Risk Management and Strategy

We recognize the importance of safeguarding the security of our computer systems, software, networks, and other technology assets. We have implemented cybersecurity measures and protocols for assessing, identifying, and managing material risks from cybersecurity threats, which are integrated into our overall risk management framework. We aim to ensure a comprehensive and proactive approach to safeguarding our assets and operations.

As of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.  

As of the date of this annual report, we have not experienced any material cybersecurity incidents or identified any material cybersecurity threats that have affected or are reasonably likely to materially affect us, our business strategy, results of operations or financial condition.  

Governance

Our board of directors is responsible for overseeing risks related to cybersecurity. Our board of directors shall (i) maintain oversight of the disclosure related to cybersecurity matters in current reports or periodic reports of our company, (ii) review updates to the status of any material cybersecurity incidents or material risks from cybersecurity threats to our company, and the disclosure issues, if any, presented by our management on a quarterly basis, and (iii) review disclosure concerning cybersecurity matters in our annual report on Form 20-F presented by our management.

At the management level, our CEO, CFO and the head of the departments in connection with cybersecurity-related matters are responsible for assessing, identifying and managing cybersecurity risks and monitoring the prevention, detection, mitigation, and remediation of cybersecurity incidents. Our CEO and CFO report to our board of directors (i) timely updates to the status of any material cybersecurity incidents or material risks from cybersecurity threats to our company, and the disclosure issues, if any, and (ii) in connection with disclosure concerning cybersecurity matters in our annual report on Form 20-F.

If a cybersecurity incident occurs, our cybersecurity-related departments will promptly organize personnel for internal assessment. If it is further determined that the incident could potentially be a material cybersecurity event, the cybersecurity-related departments will promptly report the incident and assessment results to our CEO and CFO, and, to the extent appropriate, seek advice from external experts and legal counsels. If it is determined that the incident could potentially be a material cybersecurity event, our CEO and CFO will decide on relevant response measures and management shall promptly prepare disclosure material on the cybersecurity incident for review and approval by our board of directors before it is disseminated to the public.