Segal Group Recommends Steps for DC Plan Cybersecurity

Among other things, it is recommended that plan sponsors minimize requests for and use of personally identifiable information and review recordkeepers' security procedures.

Because the personally identifiable information (PII) that defined contribution (DC) plans safeguard is a tempting target for cybercriminals, it is imperative for these plans to protect themselves from breaches of their data, The Segal Group says.

Failures could occur when sponsors exchange PII with recordkeepers or other service providers. Therefore, the firm recommends nine steps plans can take to hedge against cybersecurity risk:

  • Create an information security policy and an incident-response plan.
  • Minimize requests for and use of PII
  • Train staff regularly
  • Assess the information technology (IT) environment
  • Mandate use of encryption for data-at-rest and data-in-motion
  • Assess recordkeepers’ technology
  • Review recordkeepers’ security procedures
  • Set up and regularly review system activity logs
  • Maintain adequate levels of cyber liability protection.

“Implementing an effective framework for managing DC plan data security risks will strengthen the plan’s control environment and may further improve stakeholder confidence,” says Julian Regan, senior vice president of Segal Marco Advisors, the investment solutions provider of The Segal Group.

Never miss a story — sign up for PLANSPONSOR newsletters to keep up on the latest retirement plan benefits news.

Archdiocese of San Juan Files for Bankruptcy After Pension Plan Judgement

Earlier this year, a judge ordered the archdiocese to pay $4.7 million to both retired and active teachers, but the archdiocese says it no longer has any money.

The Roman Catholic Archdiocese of San Juan, Puerto Rico, filed for bankruptcy amid a legal battle over the payment of teacher pensions.

According to news reports, enrollment in Catholic schools has declined as residents have left the territory due to a 12-year recession, and the devastation caused by Hurricane Maria last year has exacerbated the problem.

Get more!  Sign up for PLANSPONSOR newsletters.

In 2016, the archdiocese notified several hundred teachers that their pension payments were being stopped because payouts exceeded contributions. The teachers filed a lawsuit, and earlier this year, a judge ordered the archdiocese to pay $4.7 million to both retired and active teachers. Among other things, the teachers’ alleged in their original complaint that the multiemployer plan set up by the church for Catholic School employees elected to be an Employee Retirement Income Security Act (ERISA) plan, but plan fiduciaries, including service providers, failed to comply with ERISA.

The U.S. Supreme Court denied the archdiocese’s application for a temporary reprieve from the pension judgment; however, filing for bankruptcy temporarily freezes all litigation, giving the archdiocese time to negotiate a plan to pay creditors.

“The archdiocese no longer has money to operate,” Carmen Conde, an attorney for the archdiocese, told The Associated Press. “The embargo caused an economic and administrative crisis.”

As a result of the embargo, according to Conde, about 75 employees of the archdiocese have been laid off, dozens of parishes have been negatively affected, all charity work has stopped, the archdiocese cannot pay its utility bills and it is relying on volunteers to keep functioning.

«