This document is about the changing cybersecurity landscape for employee benefit plans. It discusses the "perfect storm" of increasing cyber incidents, expanding attack surfaces, greater C-suite accountability, and a more complex regulatory environment. It highlights how the benefit plan operational ecosystem, with its network of service providers, can increase cyber exposure. The document then outlines the key components of an effective cybersecurity program and provides a three-step approach to improving cybersecurity posture for benefit plans.