Company: BDRX
Filing Date: 2025-04-11
Form Type: 20-F
Source: 0001214659-25-005742
Chunk: 23

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-04-11
Form: 20-F
Item: Item 15
Chunk 23
---
 company risks as part of our overall risk assessment process. Together with our outsourced
IT vendor, we employ a range of tools and services, including regular network and endpoint monitoring, audits, vulnerability assessments,
penetration testing, threat modeling and tabletop exercises to inform our risk identification and assessment.
To provide for the availability
of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against
and respond to cybersecurity incidents, we, together with our outsourced IT vendor, ensure that the following activities and measures
are in place:
To provide for the availability
of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against
and respond to cybersecurity incidents, we undertake the following activities:
monitor emerging data protection laws and implement changes to our processes that are designed to comply
with such laws;
────────────────────────────────────────────────────────────────────────────────────────────────────────────
through our policies, practices and contracts (as applicable), require employees, as well as third parties
employ technical safeguards that are designed to protect all information systems from cybersecurity threats,
provide regular, mandatory training for our employees and contractors regarding cybersecurity threats
conduct annual cybersecurity management and incident training for employees involved in our systems and
carry information security risk insurance that provides protection against the potential losses arising
Our incident response plan
coordinates the activities we take to prepare for, detect, respond to and recover from cybersecurity incidents, which include processes
to triage, assess severity for, escalate, contain, investigate and remediate the incident, as well as to comply with potentially applicable
legal obligations and mitigate damage to our business and reputation.
As part of the above processes,
we regularly engage with our outsourced IT vendor to review our cybersecurity program to help identify areas for continued focus, improvement
and compliance.
Our processes also address
cybersecurity threat risks associated with our use of third-party service providers who have access to data or our systems. In addition,
cybersecurity considerations affect the selection and oversight of our third-party service providers. We perform diligence on third parties
that have access to our systems, data or facilities that house such systems or data. As a matter of policy, other than our outsourced
IT vendor, we do not grant third parties access to our systems, data or facilities that house such systems or data. Our outsourced IT
vendor continually monitors cybersecurity threat risks to its systems and infrastructure.
We describe whether and how
risks from identified cybersecurity threats, including as a result of any