Don't wait until one of your plan participants calls saying that their 401(k) account has been zeroed out to take steps to secure plan information technology systems. Each day there is a risk that your plan will be targeted by cyber criminals or be subject to a Department of Labor ("DOL") investigation. Over the last few years, a number of participant accounts have been hacked and emptied; plans have been sued; bad press and settlements have followed. In April, DOL issued new tips detailing areas where benefits managers may want to put in place policies and procedures to help reduce these risks. Simultaneous with these tips, DOL has unleashed a wave of investigators tasked with ensuring that corporate retirement plans are using 21st century tools and processes to protect employee retirement savings.