--- title: 3 Lessons Sioux City Entrepreneurs Take Away from Anthem Breach description: The health care industry took a few powerful security blows the first half of this year. Topping the charts was the cyberattack on health insurance giant Anthem, Inc. Here are 3 lessons that top my list of take-a-ways from this breach as well as others. image: https://blog.goosmannlaw.com/hubfs/health_6.30.15.jpg --- [![Goosman Lawfirm](https://blog.goosmannlaw.com/hs-fs/hubfs/Goosmannlaw%20October2017/images/Goosmann_Law_Firm_logo_4C-white.png?width=1250&name=Goosmann_Law_Firm_logo_4C-white.png "Goosman Lawfirm")](http://goosmannlaw.com/) - [COVID-19 Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - Our Team - [Attorneys](https://goosmannlaw.com/attorneys/) - [Non-Attorney Staff](https://http://goosmannlaw.com/non-attorney-staff/) - Practices & Industries - [Practices](https://goosmannlaw.com/practices/) - [Banking & Finance](https://goosmannlaw.com/banking-finance/) - [Bankruptcy, Restructuring & Workouts](https://goosmannlaw.com/bankruptcy-restructuring-workouts/) - [Business](https://goosmannlaw.com/business/) - [Divorce & Family Law](https://goosmannlaw.com/divorce-family-law/) - [Employment](https://goosmannlaw.com/employment-law/) - [Environmental, Health & Safety](https://goosmannlaw.com/health-safety/) - [Estate Planning](https://trustlawcounsel.com) - [Gestational Surrogacy & Adoption](https://goosmannlaw.com/gestational-surrogacy-adoption/) - [International Law](http://goosmannlaw.com/international-law/) - [Litigation / Trial Law](https://goosmannlaw.com/litigation-trial-law/) - [Local Counsel](https://http://goosmannlaw.com/local-counsel/) - [Mergers & Acquisitions](https://goosmannlaw.com/mergers-acquisitions/) - [Rapid Response](https://goosmannlaw.com/rapid-response/) - [Industries](https://goosmannlaw.com/industries/) - [Agribusiness & Cooperatives](https://goosmannlaw.com/agribusiness-cooperatives/) - [Construction](https://goosmannlaw.com/construction/) - [Cyber Law and Telecommunications](https://goosmannlaw.com/cyber-law/) - [Education](https://goosmannlaw.com/education/) - [Health Care](https://goosmannlaw.com/health-care/) - [Manufacturing](https://goosmannlaw.com/manufacturing-law/) - [Multifamily Housing](https://goosmannlaw.com/multifamily-housing-law/) - [Non-Profit & Tax Exempt Organizations](https://goosmannlaw.com/non-profit-law/) - [Real Estate](https://goosmannlaw.com/real-estate/) - [Transportation](https://goosmannlaw.com/transportation/) - [Tribal](https://goosmannlaw.com/tribal/) - Our Firm - [Firm News](https://blog.goosmannlaw.com/firm-news) - Careers - [Attorneys](https://goosmannlaw.com/careers/attorneys/) - [Administration](https://goosmannlaw.com/careers/administration/) - [Internships](https://goosmannlaw.com/careers/internships/) - [Client Testimonials and Results](https://goosmannlaw.com/our-firm/client-testimonials-and-results/) - [Culture, Diversity, and Community](https://http://goosmannlaw.com/our-firm/culture-diversity-and-community/) - [Women-Owned Business](https://goosmannlaw.com/our-firm/women-owned-business/) - [Associations & Memberships](https://goosmannlaw.com/associations-memberships/) - [Firm History](https://goosmannlaw.com/firm-history/) - Blogs - [CEO Law Review](https://blog.goosmannlaw.com/ceo-on-your-side) - [Construction Lawyer](https://blog.goosmannlaw.com/construction-lawyer-on-your-side) - [Cyber Lawyer](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side) - [Deal Maker](https://blog.goosmannlaw.com/deal-maker-on-your-side) - [Divorce Docket](https://blog.goosmannlaw.com/divorce-lawyer-on-your-side) - [Food for Thought](https://blog.goosmannlaw.com/agricultural-lawyer-on-your-side) - [HR Legal Insider](https://blog.goosmannlaw.com/human-resources-on-your-side) - [Law Doc](https://blog.goosmannlaw.com/health-lawyer-on-your-side) - [Paralegal Review](https://blog.goosmannlaw.com/paralegal-review/) - [Real Estate Lawyer](https://blog.goosmannlaw.com/real-estate-lawyer-on-your-side) - [Risky Business](https://blog.goosmannlaw.com/risk-manager-on-your-side) - [The Banker’s Suit](https://blog.goosmannlaw.com/banking-lawyer-on-you-side) - [Trial Law Review](https://blog.goosmannlaw.com/trial-lawyer-on-you-side) - [Trust Law Counsel](https://blog.goosmannlaw.com/estate-planning-laywer-on-your-side) - Resources - [COVID-19 Resource Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - [Podcast](http://podcast.goosmannlaw.com/) - [Videos](https://goosmannlaw.com/videos/) - [FREE eBooks & Tools](https://goosmannlaw.com/free-ebooks-tools/) - Contact Us - [Office Locations](https://goosmannlaw.com/locations/) - [Sioux City Law Firm](https://goosmannlaw.com/locations/sioux-city-law-firm/) - [Sioux Falls Law Firm](https://goosmannlaw.com/locations/sioux-falls-law-firm/) - [Omaha Law Firm](https://goosmannlaw.com/locations/omaha-law-firm/) - [Spirit Lake & Spencer Law Firms](https://goosmannlaw.com/locations/spirit-lake-and-spencer-law-firm/) - [Real Estate Closings Office](https://goosmannlaw.com/locations/real-estate-closing-office/) - [Submit a Testimonial](https://goosmannlaw.com/submit-a-testimonial/) - [Sign Up for Our Newsletter](https://goosmannlaw.com/sign-up-for-our-newsletter/) - [Pay Online](https://goosmannlaw.com/pay-online-3/) - [  (855) 843-4531](tel:855-843-4531) ![](https://blog.goosmannlaw.com/hubfs/Blog_Images/Lockbox%20Lawyer/close-button.png) [tel:855-THE-GLF1](tel:855-THE-GLF1) # [3 Lessons Sioux City Entrepreneurs Take Away from Anthem Breach](https://blog.goosmannlaw.com/health-lawyer-on-your-side/3-lessons-sioux-city-entrepreneurs-take-away-from-anthem-breach) By [Goosmann Law Team](https://blog.goosmannlaw.com/health-lawyer-on-your-side/author/goosmann-law-team)   |  30, June 2015 [READ NOW](https://blog.goosmannlaw.com/health-lawyer-on-your-side/3-lessons-sioux-city-entrepreneurs-take-away-from-anthem-breach) [Read Post](https://blog.goosmannlaw.com/health-lawyer-on-your-side/3-lessons-sioux-city-entrepreneurs-take-away-from-anthem-breach#article) [![](https://blog.goosmannlaw.com/hs-fs/hubfs/Logos/Logo1.jpg?width=60&name=Logo1.jpg)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/author/goosmann-law-team) [Goosmann Law Team](https://blog.goosmannlaw.com/health-lawyer-on-your-side/author/goosmann-law-team) ![health_6.30.15](https://blog.goosmannlaw.com/hubfs/health_6.30.15.jpg) Starting off this year with a boom, the health care industry took a few powerful security blows the first half of this year.  Topping the charts was the cyberattack on health insurance giant Anthem, Inc. which could affect millions of children and adults for years. A simple online search produces pages of results for lessons learned the few months following.  Here are 3 lessons that top my list of take-a-ways from this breach as well as others. ### **Lesson 1 – Assess and Address Compliance and Security Health Regularly** Although I doubt many of your enjoy any type of *audit*, today’s security threat environment requires routine audits and monitoring as a key component of compliance and security health.  Gone are the days of ignorant bliss that a firewall and anti-virus/malware software fit the bill.  Companies with sophisticated technology structures are making headlines, bad headlines due to breaches undetected for months.  Components such as intrusion detection, user behavior analysis, data leak prevention, two factor authentication, encryption, and more are now part of the security suite necessary to fight cyberattacks.  Requirements far above and beyond federal regulatory IT specifications are needed to mitigate cyber liability in the health care sector.  Do not stop at assessments.  Take the initiative to tackle the weaknesses and flaws from the assessments.  Long term compliance and security health is the goal.  Being proactive can save you thousands in the long run.  A combination of software assessments, technology experts and legal advisors are important assets to assess and address compliance and security health regularly. ###  **Lesson 2 – Implement Vendor Risk Management** Particularly in the health care sector, vendors are a significant source of risk both in regulatory compliance and cyber liability in general. Not only are you responsible for your own compliance and security health, you may be responsible for that of other entities such as Business Associates.  A similar vendor liability scenario exists in the financial industry.  Take a serious look at your contractual relationships with vendors.  Start by listing your vendors and identifying the risks associated with those vendors.  Develop at due diligence strategy by utilizing the same combination of software assessments, technology experts and legal advisors.  Focus on high risk vendors to start with a clearly defined plan of action to address risks with vendors. ###  **Lesson 3 – Attack Cyber Liability with Confidence** My favorite dose of cyberattack reality is provided by [Norse](http://www.norse-corp.com/).  Click the “Live Attacks” button and watch the hits to the United States.  If this were a game, the US would be blown to pieces in minutes.  My three year old son’s current obsession is “BAD” guys (and girls) and superheroes.  For sport or a way to make a living, “BAD” guys (and girls) are out there hacking away.  Be your own superhero in cyber liability and surround yourself with a team of superheroes.  Attack cyber liability with confidence. Build a solid foundation of security within and outside your entity’s walls.  Be proactive at assessing and addressing your security needs.  Regular monitoring of security attacks as well as computer user behaviors provides an outside and inside view of suspicious activity.  Employee education not to share passwords nor open unfamiliar email attachments is also extremely important. The chart topping Anthem breach traces back to obtaining administrator logins through a phishing scheme.  In addition, be proactive about your reaction.  Have a detailed breach plan and processes in place that goes beyond your IT department or consultants.  Mitigate damages to your clients as well as your reputation. [![CONTACT US](https://no-cache.hubspot.com/cta/default/489404/ec70fe7d-ad02-40c5-93ba-4800375ab6e9.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/ec70fe7d-ad02-40c5-93ba-4800375ab6e9) ### Select Different CTA for each Post from Blog Editor [![New Call-to-action](https://no-cache.hubspot.com/cta/default/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422) ### Subscribe Our Blog Thanks for submission!! - Recent - Popular ### Posts by Topic - [Health Lawyer (18)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/health-lawyer) - [CMS (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/cms) - [CPC (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/cpc) - [Firm News (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/firm-news) - [MACRA (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/macra) - [Medicare Overpayments (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/medicare-overpayments) DISCLAIMER: The information in this blog post (“post”) is provided for general informational purposes only, and may not reflect the current law in your jurisdiction. By visiting this website, blog, or post you understand that there is no attorney client relationship between you and the Goosmann Law Firm attorneys and website publisher. No information contained in this post should be construed as legal advice from Goosmann Law Firm, PLC, or the individual author, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this post should act or refrain from acting on the basis of any information included in, or accessible through, this Post without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue from a lawyer licensed in the recipient’s state, country or other appropriate licensing jurisdiction. #### Let Us Know What You Thought about this Post. Put your Comment Below. [Previous Post](https://blog.goosmannlaw.com/health-lawyer-on-your-side/massive-government-crackdown-on-medicare-part-d-fraud) ##### [Massive Government Crackdown on Medicare Part D Fraud](https://blog.goosmannlaw.com/health-lawyer-on-your-side/massive-government-crackdown-on-medicare-part-d-fraud) [Next Post](https://blog.goosmannlaw.com/health-lawyer-on-your-side/cms-and-ama-assisting-providers-in-transition-to-icd-10) ##### [CMS and AMA Assisting Providers in Transition to ICD-10](https://blog.goosmannlaw.com/health-lawyer-on-your-side/cms-and-ama-assisting-providers-in-transition-to-icd-10) ### Contact Info **Sioux City Location** P. 712-226-4000 F. (712) 224-4517 **Sioux Falls Location** P. (605) 371-2000 F. (605) 275-2039 **Omaha Location** P. (402) 280-7648 F. (402) 505-3967 --- [Disclaimer](http://goosmannlaw.com/list-all-blogs/disclaimer/) | [Privacy Policy](http://goosmannlaw.com/privacy-policy/) ### Locations **Sioux City Location** 410 5th Street Sioux City, IA 51101 **Sioux Falls Location** 5010 S. Minnesota Avenue, Suite 100 Sioux Falls, SD 57108 **Omaha Location** Advent Building 17838 Burke Street, Suite 250 Omaha, NE 68118 ![Goosmann](https://blog.goosmannlaw.com/hs-fs/hubfs/Blog_Images/Lockbox%20Lawyer/goosmann-white.png?width=250&name=goosmann-white.png "Goosmann") Goosmann Law Firm is a FULL SERVICE LAW FIRM with locations in Sioux City, Iowa, Sioux Falls, South Dakota, and Omaha, Nebraska. Goosmann Law attorneys are licensed to practice in Iowa, Nebraska, South Dakota, and North Dakota. Their attorney team's practices and industries include but are not limited to Agribusiness and Cooperatives, Banking and Finance, Bankruptcy, Restructuring and Workouts, Business, Construction, Cyber Law and Telecommunications, Divorce and Family Law, Education, Employment, Environmental Health and Safety, Gestational Surrogacy and Adoption, Health Care, Litigation and Trial Law, Manufacturing, Mergers and Acquisitions, Municipal, Nonprofit and Tax Exempt Organizations, Real Estate, and Transportation, Tribal, Wills, Trusts, Estate Planning, and Probate Law. Goosmann © Copyright 2017