Client feedback


Brilliant to work with - inspiring confidence that risks are anticipated and well-managed, and adding huge value by sharing expertise and best practice.
Mark Berry,
RM
Competent, friendly and very helpful.
Mark Fletcher - excellent independent trustee, personality and high standards.
Sukhjit Dhillon ,
RATP
Provided insight into what other schemes do - useful intelligence. High quality.
Thomas Mercier ,
Invensys
It’s a pleasure working with key members of the PSGS team: their experience and leadership means that they know how to get the job done, working in partnership with fellow trustees, employers and advisers to achieve the best result for members.
Mark Smith,
Partner at Taylor Wessing
​I enjoy working with PSGS and we have a very positive relationship. I was new to pensions and found them very helpful.
Bruce Allison,
RTUK

Why protecting against cyber crime must be high on the agenda for UK pension schemes

Cyber crime and the importance of pension scheme trustees understanding and preparing for cyber risks was a hot topic of debate at the recent Professional Pensions Live in May. At the event, I chaired the Administration & Data Stream which covered the theme of how a data-focused digital future could deliver better retirement outcomes. For me, the standout talk was given by Jim Gee of Crowe UK who is also Chair of the Pensions Administration Standards Association (PASA) Cybercrime & Fraud Working Group.

Jim shared rather alarming facts, saying cyber crime now accounts for over half of crime committed in the UK and has increased significantly over the last two years. In 2019, 42% of all crime was cyber and fraud but, post Covid-19, this figure is now 55% as criminals looked for new ways to boost their income during lockdowns and found out how lucrative this can be. One study revealed UK residents and businesses saw financial losses of £2.5bn from fraud and cyber crime in 2021.

This is supported by recent research from RSM UK, a provider of tax and auditing services, who note a “significant increase” in cyber attacks over the past year. They found over a quarter (27%) of businesses had experienced a cyber attack in the past year, up from 20% the previous year. Other research from Aon found only two in five occupational pension schemes have a robust incident response plan in place and only 2% have a cyber insurance policy.

Pension schemes are particularly attractive targets to cybercriminals because of the ‘rich’ personal data they hold and the need to pay pensions uninterrupted, which means pension schemes are vulnerable to ransomware attacks. The key message is for pension trustees is to:

  • be aware of the risks;
  • stay on top of the issues; and
  • have a robust strategy in place.

To help pension trustees, PASA recently launched a Cyber Crime Protection checklist which we think is worthwhile reading.

Jim added pension trustees could only aim to be as secure as possible because it is nigh on impossible to be completely secure in a situation that is always changing. He recommended pension schemes can be cyber crime resilient by being:

  • as well protected as possible;
  • able to manage the problems when they occur; and
  • able to investigate what has happened and recover and mitigate any damage.

Jim felt trustee boards should review cyber risks on the risk register very regularly. This is a good example of why there’s a need for a new start in the whole approach to governance.

Another recommendation was for pension trustees to have an incident response plan, which will be needed for The Pensions Regulator’s proposed single code of governance. As this code is likely to come into force this summer, pension trustees should be preparing this now. We’ve drafted a Cyber Incident Response Plan as part of our single code governance package. It is designed to help trustees plan their processes and procedures for dealing with a cyber threat, including ensuring everyone understands their role and the actions to be taken.

If you’d find a Cyber Incident Response Plan template helpful, or have other questions about cyber crime governance or other aspects of the single code of governance, please get in touch. We’d be happy to help.

 

 

Back to opinions

 

Hot topics


Preparing for battle - ’governancing up’ for current conditions…
Image of Hot Topic author Sophia Harrison, Client Director

It’s finally happened. Around 20 years since the dawn of liability driven investment (LDI), the...

Read more »


What can pension schemes do to improve their investment strategy? A focus on real assets
Image of Hot Topic author James Double, Chief Operating Officer

I recently took part in a webinar with Owen Haggith-Khonje, Managing Director from SEI...

Read more »


More opinions »


Call: 0118 207 2900

online enquiry