We Protect the Fund. Strengthen the Office. Help You Serve Participants Better.
Everything we do is built around three outcomes: reducing the risk your fund carries, improving how your office operates, and giving the people who govern it the confidence to make defensible decisions.
We're not going to give you a list of technologies we deploy or platforms we manage. That's not how serious fund offices make decisions, and it's not the kind of firm we are.
What we will tell you is what we help funds accomplish, and what changes when we're working with you.
Where we focus our work
Protecting Participant Data and Benefit Operations
Your fund holds some of the most sensitive personal information that exists: Social Security numbers, protected health information, beneficiary designations, payroll and contribution records, and in many cases years of claims history. That data carries real legal, regulatory, and reputational exposure. A breach is not an IT incident you manage quietly. It's a notification obligation, a potential DOL inquiry, a participant-relations crisis, and a question about whether your controls were adequate before it happened. We help fund offices build and maintain the controls, processes, and oversight needed to protect that data and demonstrate that protection in a way trustees and auditors can verify.
Preventing Fraud and Financial Loss
The most immediate financial threat facing fund offices today isn't ransomware. It's business email compromise: fake wire instructions, fraudulent banking-change requests, spoofed vendor communications, and diverted benefit payments. FBI data shows that these attacks generated more than $3 billion in reported losses in a single year. Coalition's claims data shows that BEC and funds transfer fraud account for 60% of all cyber insurance claims, and the severity is increasing. Fund offices process contributions, disbursements, vendor payments, and sensitive financial communications every day. We help close the gaps that make those workflows vulnerable.
Supporting Fiduciary Oversight and Regulatory Readiness
In January 2026, the DOL/EBSA identified cybersecurity as an active enforcement priority for ERISA plans, including health and welfare funds. That means weak controls around participant accounts, disbursements, and vendor access are now explicitly on regulators' radar. Trustees need more than good intentions. They need documentation, evidence of vendor oversight, and controls that can withstand scrutiny. We help fund leadership build and maintain the governance infrastructure that supports confident, defensible trusteeship.
Managing Third-Party and Vendor Risk
Most Taft-Hartley funds depend on a network of outside parties: TPAs, consultants, custodians, portal providers, claims administrators, and technology vendors. Each of those relationships is a potential point of failure. Verizon's 2025 Data Breach Investigations Report shows that third-party involvement in healthcare breaches doubled, from 15% to 30%, in a single reporting period. For funds with heavy vendor dependency, that trend matters directly. We help fund offices understand what their vendor relationships actually expose them to, and put the oversight in place to manage it.
Building Continuity and Operational Resilience
Many fund offices run on the knowledge and effort of a small number of people. When a key staff member leaves, a system goes down, a vendor has a problem, or an unexpected event disrupts operations, participants still need eligibility confirmed, contributions reconciled, claims administered, and benefits paid. We help funds build the documentation, redundancy, and operational discipline to keep running through the disruptions that every office eventually faces.
Not Sure Where Your Biggest Gaps Are?
That's exactly where we start. Every engagement begins with a baseline review that gives us both a clear picture of where the exposure is, what the priorities should be, and what a realistic path forward looks like. It's a conversation, not an audit, and it's the fastest way to turn uncertainty into a plan.
Baseline Review
No pitch deck. No follow-up sequence.