"The heightened level of plan distributions coupled with the security risks associated with electronic communications and the 'new normal' of working remotely, sometimes on personal computers, may increase the exposure of participants' confidential and personal data to cybercriminals.... Monitoring of the cybersecurity controls of third-party service providers, particularly the plan administrator, should occur on a regular basis and should be documented and involve experts if necessary."  MORE >>