Products May 14, 2021

Fiduciary Scorecard From Pentegra Can Help Measure Plan Success

The firm says it gives sponsors a way to document the fiduciary oversight process and provides assurances to senior management and boards that the plan is being managed properly.

Reported by

Pentegra Services has introduced the Fiduciary Scorecard, a tool to help defined contribution (DC) plan sponsors measure plan success.

It enables sponsors to document the fiduciary oversight process, to illustrate the value of their fiduciary oversight and ensure high standards of care.

Never miss a story — sign up for PLANSPONSOR newsletters to keep up on the latest retirement plan benefits news.

As an institutional fiduciary, Pentegra assumes responsibility and liability for key plan tasks. The scorecard details the list of fiduciary tasks being completed for DC plans over the course of the plan year, helping to instill sponsor confidence that a plan is in good standing and meets all fiduciary requirements.

“Fiduciary services are becoming increasingly important to retirement plan sponsors, particularly in today’s environment,” says Pentegra President and CEO John Pinto. “With our new Fiduciary Scorecard, we can offer our clients an even more comprehensive solution. As an institutional fiduciary, our goal is to help our clients minimize risk and ensure that their retirement plans are being managed properly.”

Pentegra says the tool will help sponsors in their dealings with senior management and boards, assuring them that they are taking the right steps when it comes to plan oversight and plan success. Pentegra says the scorecard will also make it easier for sponsors to administer their plans.

Compliance May 14, 2021

SEC Settles Charges of Cybersecurity Failure Against GWFS Equities

The broker/dealer has agreed to a $1.5 million fine, a censure and an order to cease and desist from future violations.

Reported by

The Securities and Exchange Commission (SEC) announced it has settled charges against GWFS Equities, a Colorado-based registered broker/dealer (B/D) and affiliate of Great-West Life & Annuity Insurance Co., for allegedly violating the federal securities laws governing the filing of Suspicious Activity Reports (SARs). GWFS provides services to employer-sponsored retirement plans.

The SEC says that between September 2015 and October 2018, GWFS was aware of increasing attempts by external bad actors to gain access to the retirement accounts of individual plan participants. The agency further says GWFS was aware that the bad actors attempted or gained access by, among other things, using improperly obtained personal identifying information of the plan participants, and that the bad actors frequently were in possession of electronic login information such as usernames, email addresses and passwords.

For more stories like this, sign up for the PLANSPONSOR NEWSDash daily newsletter.

B/Ds are required to file SARs for certain transactions suspected to involve fraudulent activity or a lack of an apparent business purpose. The guidance for preparing SARs from the U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN) states that in order to be effective tools for law enforcement and fulfill their intended purpose, SAR narratives should include “the five essential elements of information—who? what? when? where? and why?—of the suspicious activity being reported.”

The order finds that GWFS failed to file approximately 130 SARs, including in cases in which it had detected bad actors gaining, or attempting to gain, access to the retirement accounts of participants in the employer-sponsored retirement plans it serviced.

Further, for nearly 300 SARs that GWFS did file, the order finds GWFS did not include the “five essential elements” of information it knew and was required to report about the suspicious activity and suspicious actors, including cyber-related data such as URL addresses and internet provider (IP) addresses.

“Across the financial services industry, we have seen a large increase in attempts by outside bad actors to gain unauthorized access to client accounts,” says Kurt Gottschall, director of the SEC’s Denver regional office. “By failing to file SARs and by omitting information it knew about the suspicious activity it did report, GWFS deprived law enforcement of critical information relating to the threat that outside bad actors pose to retirees’ accounts—particularly when the unauthorized account access has been cyber-enabled.”

The SEC’s order notes that GWFS’ significant cooperation with its investigation and subsequent remedial efforts were taken into account in the determination to accept the company’s settlement offer.

The remedial efforts included adding dedicated anti-money laundering (AML) staff and systems, replacing key personnel, clarifying delegation of responsibility for filing SARs and implementing new SAR-related policies, procedures, standards and training.

The SEC’s order finds that GWFS violated Section 17(a) of the Securities Exchange Act and Rule 17a-8 thereunder.

Without admitting or denying the SEC’s findings, GWFS agreed to a settlement that imposes a $1.5 million penalty, a censure, and an order to cease and desist from future violations.

In mid-April, the U.S. Department of Labor (DOL) released new guidance for plan sponsors, plan fiduciaries, recordkeepers and plan participants on best practices for maintaining cybersecurity, including tips on how to protect the retirement benefits of America’s workers. It was the first time the DOL’s Employee Benefits Security Administration (EBSA) issued cybersecurity guidance.

«