"Recognizing that a plan sponsor's means for enforcement of service provider cybersecurity best practices will be largely contractual, the DOL recommended several contractual provisions ... [but] made clear that its list of recommended contractual provisions is not exhaustive ... Plan sponsors should consider integrating the online security tips in future educational campaigns directed at plan participants and in participant communications."  MORE >>