News
The new obligations are intended to enhance the security of the nation’s Emergency Alert System (EAS) by protecting stations’ EAS equipment as well as their program chain.
Broadcasters must implement stronger passwords and firewalls and update software and hardware to protect a station’s programming and EAS system from outside hacks. The deadline to implement the measures is Sept. 29.
“By that date, the FCC requires that broadcasters have strong passwords for any part of their program chain that is connected to the internet, that they have the latest security updates installed in all hardware and software, and that they put all access to their program chain behind a firewall,” said attorney David Oxenford.
See David’s BroadcastLawBlog for more details.
“The first obligation is straightforward – the broadcaster must adopt strong password security to ensure that access to their program chain is not easily compromised,” said Oxenford. “This includes the obligation to change default passwords prior to the use of any equipment or software that has access to the station’s programming chain.”
Oxenford notes the second obligation is also one that should be relatively straightforward – broadcasters must quickly install updates or patches to their EAS equipment. “Broadcasters will need to promptly review software and hardware patches and get them installed to make sure that identified security risks cannot be exploited to give bad actors access to station’s program chain or EAS systems,” said Oxenford.
The final requirement is the one to which some broadcasters may need to devote more time and resources to reach compliance. “The FCC will require that broadcasters put all EAS and programming equipment connected to the Internet behind a network firewall, or that they use other ‘comparable network segmentation practices’ to limit remote access to these systems,” said Oxenford. “Basically, EAS systems need to be isolated from general purpose business networks so that unauthorized external access is not possible.”