{"url_path":"/sec/pbm/10-k/2026/item-16k","section_key":"item-16k","section_title":"Item 16K CYBERSECURITY","topic":"sec","document":{"doc_type":"20-F","doc_date":"2026-06-22","source_url":"https://www.sec.gov/Archives/edgar/data/1985062/0001213900-26-070607-index.html","accession_number":"0001213900-26-070607","cik":"0001985062","ticker":"PBM","issuer_name":"PSYENCE BIOMEDICAL LTD.","edgar_url":"https://www.sec.gov/Archives/edgar/data/1985062/0001213900-26-070607-index.html","primary_entity_key":"0001985062","primary_entity_name":"PSYENCE BIOMEDICAL LTD."},"word_count":385,"has_tables":true,"body_markdown":"** **\n\nITEM 16K. CYBERSECURITY\n\n \n\nThe Company has implemented cybersecurity\nrisk management measures intended to protect the confidentiality, integrity, and availability of its critical systems and information.\nThe Company’s cybersecurity risk management measures are integrated into its overall enterprise risk management program, and shares\ncommon methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal,\ncompliance, strategic, operational, and financial risk areas.\n\n \n\nThe cybersecurity risk management measures set\nout the foundation of the process for assessing, identifying and managing material risks from cybersecurity threats and provide guidance\nfor response plan when facing cybersecurity threats. The Company has not engaged assessors or other third parties in connection with such\nprocesses.\n\n \n\nThere can be no assurance that the Company’s\ncybersecurity risk management measures and processes, including its policies, controls or procedures, will be fully implemented, complied\nwith or effective in protecting the Company’s systems and information. The Company has not identified risks from known cybersecurity\nthreats, including as a result of any prior cybersecurity incidents, that have materially affected the Company, including its operations,\nbusiness strategy, results of operations, or financial condition. The Company faces risks from cybersecurity threats that, if realized,\nare reasonably likely to materially affect it, including the Company’s operations, business strategy, results of operations, or\nfinancial condition. Many of the laws and regulations regarding cybersecurity, information security, privacy and data protection applicable\nto the Company are subject to change and uncertain interpretation, and any failure or perceived failure to comply with such laws and regulations\ncould result in negative publicity, legal proceedings, suspension or disruption of operations, increased cost of operations, or otherwise\nharm the business of the Company.\n\n* *\n\n*Cybersecurity Governance*\n\n \n\nThe Board has general oversight power over cybersecurity\nissues and has delegated daily supervision responsibility to the Company’s Finance department. The Finance department, consisting\nof personnel with relevant expertise in cybersecurity management, oversees the implementation of the Company’s cybersecurity risk\nmanagement measures and reports to the Board any material cybersecurity incidents. The Finance department supervises efforts to prevent,\ndetect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal and\nexternal security personnel, threat intelligence and other information obtained from governmental, public or private sources, and alerts\nand reports produced by security tools deployed in the IT environment.\n\n \n\n84\n\n \n\n \n\n**PART III**"}