"Although issued as informal tips and best practices, the Guidance Packet is likely intended to provide a minimum standard of care, which may be an indication that the DOL intends to focus future enforcement efforts on cybersecurity.... Each state now has its own laws governing cybersecurity breach notification and the steps that must be taken in the event of a breach, so the incident response procedure in any cybersecurity program should incorporate any such requirements."

MORE >>