FCC Looks to Tighten EAS Cybersecurity

At its June 26^th meeting, the FCC will adopt rules that address cybersecurity risks in the broadcast EAS and wireless WEA alerting systems.  There has been a growing concern that the EAS system is vulnerable to cybersecurity attacks. Entry by cyber attackers into the weakest link at one station can potentially impact the entire EAS system. With respect to EAS, the FCC will be requiring stations to make three adjustments to tighten security.  According to the Commission:

“Specifically, we require EAS Participants to do the following with respect to EAS equipment, studio transmitter link equipment, and any remotely managed equipment that routes, processes, or inserts content into the EAS Participant’s programming stream: (1) prior to operation, change any default password, use strong passwords, and change any password if the EAS Participant has reason to believe that the password has been compromised; (2) test and install security patches and security-related software and firmware upgrades issued by equipment manufacturers promptly after those patches or upgrades become available; and (3) use a network firewall or comparable network segmentation practice to limit remote management access to authorized devices and authorized users.”

Changing passwords is fairly easy.  However, a station will need to make sure that it installs security patches and places its EAS system behind a firewall.  These requirements may take some work.  This will require stations to stay in close contact with their EAS equipment suppliers.  NYSBA is working to address these implementation issues.

You can see the FCC’s proposed decision here.