The author is president of the Society of Broadcast Engineers.
In recent years, the FCC has generated considerable discussion with its consideration and now adoption of rules concerning cybersecurity, particularly with EAS. We have seen the headlines: A radio station’s STL hijacked with profane content, RDS systems modified to display vulgar messages and other examples of unauthorized access creating havoc on the airwaves.
Much of the discussion has revolved around familiar topics like “Why does EAS still exist?” and “Preventing this should be a no-brainer.” On the latter point, I completely agree.
The problem is that despite our best efforts, these incidents continue to occur. The FCC, in its interest in protecting the public airwaves, is examining ways to encourage stronger cybersecurity practices and establish accountability when basic safeguards are ignored.
Recently in a broadcast engineering forum, someone asked why there isn’t a firewall equivalent of the old “Jitterbug” phone.
You may remember those devices. They were designed for people who weren’t particularly comfortable with technology and made using a cell phone simple and straightforward. Why can’t we buy a network appliance that handles security automatically and comes preconfigured with all the right settings?
It’s an interesting idea, but it comes with challenges.
It would certainly be convenient if your morning host/program director/sports director/sales assistant/production manager/IT person could easily manage VPN users and remote access. The challenge is that cybersecurity requires ongoing oversight. User accounts need to be reviewed. Access permissions need to be reviewed and updated. Firewall rules need to be evaluated. Systems need to be patched and monitored.
Many people know enough to get a system working. Maintaining that system securely over time requires a deeper understanding of how the pieces fit together.
[Related: Read about recent FCC actions and proposals about the EAS system.]
Today’s broadcast facilities are connected in ways that would have been difficult to imagine twenty years ago. Our operations include traditional RF systems, IP networks, cloud-based services, remote access platforms, automation systems, streaming infrastructure, connected production equipment and business systems.
Every connection creates opportunities for greater efficiency and flexibility. Every connection also creates a potential pathway into the facility.
The FCC’s interest in securing EAS equipment is understandable. The Emergency Alert System plays an important role in public safety and the public must have confidence that emergency messages are authentic and trustworthy.
The larger lesson extends beyond EAS.
A compromised EAS encoder is certainly a concern. So is a compromised automation system. So is unauthorized access to a transmitter control network, streaming platform, production switcher, traffic system, or corporate email account.
Any of these incidents can disrupt operations, damage public trust, create financial consequences or affect a station’s ability to serve its audience.
Many broadcasters have already taken meaningful steps to strengthen security. Network segmentation, multifactor authentication, virtual private networks, endpoint protection, routine software updates and access controls have become part of normal operations in many facilities.
Cybersecurity is not a project with a finish line. Technology changes. Equipment ages. New systems are added. Employees come and go. Vendors update products and services. Security practices need regular attention to keep pace with those changes.
One of the simplest things any station can do is periodically step back and ask a few basic questions:
- Do we know what devices are connected to our networks?
- Are software and firmware updates being applied regularly?
- Are default passwords still being used anywhere in the facility?
- Who has remote access to critical systems?
- Are user accounts reviewed on a regular basis?
- Do we have current backups and have those backups been tested?
- Would we recognize suspicious activity if it occurred today?
These questions do not require a large budget or a dedicated cybersecurity department. They require attention, documentation and a commitment to good engineering practices.
That reality makes education and professional development increasingly important.
The Society of Broadcast Engineers has long recognized the growing intersection between broadcasting and information technology. Through Ennes workshops, webinars, certification programs, chapter meetings and industry partnerships, SBE provides resources that help engineers expand their skills and stay current with evolving technologies.
Cybersecurity is one of those areas where knowledge pays immediate dividends. A stronger understanding of security principles helps protect facilities, supports business continuity and reduces operational risk. Many effective security measures are familiar concepts: maintaining current software, limiting access to authorized users, documenting systems, monitoring networks and following established procedures.
The FCC’s proposed rules may ultimately result in new requirements for broadcasters. The rulemaking process will determine what those final requirements look like.
In the meantime, broadcasters do not need to wait for a regulation to evaluate their security posture.
Good cybersecurity practices support reliable operations, protect valuable assets and help ensure stations can continue serving their communities when they are needed most. Those goals align closely with the values that have guided broadcast engineers for generations.
As engineers, we take pride in being prepared. We prepare for equipment failures. We prepare for severe weather. We prepare for power outages and transmission interruptions because our audiences depend on us.
Cybersecurity deserves that same level of preparation.
This commentary appeared in the August 2026 issue of “The Signal,” SBE’s bimonthly newsletter. Learn about the benefits of SBE membership.
[Do you receive the Radio World SmartBrief newsletter each weekday morning? We invite you to sign up here.]
