Search the Community
Showing results for tags 'cybersecurity'.
Found 1 result
-
Plenty of advisors are preaching to retirement plans’ fiduciaries (mostly, employers) that they ought to do something about cybersecurity. Imagine an employer takes heed, and tries to follow EBSA’s Tips for Hiring a Service Provider with Strong Cybersecurity Practices. https://www.dol.gov/sites/dolgov/files/ebsa/key-topics/retirement-benefits/cybersecurity/tips-for-hiring-a-service-provider-with-strong-security-practices.pdf Step 6 is about what a fiduciary should seek to include in (or delete from) a service provider’s contract. It includes a list of five or six provisions a fiduciary should seek. But is this realistic? Imagine a plan’s size limits its negotiation with a recordkeeper to engaging it (on its standard terms) or not. For the points the EBSA guidance mentions, are there meaningful differences in what recordkeepers offer? Or are recordkeepers’ provisions so much in a common mainstream that there’s nothing much an employer would compare?