Retirement plan sponsors should develop a comprehensive risk management strategy that includes the periodic review of contractual protections with their TPAs.

Pension plans and welfare plan all store personal data on each participant and beneficiary, ranging from social security numbers and addresses to date of birth and health information. The more immediate and available personal data becomes, the greater the risk for a potential breach or unauthorized disclosure or access, as is evident from the cyber attacks on major retail operations, health care providers and the government.