Managing an employer-sponsored retirement plan can feel like running a complex project with real stakes attached. ERISA requirements, shifting IRS limits, and strict fiduciary duties leave little room for error. A single misstep, an overlooked document or a delayed compliance test, can trigger audits, fines, and frustrated participants. A methodical approach, on the other hand, genuinely delivers cost savings, reduces liability, and protects your employees’ financial futures.
This guide lays out a ten-step framework for designing, running, and overseeing a retirement plan that meets regulatory demands while actually serving your business and your workforce. Let’s start with the foundation: defining what your plan is actually meant to accomplish.
Step 1: Define Plan Goals and Document Your Structure
Before building or revamping a plan, get clear on what you actually want it to achieve. Common objectives include improving employee retention through competitive benefits, maximizing tax-deductible contributions, boosting average deferral rates, or building in scalability for future growth. Whatever the goal, write it down in a measurable format, something like “improve average participant savings rates by 20% within 12 months,” and track it with concrete metrics like average deferral percentage or participation among new hires.
Choosing the right plan type depends on your workforce demographics, desired funding flexibility, and how much administrative complexity you can absorb. Options include traditional, Safe Harbor, or Roth 401(k)s, 403(b) plans for nonprofits, 457(b) plans for government entities, ESOPs, or a traditional defined benefit pension. A Safe Harbor 401(k), for example, requires mandatory employer contributions but automatically satisfies nondiscrimination testing, which is often worth the tradeoff for sponsors who want predictable compliance.
Keep a clean document library throughout: the plan document and adoption agreement, the Summary Plan Description, amendments and IRS determination letters, and a governance charter defining committee roles and decision authority. Version control and a decision log for every material plan choice will save real headaches during an audit down the road.
Step 2: Establish Clear Fiduciary Roles
ERISA divides fiduciary duty into three main roles, and without clear assignment, gaps in oversight or duplicated effort both create liability.
- Section 402(a) named fiduciary holds ultimate authority for plan administration, approving documents and selecting service providers
- Section 3(16) administrator manages day-to-day tasks like participant communications, compliance testing, and Form 5500 filings
- Section 3(38) investment fiduciary selects and monitors the investment menu, keeping each option prudent and fee-competitive
Once roles are understood, name the actual fiduciaries or committees against each section in your plan documents, secure written acceptance of the role, and adopt a conflict-of-interest policy. A simple checklist helps here: identify candidates, update the plan document and SPD, collect written acknowledgments, circulate conflict disclosures, and hold an inaugural meeting with recorded minutes.
Whether to keep these duties in-house or outsource comes down to expertise, liability, cost, and administrative bandwidth. Delegating Section 3(38) investment decisions to an outside fiduciary genuinely shifts liability for fund selection off your organization. Many mid-size companies land on a hybrid approach, keeping 402(a) oversight internal while outsourcing investment and administrative duties to specialists.
Step 3: Build ERISA Compliance Into Your Process
ERISA’s Section 404(a) duty of prudence and loyalty requires fiduciaries to research thoroughly before selecting providers or investments, review fees and performance regularly, and always prioritize participant interests. A centralized fiduciary file, meeting minutes, RFP documentation, and investment due diligence records, turns this from an abstract obligation into something you can actually demonstrate during an audit.
The Impartial Conduct Standards set clear rules for anyone giving advice to participants: recommendations must serve the participant’s best interest, compensation must be reasonable and transparent, and communications cannot exaggerate benefits or hide material facts. A compliant example sounds like “these target-date funds offer diversified exposure with fees under 0.50%, among the lowest-cost options available.” A noncompliant version claims funds have “no real fees” or are the “absolute best choice,” language that overstates and misleads.
Certain necessary transactions, like paying reasonable recordkeeping fees or giving rollover advice, would technically breach ERISA’s prohibited transaction rules without a DOL exemption. Commonly used exemptions include Class Exemption 75-1 for recordkeeping and advisory fees, and specific relief for rollover advice. Each comes with conditions, usually written disclosures and periodic reviews, so mapping your service providers’ compensation against the relevant exemption and storing disclosures in your fiduciary file matters.
Step 4: Design Plan Features and Contribution Rules
Eligibility, vesting, and contribution structure shape both participant value and your compliance profile. Common eligibility rules require one year of service or 1,000 hours, with a maximum age requirement of 21. Vesting schedules typically follow either a graded approach, reaching 100% by year six or seven, or a simpler 3-year cliff.
For 2026, the IRS limits look like this:
| Limit Type | 2026 Amount |
|---|---|
| Employee elective deferral | $24,500 |
| Total annual additions (employee + employer) | $72,000 |
| Catch-up contribution (age 50+) | $8,000 |
| Super catch-up (ages 60–63) | $11,250 |
A new wrinkle for 2026: participants earning more than $150,000 in prior-year FICA wages from the plan sponsor must make all catch-up contributions on a Roth basis. This is a real compliance point to flag, since plans without a Roth option may need to add one, or these higher earners lose access to catch-up contributions entirely.
Employer match formulas commonly run 50% up to 6% of pay, or a tiered structure like 100% on the first 3% plus 50% on the next 2%. When modeling budget impact, multiply your expected match rate by historic average deferral rates. A 5% average deferral on a $10 million payroll with a 50%-up-to-6% match runs roughly $250,000 annually. Document every feature clearly in the adoption agreement so both participants and auditors can see exactly what applies.
Step 5: Build the Investment Lineup
A strong core menu typically includes 8 to 12 options spanning U.S. equity, international equity, fixed income, and a stable value or money market option, evaluated against expense ratios under 0.50%, solid multi-year performance versus benchmarks, and stable fund management tenure. Fewer, well-chosen options tend to serve participants better than an overwhelming menu.
Target-date funds remain the dominant default option, and industry data shows the large majority of 401(k) plans now use them as their Qualified Default Investment Alternative, representing well over a trillion dollars in assets. When selecting a series, confirm the glide path actually matches your workforce demographics and compare total fees, including the underlying fund costs, not just the headline expense ratio.
A self-directed brokerage window can serve investors wanting more choice, but it adds real oversight duties. Reasonable guardrails include a minimum service requirement before eligibility, a required education module on diversification, and an allocation cap, often around 25% of the account balance, to prevent overconcentration.
Step 6: Automate Recordkeeping
A modern recordkeeping platform should integrate directly with payroll, offering real-time data exchange, customizable reporting, and strong security controls. During vendor evaluation, run a proof of concept confirming that deferral elections and employer match data actually flow correctly, and test exception scenarios like mid-period enrollment changes.
Automating contributions, distributions, and loan processing removes a lot of manual error. This includes meeting the IRS requirement to deposit deferrals within 7 business days, generating loan amortization schedules automatically, and embedding eligibility rules and documentation checks into hardship and termination distribution workflows. Quarterly reconciliation of the participant census against payroll and HR records, paired with automated alerts when data falls out of tolerance, keeps records clean enough to support accurate compliance testing and timely Form 5500 filings.
Step 7: Monitor Performance and Run Compliance Tests
A yearly compliance calendar keeps nothing from slipping through the cracks: reviewing legislative updates and drafting amendments early in the year, updating the SPD and preparing Form 5500 data mid-year, filing and distributing required notices over the summer, then auditing recordkeeping processes and planning the following year’s testing schedule toward year-end.
Annual nondiscrimination and coverage testing confirms rank-and-file employees are not effectively subsidizing benefits for highly compensated staff. Core tests include ADP and ACP for deferrals and matching, the top-heavy test checking whether key employees hold more than 60% of plan assets, and coverage testing to confirm enough non-highly-compensated employees actually participate. If a test fails, corrective options include a Qualified Non-Elective Contribution to non-HCEs, refunding excess deferrals to HCEs before the deadline, or adding safe harbor provisions to bypass future testing altogether.
Revisiting service-provider relationships at least annually, gathering total cost data across recordkeeping, TPA, investment, and legal fees, and benchmarking against industry peers, keeps plan expenses honest over time.
Step 8: Communicate With Participants
Several notices are legally required on a set schedule: an annual fee disclosure within 45 days of plan year end, a QDIA notice before any default investment and annually after, a Safe Harbor election notice 30 to 90 days before the plan year starts, and SPD updates within 210 days of any plan year in which changes occurred. Clear headings, plain language, and tracked acknowledgments for electronic notices all matter for demonstrating compliance later.
Education beyond the legal minimum genuinely improves outcomes. Workshops on topics like understanding a 401(k) match or Roth versus traditional deferrals, quarterly webinars, one-on-one counseling at enrollment or mid-year check-ins, and interactive digital modules all help participants build real confidence in their savings decisions. A functional online portal, with a real-time account dashboard, retirement readiness calculators, and a risk tolerance survey feeding into fund recommendations, rounds out a genuinely useful participant experience.
Step 9: Manage Risk and Document Everything
Every fiduciary decision should be traceable to a formal process. Comprehensive meeting minutes, including attendees, discussion points, formal votes, and assigned action items with deadlines, build the paper trail that demonstrates prudent, deliberative decision-making if it’s ever questioned.
Fiduciary liability insurance adds a real layer of protection beyond documentation alone, typically covering $1 million to $10 million per occurrence. Worth asking a broker directly: what’s the retroactive date, are defense costs paid outside the liability limit, and how are co-fiduciary claims handled. Strong internal controls round this out: segregating duties across data entry, approval, and reconciliation, running periodic internal audits, and maintaining an issue-tracking log that documents discrepancies and their resolution.
Step 10: Consider Outsourcing Fiduciary and Administrative Work
Even a well-staffed internal team can find the day-to-day demands of plan administration overwhelming. When evaluating outside providers, weigh their ERISA expertise across 402(a), 3(16), and 3(38) roles, their technology and payroll integration capabilities, their track record with similarly sized plans, and how proactively they monitor legislative and IRS changes.
Fee structures vary meaningfully between providers, bundled versus unbundled, fixed versus asset-based, so insisting on a line-item breakdown that separates recordkeeping, compliance testing, and investment advisory costs is worth the extra effort during vendor comparison. Once you select a provider, a clear service-level agreement covering data-transfer formats, deliverable schedules, and response-time guarantees, paired with a structured onboarding timeline, sets up a smooth transition.
Final Thoughts
A structured, step-by-step approach turns retirement plan management from a source of ongoing risk into a genuine asset, both for compliance and for the people counting on the plan for their future. Defining clear objectives, assigning fiduciary roles, building thoughtful plan features, automating recordkeeping, and maintaining rigorous documentation all compound into a plan that runs smoothly year after year.
If you want help closing gaps in any of these ten steps, or are weighing whether outsourcing fiduciary and administrative work makes sense for your organization, the team at Admin316 offers Section 3(16), 3(38), and 402(a) services built to reduce sponsor liability while keeping your plan compliant and cost-effective.
