Retirement plan governance: what happens between committee meetings

A company appoints an investment committee. Members receive a calendar invitation, an investment report and perhaps a copy of the committee charter. They meet periodically, hear from advisers and approve recommendations. On paper, the arrangement looks organized.

But a different question deserves attention: if someone asked how an important decision was made, could the committee show what it considered, what questions it asked, why it reached its conclusion and whether the action was completed?

That distinction is central to effective fiduciary governance. A retirement plan needs more than documents and regular meetings. It needs an operating process that translates fiduciary responsibility into decisions, oversight and records.

A role that is often assigned before it is understood

Under the Employee Retirement Income Security Act of 1974 (ERISA), fiduciary status generally turns on the functions a person performs, not simply a job title. A committee member, a person exercising discretion over plan administration or someone controlling plan assets may be acting in a fiduciary capacity for those activities. The IRS also distinguishes business decisions to establish or amend a plan from fiduciary acts taken to administer it.

That distinction is easy to miss when retirement plans sit within HR, finance or a broader benefits function. Capable executives may know the business well but have little formal preparation for the specific decisions involved in plan governance. Training therefore needs to be practical: who has authority, what has been delegated, what must be monitored and when an issue should be escalated.

The prudent process is more important than a polished binder

ERISA fiduciaries must act prudently and loyally, follow applicable plan documents, diversify investments where required and pay only reasonable plan expenses. The Department of Labor emphasizes the process used to select and monitor providers and investments. Hiring an expert can be sensible, but it does not mean the appointing fiduciary can stop paying attention.

Consider a committee asked to retain an underperforming investment option. A useful record would identify the comparison period, relevant benchmarks, fees, qualitative considerations, the adviser’s recommendation, alternatives discussed and the reason for the committee’s decision. A minute stating only “the recommendation was approved” provides a much thinner account of the process.

Good documentation does not guarantee a favorable legal outcome. It does, however, help the committee make better decisions today and describe what actually occurred later.

Five questions every retirement plan committee should ask

First, do we know who is responsible for each material decision? A title or org chart is not a substitute for an accurate authority and delegation map. Second, do our written policies reflect how we actually operate? An investment policy statement that is never followed may create confusion rather than discipline.

Third, do we review fees in the context of the services received? The lowest fee is not automatically the most prudent choice, and an old quote is not proof that today’s arrangement remains reasonable.

Fourth, are service providers monitored after selection? Reporting exceptions, participant complaints, contract changes and unresolved issues require attention.

Fifth, could we reconstruct a significant decision from the contemporaneous records? A strong fiduciary file includes relevant materials, analysis, questions, rationale, approvals and evidence that assigned actions were completed.

Defined contribution and defined benefit oversight are not interchangeable

A 401(k) committee may need to focus on the investment menu, qualified default investment alternative, plan and participant fees, payroll remittances, recordkeeping accuracy and participant communications. A defined benefit sponsor may face a different set of decisions around funded status, contribution policy, asset-liability management, benefit payment processes, actuarial assumptions and eventual de-risking strategies.

Many organizations have more than one retirement plan. A single governance framework can establish consistent expectations, but the testing questions and documentation should follow the actual plan design and the authority assigned to each committee.

Cybersecurity is part of governance, not just an IT issue

Retirement plans hold valuable assets and sensitive participant information. The Department of Labor’s cybersecurity guidance addresses the prudent selection and monitoring of providers and recommends attention to security programs, independent assessments, access controls and incident response.

A committee does not need to perform a penetration test. It does need an informed oversight process. Who reviews a recordkeeper’s security assurance report? What happens when an exception is identified? Does the contract address breach notification? Who can approve changes to participant banking information? Are follow-up actions recorded?

The same principle applies here as it does to investments and fees: obtain appropriate expertise, evaluate what it reports, make a reasoned decision and retain evidence.

Make the review a recurring discipline

A practical governance review starts by mapping responsibilities, then testing representative decisions and controls against actual records. It should distinguish a missing document from an operational failure, identify questions that require legal or technical review, and assign clear priorities and owners.

The output should not be a dramatic risk score or a shelf-bound report. It should be a useful executive assessment, an evidence-based explanation of important gaps and an action plan that is reviewed until the relevant improvements are complete.

For many employers, the greatest improvement is not another policy. It is a stronger rhythm: prepare before meetings, challenge recommendations, document the basis for decisions, assign follow-up and periodically confirm that the process is operating as intended.

A practical starting point

A fiduciary governance program earns its value in the decisions it improves, the issues it uncovers and the oversight it sustains. Optimizing Foundations works with retirement plan sponsors to assess governance practices, strengthen committee processes and translate technical findings into practical next steps across defined contribution and defined benefit arrangements.