Company: ELV
Filing Date: 2025-03-28
Form Type: DEF 14A
Source: 0001156039-25-000046
Chunk: 18

Company: Elevance Health, Inc.
Filing Date: 2025-03-28
Form: DEF 14A
Chunk 18
---
 annual security-awareness trainings, which covers timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, acceptable asset use and mobile security.

Our comprehensive privacy-incident response and prevention program educates associates on the importance of reporting all incidents immediately. Each incident is reviewed and action is taken to address issues identified, mitigate any potential impact and assess our obligations to notify customers, regulators, the media and others. A detailed description of our cybersecurity risk oversight, governance, management and expertise is included in Part I, Item 1C, "Cybersecurity" in our Form 10-K. Information regarding how we implement our privacy policies, including those related to personal data and our Web Privacy Statement, is available at https://www.elevancehealth.com/privacy-policy .

#### Oversight of Artificial Intelligence
We view AI as a key component of our commitment to innovate and fulfill our mission to improve the health of humanity. Our approach to the governance and oversight of AI is designed to ensure that our AI solutions are aligned to our mission and values, including our commitment to responsible and ethical practices.

Our AI Governance Program involves streamlined coordination between our technology, regulatory, data governance, information security and responsible AI (“RAI”) programs. Our RAI program, guided by the National Institute of Standards and Technology (“NIST”) AI Risk Management Framework, is a cornerstone of this governance, focused on ensuring appropriate practices are in place to identify and mitigate harmful bias and promoting accuracy, security and transparency in our AI systems. At the heart of our AI Governance Program are our AI Guiding Principles, which serve as the lens through which our AI solutions are designed, developed and used. More information on our AI Guiding Principles is available in our annual Impact Report.

Our Board monitors our AI strategies, development and use. Our Chief Digital and Information Officer provides regular reports on AI usage and our RAI program to the Board, with input from our Chief Strategy & Transformation Officer. The Audit Committee reviews privacy and data security matters, including relating to AI and our privacy program, risk management, and relevant legislative, regulatory, and technical matters. The complementary roles of the Audit Committee and Board help to ensure that the Board has oversight over all critical aspects of our development, governance, deployment and use of AI solutions.

Our risk-based management framework includes monitoring and oversight activities in alignment with our AI Governance Program, our RAI program, our AI Guiding Principles, and our enterprise policies and procedures, all within the scope of our ERM program. Our AI Governance Council is