This document is about Kroll Cyber Security expert Alan Brill's testimony on the growing cybersecurity threats facing employee benefit plans, including ransomware, data theft, data manipulation, and other attack vectors. Brill emphasizes the need for a risk management approach rather than a risk elimination strategy, and provides recommendations for plan sponsors and fiduciaries to ask the right questions and implement commercially reasonable controls.