This document is the report from the 2016 ERISA Advisory Council on their examination of cybersecurity considerations as they relate to pension and welfare benefit plans. It provides recommendations and a sample document to help plan sponsors, fiduciaries, and service providers develop cybersecurity risk management programs for benefit plans.