"At a minimum, plan fiduciaries should be taking some steps to guard electronic access to both monetary assets and sensitive participant data, and they should periodically re-evaluate best practices as technology evolves.... [S]ome proactive steps plan fiduciaries can take to protect participant data and account balances:  [1] Education ... [2] Negotiate cybersecurity protections ... [3] Service provider monitoring... [4] Understand internal risks."  MORE >>