A Practice Note discussing cybersecurity best practices for retirement plan fiduciaries in light of their fiduciary responsibilities imposed by the Employee Retirement Income Security Act of 1974 (ERISA) to act prudently and mitigate risks.