In today's competitive market it is common for companies to outsource much of the administration of their employee benefit plans. Through carefully choosing capable and experienced 3rd party administrators (TPAs) and by establishing in-house monitoring procedures, management can significantly reduce the daily administrative duties relating to their employee benefit plans. In contrast, outsourcing to an ineffective TPA, without management closely monitoring plan activity, may actually open up the company to substantially greater risk.
In the initial selecting of a TPA, management often performs extensive interviewing of qualified providers and carefully weighs many factors prior to making their selection. Unfortunately, after the conversion process is completed and the plan is being "seamlessly" handled by the TPA, it is not unusual for the plan sponsor to concentrate on other pressing areas of managing their business and to lose sight of the continued importance of monitoring the plan activity and the plan's TPAs.
In order to facilitate this monitoring process, many TPAs have subjected their operations to an independent review of their controls and procedures. This review is documented in a comprehensive report titled, Report on Controls Placed in Operation and Tests of Operating Effectiveness, commonly referred to as the SAS 70 Report. Contrary to management's common assumption that this is a report solely to be used by their plan auditors, this report is key to management's monitoring process. It provides a comprehensive narrative describing the control framework and system procedures, and a Type II report outlines not only the control objectives and the related controls, but the results of testing performed.
Of extreme importance to management is the section of the report that outlines user control considerations. Management needs to ensure there are company controls in place to address these areas identified in which the TPA is not assuming responsibility. Some of the more common areas where sponsor procedures are imperative relate to participant eligibility, vesting, timeliness, and completeness of contributions and loans in default status. These key areas are often not subject to controls at the 3rd party administration organizations A common misconception is that all SAS 70 reports are the same. This is not the case. The TPA actually determines the scope of the report and can limit the independent auditor's testing to only those areas where they maintain strong controls and therefore totally exclude testing that could identify weaknesses.
In an environment where not only the regulators, the Internal Revenue Service and the Department of Labor, are actively enforcing compliance with voluminous and complex rules, regulations and penalties, class action litigation suits are becoming the norm. Careful planning and establishing strong controls over the administration of your employee benefit plans will not only safeguard your employee's retirement assets, but will help mitigate your fiduciary exposure. This monitoring by management is so important that the AICPA Employee Benefit Plan Audit Quality Center just issued a Plan Advisory titled Effective Monitoring of Outsourced Plan Recordkeeping and Reporting Functions.
So is outsourcing the easy answer? Often times hiring an experienced TPA organization is the answer that makes both economical and practical sense. However, easy does not describe the monitoring process. It is imperative that management identify knowledgeable Company individuals that will continually monitor plan activity.
If you would like to talk further about how to ensure you or your TPA are fulfilling your fiduciary obligations with respect to your plan, please contact James Biehl of Clayton & McKervey, P.C., at jbiehl@claytonmckervey.com or 248.208.8860.
248.208.8860 | 2000 Town Center, Suite 1800 | Southfield, MI 48075