: Item 16J
Chunk 168
---
 also perform different functions with respect to cybersecurity management. The legal department is responsible for interpreting cybersecurity-related laws and regulations and reviewing cybersecurity-related internal policies. The internal audit department is responsible for internal audits on the implementation of cybersecurity-related policies and procedures. The internal audit department and the legal department jointly report to our Chief Financial Officer. The technology department is responsible for monitoring our data security, information security and application security systems, fixing technical vulnerabilities, and reports to our Vice President of technology department.
Policy Review and Approval
All cybersecurity-related internal policies shall be reviewed and approved by the management personnel in charge of the proposing department as well as the Cybersecurity Leadership Team prior to adoption.
Based on information obtained through such channels, our management makes assessments of cybersecurity risks and incidents and reports the nature, origin and potential impact of cybersecurity risks and incidents to the board of directors based on an assessment of materiality so that the board can learn about material cybersecurity risks and incidents on a timely basis and make decisions accordingly. To keep the management regularly informed about and discuss cybersecurity matters, the Vice President of technology department makes periodic reports to the Chief Executive Officer on cybersecurity risk management and governance at management meetings, have live discussions with the management and address their questions. Based on the management’s

assessmentof the cybersecurity risks, theChief Executive Officer or the Chief Financial Officermakes report to the board if he/she considers it necessary.

Board of Directors
Our board of directors is responsible for and engaged in the oversight of our continuous efforts in monitoring, assessing and managing the risks associated with cybersecurity threats or incidents. The board reviews reports from management on material cybersecurity risks and incidents and discusses remediation plans with the management. At board meetings, the board also hears period reports from the management on cybersecurity risk management and governance and have follow-up discussions with the management.
In addition, our audit committee is responsible for risk assessment and risk management, including risks relating to cybersecurity threats or incidents. The responsibilities of our audit committee include discussing policies with respect to risk assessment and risk management periodically with the management, internal auditors, and independent auditors, and our plans or processes to monitor, control and minimize such risks and exposures.

PART III

ITEM 17. FINANC IAL STATEMENTS

The Registrant has elected to provide the financial statements and related information specified in Item 18.

ITEM 18. FINANC IAL STATEMENTS

The consolidated financial statements of Phoenix New Media Limited are included at the end of this annual report.

ITEM 19. EX HIBIT INDEX

  Exhibit      Description of