Details.
Professional cybersecurity guidance for ERISA-covered pension plans and health and welfare plans, recordkeepers, service providers responsible for plan-related IT systems and data, and plan fiduciaries. Covers formal cybersecurity programs, annual risk assessments, third party security audits, information security roles, access controls, cloud and vendor security reviews, cybersecurity awareness training, secure system development, business resiliency, encryption, technical controls, and incident response.