Pension trustees are not immune from the type of ‘cyber attack’ that hit the NHS and many other organisations last week. Caused by malicious software, once introduced into a computer system the virus can spread rapidly, encrypting computer files so they cannot be read, and demanding a ransom payment before files can be decrypted.
The human factor
Viruses exploit a human weakness… curiosity.
Although the press like to talk about ‘attacks’; the reality is usually more mundane. Viruses are introduced via emails that contain attachments or links to websites containing malicious software.
So, we are all the first line of defence and can guard against these so-called phishing attacks by deleting any emails that originate from people or addresses we don’t recognise. Even if you think you know who the email has come from but have an inkling of doubt about whether it is genuine, call the person who appears to have sent the email and check.
Pension trustees are exposed to significant risk as they can receive a high volume of emails from a wide range of pension scheme advisers and suppliers, as well as their own friends, family and colleagues. This NHS attack has shown large organisations are not immune.
What should trustees do? As well as making sure your computer is up to date with all the latest security updates, remember your ABCs…
Assume everything is a risk
Believe nothing
Check everything before opening
We will shortly be making our cyber security checklist for pension trustees available on our website. If you would like a copy in the meantime, please contact us.
‘ PSGS & 20-20 Trustees merge to form Vidett ’
Punter Southall Governance Services (PSGS) & 20-20 Trustees (20-20) have today announced they...
‘ Don’t be surprised that your gilt funds are being treated like an emerging market ’
You may have seen or heard about the article in the Financial Times about how Insight...