Cybersecurity is no longer just an IT issue — it must be a company-wide concern.

If your HR department is breached, it can do irreparable damage to both the company as a whole and to the lives of the employees.

No matter your company's size or your role in it, cybersecurity should be on your radar.

Not being prepared for an attack can cause serious harm to both companies and their employees.

The private sector could learn a great deal from the federal government about securely managing teleworking employees. Here are quick and inexpensive steps to secure remote workers.

Plan sponsors and fiduciaries should be aware that the DOL cybersecurity guidance likely applies to all plans governed by ERISA, not just retirement plans.

This article provides some eye-opening observations about cyberattacks, practical tips to help avoid becoming a victim and advice on what to do if something happens.

With more work being done remotely, the risk of a cyber attack has increased exponentially.

A step-by-step guide to business continuity and crisis communication planning.

In every organization, individual employees are the weakest link when it comes to email security. Remote working, which is coming more ubiquitous and appealing, makes the use of unsecured email even more likely.

Only 18% of SMBs are confident their organization is prepared for a cyber incident.

According to one expert, "HR is the perfect world for ransomware. It infects one device and 30 others get infected. Here is what he says HR departments should do to protect themselves.

Government watchdog slams DOL for not providing necessary guidance about cybersecurity and fiduciary duty, lists types of cyber attacks against retirement plans.

Includes 12 best practices for recordkeepers regarding plan-related IT systems and data, and for plan fiduciaries making decisions about hiring them.

Here are steps you can take to help protect your clients' data from 3 big risks facing financial services firms.

Experts reveal how and why these businesses are targeted and ways to mitigate these risks.

Besides the risk of exposing customer data, as well as incurring regulatory repercussions, ransom payouts have hit in the tens of millions of dollars.

Insights into emerging risks and how they can best be tackled.

4 things plan sponsors and administrators can do to mitigate and shift security risks due to cyber thieves.

Benefits-related employee data may be more vulnerable than ever thanks to COVID-19. Here's what to know to protect your employees and your company.

Resilence comes with planning.

Lawyers say that any type of business that collects customer or employee data should consider buying this insurance.

The landscape of standalone cyber policies is changing, and companies must review their existing or proposed cyber coverages carefully.

Coverage was initially denied because the plaintiff never "held" the funds.

Cyber risks and COVID-19 impacts top the list of risks the financial services industry faces in the coming months, but three more risks are just as significant.

Employers do have some level of responsibility for cybersecurity, despite a recent court ruling to the contrary. But there are steps they can take to avoid such risk in the first place.

Consider the whole picture of participants' financial landscape to build a solid line of defense around their retirement savings.

Here are 5 tips plan sponsors can keep top of mind as they determine if their current cybersecurity practices need improvement.

Does your retirement plan provider, advisor, or recordkeeper have a Computer Security Incident Response Team? With cybersecurity threats everywhere, CSIRTs play an indispensable role in the retirement industry.

Ransomware attacks have grown in frequency and severity this year with an average cost of $4.4 million.

Resource-stretched small businesses are ripe for exploitation, unfortunately.

An updated Treasury Department advisory spells out the risks cyber insurers and other companies could face for paying ransoms.

The hacker allegedly not only released private information but set up a public website listing 27 other companies that refused to pay the ransom.

The breaches causing the most harm to victims are taking place at smaller, lesser-known enterprises.

Employees' emailing and file sharing practices are the leading cause of accidental data breaches, according to a new survey.

The shift to remote work has been a seismic event for HR professionals, but it has also had a significant impact on the IT department.

It's not that workers are clueless about cybersecurity -- they just know they will forget their passwords.

Fraudsters now use "social engineering" to tailor attacks. Make sure you and your clients are educated on what to look for.