Company: BDRX
Filing Date: 2025-04-11
Form Type: 20-F
Source: 0001214659-25-005742
Chunk: 33

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-04-11
Form: 20-F
Item: Item 16K
Chunk 33
---
 training for our employees and contractors regarding cybersecurity threats
conduct annual cybersecurity management and incident training for employees involved in our systems and
carry information security risk insurance that provides protection against the potential losses arising
Our incident response plan
coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes
to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable
legal obligations and mitigate damage to our business and reputation.
As part of the above processes,
we regularly engage with our outsourced IT vendor to review our cybersecurity program to help identify areas for continued focus, improvement
and compliance.
Our processes also address
cybersecurity threat risks associated with our use of third-party service providers who have access to data or our systems. In addition,
cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties
that have access to our systems, data or facilities that house such systems or data. As a matter of policy, other than our outsourced
IT vendor, we do not grant third parties access to our systems, data or facilities that house such systems or data. Our outsourced IT
vendor continually monitors cybersecurity threat risks to its systems and infrastructure.
We describe whether and how
risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or
are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the
heading “We are subject to cybersecurity risks, including the misappropriation or compromise of our information, our information
technology systems, and other cybersecurity incidents that may result in operational or service disruption, harm to our reputation, litigation,
fines, penalties and liabilities, and the incurrence of costs in an effort to minimize those risks,”in Item 3D--Risk Factors”
which disclosures are incorporated by reference herein.
In the last three fiscal years,
we have not experienced any material cybersecurity incidents.