Company: BDRX
Filing Date: 2025-04-11
Form Type: 20-F
Source: 0001214659-25-005742
Chunk: 32

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-04-11
Form: 20-F
Item: Item 16K
Chunk 32
---
CYBERSECURITY.

We recognize the importance
of maintaining the confidentiality, integrity and availability of our business operations and systems. Our information technology, or
IT, systems are largely outsourced to a third party vendor which we rely on for implementation of the security measures of those systems
and the data stored in them. Generally, our board of directors oversees our risk management activities, and cybersecurity represents an
important element of our overall approach to risk management. We adopt a cross-functional approach that, together with our outsourced
IT vendor, aims to preserve the confidentiality, security and availability of the information that we collect and store by identifying,
preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.
Cybersecurity Risk Management and Strategy;
Effect of Risk
We face risks related to cybersecurity
such as unauthorized access, cybersecurity attacks and other security incidents, including as perpetrated by hackers and unintentional
damage or disruption to hardware and software systems, loss of data, and misappropriation of confidential information. To identify and
assess material risks from cybersecurity threats, we, together with our outsourced IT vendor, maintain a comprehensive cybersecurity program
to ensure our systems are effective and prepared for information security risks, including regular oversight of our programs for security
monitoring for internal and external threats to ensure the confidentiality and integrity of our information assets. We consider risks
from cybersecurity threats alongside other company risks as part of our overall risk assessment process. Together with our outsourced
IT vendor, we employ a range of tools and services, including regular network and endpoint monitoring, audits, vulnerability assessments,
penetration testing, threat modeling and tabletop exercises to inform our risk identification and assessment.
To provide for the availability
of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against
and respond to cybersecurity incidents, we, together with our outsourced IT vendor, ensure that the following activities and measures
are in place:
To provide for the availability
of critical data and systems, maintain regulatory compliance, manage our material risks from cybersecurity threats, and protect against
and respond to cybersecurity incidents, we undertake the following activities:
monitor emerging data protection laws and implement changes to our processes that are designed to comply
with such laws;
────────────────────────────────────────────────────────────────────────────────────────────────────────────
through our policies, practices and contracts (as applicable), require employees, as well as third parties
employ technical safeguards that are designed to protect all information systems from cybersecurity threats,
provide regular, mandatory