Cybersecurity and Employee Benefit Plans
Plan sponsors have a fiduciary responsibility to understand cybersecurity risk in an employee benefit plan (EBP). In order to satisfy this responsibility, plan sponsors must understand how EBPs are exposed to cybersecurity risk and design effective controls to mitigate that risk.