Responsible Business

A Culture of Integrity and Accountability

Corporate Governance

Elevance Health places a high priority on strong corporate governance measures. Our Corporate Governance Guidelines provide that our Governance Committee is to consider the overall diversity of the Board when identifying possible nominees for director, including gender, race or ethnicity, age, tenure, and geographic location. The Governance Committee implements that policy, and assesses its effectiveness, by examining the diversity of all the directors on the Board when it selects nominees for directors.

Supplier Diversity

Elevance Health’s Supplier Diversity program creates economic opportunities for underrepresented communities by procuring products and services from small and HUBZone businesses and businesses that are majority owned by ethnic minorities, women, veterans, people with disabilities, and people who identify as LGBTQIA+.

In 2022, we supported these businesses with the following investments:

• Over $1.2 billion in total diverse-owned and small supplier spend;
• $990 million Tier 1 direct diverse and small business spend;
• $172 million Tier 2 diverse subcontractor spend;
• WBE: $200 million
• MBE: $630 million

Cybersecurity and Privacy

Elevance Health is committed to well-being on all levels. This includes safeguarding the sensitive data of the organization and the consumers we serve. We are focused on maintaining trust and confidence with a cybersecurity team that is continually assessing and strengthening our defenses, while actively innovating solutions for the future.

Governed at the Board of Directors level and Audit Committee, the program’s focus is to:

• Safeguard customers’ and clients’ confidential information
• Maintain a cross-functional incident response program to detect and respond to suspected events
• Train and educate Elevance Health associates on our security program and relevant industry trends
• Maintain oversight of our relevant vendors’ observance of Elevance Health’s security requirements
• Align with regulatory and statutory requirements, including HIPAA, HITECH, and GLBA

HITRUST CSF Certification