The Employee Retirement Income Security Act of 1974 (ERISA) is federal law that regulates employer-sponsored health and welfare plans of all sizes – both fully-insured and self-funded. To ensure group health plan compliance, federal agencies such as the Department of Labor and the IRS are tasked with enforcing ERISA and its related laws, including HIPAA, COBRA, and now the ACA. Despite the complexity of these laws, employers can take steps to prevent the costly consequences of noncompliance. An ERISA gap assessment can serve as the first line of defense by identifying areas of weakness and addressing vulnerabilities.