
EBSA Cybersecurity Guidance for Benefit Plans
Cybersecurity and related risks are here to stay. Employee benefit plans face significant cybersecurity threats, and the consequences of a single attack can be devastating. Employee benefit plans, including but not limited to retirement plans, 401(k) plans, 403(b) plans, defined benefit plans, and health and welfare plans, are typically administered by many third parties (service organizations). In addition, participants can access the benefit portal from home computers, personal phones, and work computers. This introduces several …