The Department of Labor has directed its investigators to verify the designation of a senior leader as the chief information security officer (CISO) when auditing retirement plans. While it’s unclear if this requires a designated CISO for all retirement plans, it’s important to clearly define and assign information security roles and responsibilities.
Source: New feed 2