Company: VSA
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001410578-25-001300
Chunk: 244

Company: VisionSys AI Inc
Filing Date: 2025-05-15
Form: 20-F
Item: Item 16
Chunk 244
---
 are reasonably designed to promote compliance with applicable insider trading laws, rules and regulations, and any listing standards applicable to the Company. A copy of our Insider Trading Policy is filed as Exhibit 11.2 to this Annual Report.
​
​

136

ITEM 16.K.   CYBERSECURITY
--------------------------
Risk Management and Strategy
We have implemented robust processes for assessing, identifying and managing material risks from cybersecurity threats and monitoring the prevention, detection, mitigation and remediation of material cybersecurity incident. We have also integrated cybersecurity risk management into our overall enterprise risk management system.We have established a comprehensive cybersecurity defense system to effectively mitigate both internal and external cyber threats. This system spans multiple security domains, including network, host, and application layers. It integrates a range of security capabilities such as threat defense, continuous monitoring, in-depth analysis, rapid response, as well as strategic deception and countermeasures. Our approach to managing cybersecurity risks and safeguarding sensitive data is multi-faceted, involving technological safeguards, procedural protocols, an extensive program of surveillance on our corporate network, continuous testing of our security posture both internally and with third parties, a solid incident response framework, and regular cybersecurity training sessions for our employees. Our IT department is actively engaged in continuous monitoring of our applications, platforms and infrastructure to ensure prompt identification and response to potential issues, including emerging cybersecurity threats.As of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.
Governance
The cybersecurity committee of our board of directors, or cybersecurity committee, is responsible for overseeing our cybersecurity risk management. Our cybersecurity committee shall (i) maintain oversight of the disclosure related to cybersecurity matters in current reports or periodic reports of our company, (ii) review updates to the status of any material cybersecurity incidents or material risks from cybersecurity threats to our company, and the relevant disclosure issues, if any, presented by our chief executive officer, chief financial officer and cybersecurity officer on a regular basis, and (iii) review disclosure concerning cybersecurity matters in our annual report on Form 20-F presented by our chief executive officer, chief financial officer and cybersecurity officer.
At management level, our chief executive officer, chief financial officer and cybersecurity officer, or the Cybersecurity Risk Management Officers, are responsible for assessing, identifying and managing material risks from cybersecurity threats to our company and monitoring the prevention, detection, mitigation and remediation of material cybersecurity incident. Our Cybersecurity Risk