Company: NYXH
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0001410578-25-000398
Chunk: 28

Company: Nyxoah SA
Filing Date: 2025-03-20
Form: 20-F
Item: Item 16J
Chunk 28
---
 identify our cybersecurity threat risks by comparing our processes to standards set by the National Institute of Standards and Technology, or NIST. To provide for the availability of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against and respond to cybersecurity incidents, we undertake the following activities:

  monitor emerging data protection laws and implement changes to our processes that are designed to comply with such laws;  
 ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

  through our policies, practices and contracts (as applicable), require employees, as well as third parties that provide services on our behalf, to treat confidential information and data with c...  

  employ technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functi...  

  provide regular, mandatory training for our employees and contractors regarding cybersecurity threats as a means to equip them with effective tools to address cybersecurity threats, and to comm...  

  conduct cybersecurity management and incident training for employees involved in our systems and processes that handle sensitive data;  

  leverage the NIST incident handling framework to help us identify, protect, detect, respond and recover when there is an actual or potential cybersecurity incident; and  

  carry information security risk insurance that provides protection against the potential losses arising from a cybersecurity incident.  

Our incident response plan coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable legal obligations and mitigate damage to our business and reputation.