Health care entities have some of the most valuable consumer data sets in the world. With terms like “ransomware, viruses, and phishing scams” jetting around corporate boardrooms, health care companies and their vendors are left spinning as to how to protect corporate assets and preserve consumer data privacy.

Here are six steps every company with health care data should take to help reduce the risk of a cyberattack. These steps will help a company position itself to defend an attack from both a technological and legal perspective.