
A practical solution for health plan fiduciaries to assess, compare, document and monitor service provider/vendor cybersecurity practices.
ABC’s Cybersecurity Fiduciary Solution™
ABC’s Cybersecurity
Fiduciary Solution™
PLAN SPONSOR FIDUCIARIES ARE RESPONSIBLE FOR VENDOR SELECTION AND MONITORING.
The U.S. Department of Labor confirmed this responsibility in its 2021 and 2024 cybersecurity guidance. We can help with that.
A REAL SOLUTION FOR HEALTH PLAN FIDUCIARIES
ABC’s Cybersecurity Fiduciary Solution combines a written guide with a formalized, consistent process for evaluating service provider/vendor cybersecurity programs.
It helps you evaluate current vendors, compare competing vendors, document strengths and weaknesses, and receive expert consultant verification and reports.
The Solution is designed to support ERISA fiduciary duties and the Department of Labor’s 2021 and 2024 plan fiduciary cybersecurity guidance, while also incorporating HIPAA Security proposed rules and artificial intelligence rules and best practices.
Types of vendors/service providers to consider:
Claims Administrator, COBRA Administrator, FSA Administrator, HRA Administrator, Benefit Admin System, HRIS, ACA Tracking/Reporting Company, Broker/Consultants, Networks, RBP Vendors, Managed Care Firms, including but not limited to Utilization Review/Case Management Firms, Pharmacy Benefit Managers (PBMs), CPAs, Actuaries.
ASSESS
Evaluate vendor cybersecurity practices consistently.
COMPARE
Compare competing vendors side-by-side and rank results.
DOCUMENT & MONITOR
Create a defensible record and support ongoing monitoring.
A formalized process. Expert verification. Practical tools for fiduciary oversight.
CURRENT VENDOR REVIEW • RENEWAL / RFP COMPARISON • ONGOING MONITORING
A Combined Product and Service Provided by Advanced Benefit Consulting, with a Proven Track Record of Providing HIPAA Privacy & Security Training, Consulting Services and Implementation Assistance to Plan Sponsor Employers, Health Care Providers and the Health Insurance Industry Since 2003.
What You Get
Tools, Analysis, and Expert Review to support a consistent fiduciary process.

TOOLS TO USE
50+ Page Guide, Fiduciary Requirements,
Vendor Cybersecurity Questionnaire,
Comparison Tables, Tips & More
$495 Value
WHAT IT DOES
- Provides a Written Guide explaining your responsibilities.
- Provides a Service Provider/Vendor Questionnaire for current and proposed vendors, together with supporting documentation.
- Offers flexible data collection: the Plan Sponsor may forward vendor data to ABC after purchase, or assign ABC to contact vendors and request the information on your behalf.
- Creates a consistent process for evaluating each service provider/vendor cybersecurity program.
- Provides tools for ongoing vendor monitoring.
DELIVERABLE TO YOU AT TIME OF PURCHASE
- Get your complete Guide Book download immediately after purchase, along with either a Sample Letter to Vendors to send with the Questionnaire (if opting to request yourself), or an Authorization Letter for you to transfer to your letterhead, sign and return to ABC (if opting for ABC to request data on your behalf).


SERVICES DONE FOR YOU
ANALYSIS, REVIEW, & REPORT
You Save: Days or Weeks of Internal Resources
*assuming internal resources were capable of this type of analysis
WHAT IT DOES
- Flexible data collection: the Plan Sponsor may forward vendor data to ABC after purchase, or assign ABC to contact vendors and request the information on your behalf.
- Creates a consistent process for evaluating each service provider/vendor cybersecurity program.
- Provides tools for ongoing vendor monitoring.
- Includes a one-hour Zoom consultation each year with our DOL Cybersecurity/ERISA expert consultant and our cybersecurity expert consultant regarding vendor monitoring.
DELIVERABLES TO YOU WHEN
ANALYSIS IS COMPLETE
(Normal process generally takes 4-6 weeks total,
including 2-4 weeks to receive the requested data
and supporting documents from vendors)
- Executive Summary for the Plan Fiduciary with ABC findings.
- Comparison table summarizing data and comparing competing vendors side-by-side, with explanations of cybersecurity strengths and weaknesses and whether questionnaire statements are supported by submitted documentation (summarizations AI assisted), or table summarizing an analysis of your current vendors’ cybersecurity practices, explanations of cybersecurity strengths and weaknesses, and whether questionnaire statements are supported by submitted documentation (summarizations AI Assisted).
- AI-generated proprietary vendor numerical ranking (for example, first, second and third) using ABC’s Fiduciary Cybersecurity Solution and U.S. federal government resources as sources for compared vendors, or a cybersecurity level of one of four categories for current vendors (not competing): Poor overall cybersecurity (level 4), Needing improvement (and where) (level 3), Average or above average cybersecurity (level 2), or Excellent cybersecurity (level 1)
TWO HUMANS IN THE LOOP
Expert review and verification are built into the process.
- DOL Cybersecurity and ERISA consultant verifies the accuracy of information presented in the comparison table (note, we cannot verify the data is accurate; we are reporting the information as provided by the service provider/vendor).
- DOL Cybersecurity and ERISA consultant expert report verifies that use of the Solution provides a consistent process to evaluate and rank competing vendors during renewal/RFP, or to evaluate current vendors and overall recommendations on process.
- Cybersecurity consultant expert report provides the expert evaluation and ranking of compared vendors, or evaluation of current vendors.
- Provides Space in comparison chart for Plan Sponsor Fiduciary to Rank and State Final Decisions.
USE IT NOW – OR AT RENEWAL
Evaluate your current service providers/vendors now, and/or use the Solution as part of your next RFP process to compare bidding vendors with a formalized, consistent cybersecurity review.
NOTE: ABC cannot guarantee accuracy of the data received by service providers/vendors. We can only report on data provided to us by the service provider. We are not providing legal advice of any kind. We always recommend consulting with your legal counsel for legal advice.
Why Customers Love It
Read what customers say about ABC’s Cybersecurity Fiduciary Solution.
“Wow!” is my first reaction for this new tool on vendor cybersecurity analysis! To be able to shift through so much information in a short time is unheard of in our industry. What would have taken me months, as a 49-year experienced Human Resources Manager, if even possible, was done in days, and with so much clarity, showing comparisons and results… It is just a miracle! I have to give this tool and its creators (particularly Dorothy Cociu) the biggest “High 5” for their invention and hard work developing this cybersecurity tool. It’s really great! You have to see it!

ABC’s Cybersecurity Fiduciary Solution has been invaluable to our business. As a fiduciary, we have a responsibility to ensure that our vendors have appropriate cybersecurity controls in place. However, reviewing and analyzing vendor documentation and reports can be extremely time-consuming. ABC’s solution simplifies this process by providing a clear, concise summary of each vendor’s cybersecurity controls, allowing us to quickly identify where controls are in place and where improvements may be needed. It also provides valuable expertise in analyzing and interpreting the data, which may otherwise require significant internal resources and specialized knowledge. Another valuable feature is the ability to compare multiple vendors and their cybersecurity results side by side. This gives us greater insight and confidence when evaluating vendors and making decisions about which providers to work with. ABC’s solution has made our vendor cybersecurity assessments more informed, efficient, and effective.

As benefits professionals, we increasingly recognize that our responsibility to clients extends beyond plan design, compliance, and cost. Employers and plan fiduciaries also need to understand how the vendors entrusted with sensitive employee and benefits information are protecting that data.
Advanced Benefit Consulting’s “Cybersecurity Fiduciary Solution”, a Proprietary Data Security Vetting System provides an extremely valuable solution to what has traditionally been a complicated and time-consuming process.
Properly evaluating benefits administration systems, ACA compliance vendors, payroll vendors, TPAs or other vendors can require reviewing extensive security questionnaires and highly technical information about cybersecurity controls, privacy practices, data handling, system safeguards, and risk management. For most employers, determining what questions to ask—and then evaluating the significance of the answers—can be challenging and overwhelming.
Advanced Benefit Consulting has created a structured platform that does that work for the employer. Their proprietary system evaluates participating vendors against established industry security standards and translates complex technical information into a detailed, understandable report and a standardized scoring system. Rather than simply confirming that a vendor completed a security questionnaire, the process provides employers with meaningful insight into how that vendor’s security practices measure against recognized standards and where potential areas of concern may exist.
For companies and plan fiduciaries with a responsibility to exercise appropriate due diligence in selecting and monitoring vendors that handle sensitive employee and benefits data, this provides something extremely important: a documented, consistent and repeatable vetting process, as well as a monitoring process.
The standardized scoring methodology is particularly valuable because it gives employers a practical way to evaluate vendors using consistent criteria rather than attempting to interpret lengthy security questionnaires independently.
Advanced Benefit Consulting has taken an increasingly complex area of benefits administration and transformed it into a practical risk-management tool. Their Data Security Vetting System, ABC’s Cybersecurity Fiduciary Solution, helps employers ask better questions, better understand the vendors they are trusting with sensitive information, and document the due diligence behind those decisions.
For benefits professionals and employers navigating an environment of increasing cybersecurity and data privacy risk, I believe this is an exceptionally valuable service.
This system is also applicable to Vendors that handle sensitive information. Rather than having to endlessly respond to their clients, they can refer them to Advanced Benefit Consulting, where their Cybersecurity measures can be benchmarked on an annual basis.
Having worked with Advanced Benefit Consulting for over thirty years, we feel that our clients have a trusted solution. I highly recommend this incredible Fiduciary Solution!
