Company: NCNA
Filing Date: 2025-03-20
Form Type: 20-F
Source: 0000950170-25-042709
Chunk: 66

Company: NuCana plc
Filing Date: 2025-03-20
Form: 20-F
Item: Item 3
Chunk 66
---
 be successful in entering into arrangements with third parties to sell and market our product candidates or may be unable to do so when needed or on terms that are favorable to us. We likely will have little control over such third parties, and any of them may fail to devote the necessary resources and attention to sell and market our product candidates effectively. If we do not establish sales and marketing capabilities successfully, either on our own or in collaboration with third parties, we will not be successful in commercializing our product candidates that receive marketing approval or any such commercialization may experience delays or limitations.
 

Our internal computer systems, or those of our CROs or other contractors or consultants, may fail or suffer cybersecurity incidents, which could result in a material disruption of our product development programs, and could subject us to liability.
 We utilize information technology systems and networks, including those licensed from and therefore operated and hosted by third parties, to process, transmit and store electronic information in connection with our business activities. As the use of digital technologies has increased, cybersecurity incidents, including deliberate attacks and attempts to gain unauthorized access to computer systems and networks, have increased in frequency and sophistication, and are becoming increasingly difficult to detect. These threats pose a risk to the security of our systems and networks and the confidentiality, availability, reliability, adequacy, and integrity of our data. There can be no assurance that we will be successful in preventing cyber-attacks or successfully mitigating their effects.
 Despite the implementation of security measures, our internal computer systems, and those of our CROs and other third-party contractors and consultants are vulnerable to damage or disruption from hacking, computer viruses, malware, including ransomware, software bugs, unauthorized access, natural disasters, terrorism, war, and telecommunication, equipment, and electrical failures.
 We have measures in place that are designed to prevent, and if necessary, to detect and respond to such cybersecurity incidents and breaches of privacy and security mandates. Our measures to prevent, detect, respond to, and minimize such risks may be unsuccessful. While we have not, to our knowledge, experienced any significant system failure, accident, or material cybersecurity incident to date, if such an event were to occur and cause interruptions in our operations or the operations of those third parties with which we contract, it could result in legal harm and a material disruption of our programs and our business operations, as well as our financial condition. For example, the loss of clinical trial data from completed or ongoing clinical trials for any of our product candidates could result in delays in our development and regulatory approval