Cybersecurity is a topical issue for pension schemes, and an increasingly important regulatory risk. Not only does the Pensions Regulator believe that trustees should be taking action to mitigate cyber risks, but there is also the risk of action by the Information Commissioner – as data controllers, trustees must implement technical and organisational measures to ensure an appropriate level of security for the member data held by the scheme.