"Companies need to take a two-pronged approach in helping employees protect their assets. The first is creating a written plan to address cybersecurity and thinking of the matter as technological, not just legal ... The second aspect is to communicate with the plan sponsor on security measures ... [W]hile companies are generally focused on the logistics of using a TPA, they're not paying as much attention to the behaviors of their employees; the recordkeeper will be the entity watching participants[.]"  MORE >>