SPARK Releases Best Practices for Cyber Security Capability Reporting

The best practices tell retirement plan recordkeepers how they should report their cyber security capabilities to plan sponsors and advisers.

The SPARK Institute announced the development of industry best practices for how recordkeepers should report their cyber security capabilities to plan sponsors and plan consultants.

Last year, The SPARK Institute formed a Data Security Oversight Board (DSOB), comprised of both recordkeepers and members of the plan adviser community. “Our original focus was trying to create a data security standard that all industry players needed to meet. However, we quickly realized that one overarching standard was not only unattainable given the different security frameworks each recordkeeper uses, but also was bad security policy. If that one standard was breached then everyone’s systems would be at risk” says Doug Peterson, the chief risk officer for Empower Retirement and the chair of SPARK’s DSOB. “In the end, we chose to standardize how security capabilities are reported, so the plan sponsor would have a uniform way to better compare each vendor.”

Get more!  Sign up for PLANSPONSOR newsletters.

When a member firm uses SPARK’s best practices to describe their overall data security capabilities they must use the 16 identified critical data security control objectives, defined by the DSOB. These best practices also require members to use an independent third-party auditor. Each audited report, regardless of the security framework used, must include a detailed report showing identified controls mapped to one of SPARK’s 16 control objectives.

“Cyber security is becoming a significant concern for everyone, especially plan sponsors. Plan sponsor governing bodies may not have cyber security expertise, and most plan sponsors outsource their recordkeeping, customer service and marketing services. So, the establishment of standardized reporting of best practices for cyber security with independent certification can be a great comfort and great assistance to plan sponsors” says Keith Overly, executive director of the State of Ohio’s Deferred Compensation Plan.

The best practices report may be obtained by SPARK members here or upon request by contacting Tim Rouse at tim@sparkinstitute.org.

Not-for-Profit Plan Sponsors and Participants Could Use More Lifetime Income Education

In-plan lifetime income options are offered by more than half of not-for-profit plan sponsors surveyed, but among those that don't, misconceptions exist.

More than half (59%) of plan sponsors in the not-for-profit sector are concerned that employees will run out of money in retirement, according to a new survey by TIAA. The study also finds that the top concern among sponsors is that workers would delay retirement due to inadequate savings (64%).

These sentiments are often reflected in the private defined contribution (DC) plan sector as well, and TIAA points to several solutions that may allay these fears including in-plan retirement income options – a choice offered by more than half of the plans TIAA surveyed.

Get more!  Sign up for PLANSPONSOR newsletters.

However, the firm says those who don’t offer one share common misconceptions about annuities. Thirty-four percent say employees have better access to these investment vehicles outside the plan. Meanwhile, 21% believe the fees associated with these options are too high.

Derek Heaslip, senior managing director of institutional retirement, TIAA, says in-plan options can offer various benefits participants may not find in retail products, including lower fees.

“In-plan lifetime income options are usually group annuities so the participant typically gets better fees,” he tells PLANSPONSOR. “You can also start contributing before you retire. When you accumulate over time, you typically get better rates and the benefits of vesting and compounding, as opposed to investing in a guaranteed income option at the point of retirement.”

Ron Pressman, CEO of Institutional Financial Services at TIAA, adds: “We’ve seen that employees who contribute to an annuity through their retirement plan over time can generate more retirement income than those who simply purchase one upon retiring.”

However, research suggests that lifetime income options across the board can be very complicated for several participants to comprehend. This is why plan sponsors can benefit from a targeted, holistic approach to educating employees around key aspects of their retirement plans, including annuities as investment options.

Simple Education Needed

TIAA’s survey finds that 68% of not-for-profit sponsors believe financial education designed specifically for different age groups or life stages is effective. However, only 33% offer it.

“Plan sponsors can work with their providers to offer a comprehensive employee engagement program and identify services that may be most effective for their specific employee populations,” Pressman says.

Heaslip tells PLANSPONSOR that his firm has seen much engagement with digital tools, apps and videos that educate participants about everything from budgeting to investing in different products including annuities. He says leveraging technology and gamification has been particularly effective in getting employees to engage with their plans through digital quizzes, contests and competitive games they can play with their co-workers.

“One of the most successful games we’ve released recently is called Financial IQ,” Heaslip explains. “It’s kind of a friendly online contest that encourages and drives financial awareness through a peer-to-peer competitive setting. You test individuals’ financial IQ and that drives more awareness and engagement in the plan.”

He adds, “Roughly 70% of repeat players are women, and 29% were among Gen Y. We have a big uptake among the age 24 to 34 bracket.”

Nonetheless, human interaction is still key to any holistic educational program.

“We encourage plan sponsors to push for engagement, education and awareness through videos, digital tools and gaming as well as one-on-one advice,” Heaslip says.

Particular information about plan components like in-plan lifetime income options can also be broken down into digestible information on participant websites. “We have a lot of education and advice around what these guaranteed income products are,” Heaslip says. “What we’ve tried to do is simplify these products and explain how they work, because they can be confusing and they can have a somewhat misguided reputation. So, our tools and videos bring these products to life to help people understand what they offer and what their benefits are.”

More information about the first “Not-for-Profit Plan Sponsor Insights Survey” by TIAA can be found at tiaa.org.

«