As cyber threats continue to evolve, the Department of Labor (DOL) expects plan fiduciaries to establish and maintain strong cybersecurity programs. These programs should be assessed annually by qualified independent third parties to evaluate their effectiveness. Given that retirement plans have become prime targets for cyberattacks, it is crucial for plan sponsors to proactively protect sensitive personal, health, and financial information.