Company: BDRX
Filing Date: 2025-04-11
Form Type: 20-F
Source: 0001214659-25-005742
Chunk: 24

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-04-11
Form: 20-F
Item: Item 15
Chunk 24
---
 previous cybersecurity incidents, have materially affected or
are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the
heading “We are subject to cybersecurity risks, including the misappropriation or compromise of our information, our information
technology systems, and other cybersecurity incidents that may result in operational or service disruption, harm to our reputation, litigation,
fines, penalties and liabilities, and the incurrence of costs in an effort to minimize those risks,”in Item 3D--Risk Factors”
which disclosures are incorporated by reference herein.
In the last three fiscal years,
we have not experienced any material cybersecurity incidents.

Cybersecurity Governance; Management

Cybersecurity is an important
part of our risk management processes and an area of focus for our board of directors and management. In general, our board of directors
oversees risk management activities designed and implemented by our management. Our board of directors executes its oversight responsibility
for risk management both directly and through delegating oversight of certain of these risks to its committees, and our board of directors
has authorized our audit committee to oversee risks from cybersecurity threats.
Our audit committee receives
an update from management of our cybersecurity threat risk management and strategy processes covering topics such as data security, any
results from third-party assessments, our incident response plan, and material cybersecurity threat risks or incidents and developments,
as well as the steps management has taken to respond to such risks. In such sessions, our audit committee generally receives materials
discussing current and emerging material cybersecurity threat risks, and describing our ability to mitigate those risks, as well as recent
developments, evolving standards, technological developments and information security considerations arising with respect to our peers
and third parties. Our audit committee also receives timely information regarding any cybersecurity incident that meets establishing reporting
thresholds, as well as ongoing updates.
Our cybersecurity risk management
and strategy processes, which are discussed in greater detail above, are led by ourChief Executive Officerand supported by our Group
Controller and Finance & Administration Manager. These individuals have experience in various roles involving managing information
security, developing cybersecurity strategy, implementing effective information and cybersecurity programs, as well as managing outsourced
IT vendors. These management team members are in close contact with our outsourced IT vendor who is responsible for day-to-day monitoring
of the prevention, mitigation, detection, and remediation of cybersecurity incidents. The delegated management team referenced above,
together with our outsourced IT vendor,, are responsible for the operation of our incident