ERISA Cybersecurity: From Oversight to Evidence
November 5, 2026Cybersecurity is now an enforcement priority for the U.S. Department of Labor’s (DOL) Employee Benefits Security Administration (EBSA). Plan fiduciaries should be prepared to explain how they identify cyber risk, oversee service providers, and document their decisions. Relying on an enterprise cybersecurity program, vendor assurances, or a System and Organization Controls (SOC) report may provide useful information, but each should be considered within the plan’s specific environment.
In this informative webinar, professionals from Forvis Mazars will connect fiduciary responsibilities with the evidence that supports them. We’ll highlight the questions fiduciaries should ask, information they should review, and ways to document oversight of plan systems, participant data, and service providers. Participants also will learn how a plan-specific cyber risk assessment can help identify gaps and inform appropriate next steps.
Learning Objectives
Upon completion of this program, participants should be able to:
- Describe key fiduciary considerations related to Employee Retirement Income Security Act (ERISA) cybersecurity.
- Identify information used to evaluate plan and service-provider cyber risk.
- Recognize documentation that supports ongoing cybersecurity oversight.
Presenters
