Cybersecurity of retirement accounts is taking center stage

Retirement plan administration has advanced in recent decades with the rise of the Internet and other digital technologies. However, that has made retirement plans a target for cyber criminals. Armed with stolen personal data, hackers now see trillions of American retirement dollars as a new favorite target.

The retirement industry has had to strengthen its defense against cyberattacks and, as a natural extension of this effort, the due diligence practices of plan sponsor fiduciaries have entered the spotlight. The U.S. Department of Labor released new cybersecurity guidance for plan sponsors in April and is already making it a priority topic of audits as DOL underscores the “obligation to ensure proper mitigation of cybersecurity risks.”

The DOL guidance includes:

Tips for hiring a service provider with sound cybersecurity practices: These tips include asking about the service provider’s security standards, evaluating any historical breaches or litigation and seeking favorable contract terms around cybersecurity.
Best practices for the cybersecurity programs of service providers: These best practices include the use of data encryption, periodic cybersecurity training and third-party audits of security controls.
Online security tips for plan participants: These tips include registering one's account and utilizing multi-factor authentication.

Retirement plan sponsors are strongly encouraged to incorporate cybersecurity oversight in their governance practices for the benefit of plan participants and beneficiaries. As with all good fiduciary habits, it’s important this oversight is memorialized by way of meeting minutes or other internal documentation.

Plan sponsors should understand this obligation extends not only to the cybersecurity controls of their service providers, but the organization’s own internal controls, as well. If not yet addressed, plan sponsors should prioritize a review of their internal practices and talk to their service providers about this topic.

If you would like to speak with a consultant at HANYS Benefit Services on this or any other issue, call (800) 388-1963 or email hbs@hanys.org.

SECURE 2.0 Discussion Series: Session Two

The retirement industry has been buzzing since the SECURE 2.0 Act was signed into law last December. This new, comprehensive legislation has sparked a lot of discussion. As with any major reform, it will take time for the industry to fully adapt and understand all its implications. Following our April 11 webinar on the first three months of the industry’s response, our team reconvened to discuss some of what we have heard from our client and vendor partners and to respond to some of the great questions we heard from attendees. Panel participants included the following HBS team members: Noah Buck, Christina Bauer-Dobias, Sean Bayne, Vincent Bocchinfuso and Kathleen Coonan. The Discussion SB – Throughout the webinar, I wanted to stress two things: 1) confusion about where to start and what is expected from plan sponsors is normal; and 2) even more than three months in, this is a developing situation and people should expect changes as time goes on. With those in mind, engagement through

SECURE 2.0 Discussion Series: Session One

SECURE 2.0 provisions: What we know and what’s still up in the air The SECURE 2.0 Act, signed into law in late December 2022, has factored heavily in retirement industry discourse since the final legislation was published. As with any legislation of this depth and breadth, there’s a lot to digest and the industry takes time to adjust. Our team of experienced advisors recently met to discuss some of the more nuanced provisions of the legislation, such as changes to Roth contributions, and what they could mean for plan sponsors. Panel participants included the following HBS team members: Noah Buck, Christina Bauer-Dobias, Sean Bayne, Vincent Bocchinfuso and Kathleen Coonan. Highlights of our panel’s conversation below should serve to help guide plan sponsor thinking. On Roth employer contributions NB – In addition to deferring pre-tax or Roth, plan sponsors can now allow employer contributions to be classified as Roth, is that right? VB – Correct. This is immediately available to plan s

What you should know about biosimilars

Rapidly increasing healthcare costs will likely continue to impact employers for the foreseeable future. As a result, many employers are considering strategies to manage these costs, including rising prescription drug costs. The introduction of biosimilar drugs as an alternative to biologics may bring value to healthcare by offering cost savings and increasing employee access to necessary medications. While biosimilars can potentially combat rising prescription drug costs, employers will need to learn more about them before considering how their health plans can accommodate these newer drugs. This article explores biosimilar drugs and ways employers can promote or manage their use. What are biosimilars? The European Medicines Agency defines a biosimilar as “a biological medicine highly similar to another already approved biological medicine.” It is produced from living organisms — humans, animals or microorganisms, meaning they aren’t created from synthesized chemicals. They are also

HANYS Benefit Services

Search This Blog