September 29th Deadline to Meet FCC Cybersecurity Rules

As we reported previously, the FCC adopted new cyber security requirements for EAS.  According to the decision, all stations must adopt a three-pronged approach to secure EAS equipment, studio transmitter links, and any other remotely managed equipment.  Stations must:

• Adopt strong password security practices

• Test and install security patches and security-related software and firmware upgrades promptly after those patches or upgrades are available

• Use a network firewall or comparable practice to limit remote access to authorized devices and systems

The FCC’s Order has been published in the Federal Register.  Accordingly, the deadline for adopting new cybersecurity requirements in September 29, 2026.

Installation of a network firewall will be complex and possibly expensive, especially for smaller stations.  Do not delay in meeting these requirements.  At this point we do not see the FCC granting an exemption for small stations.  We will update you on any new information. 

You can see our previous story here.

A detailed explanation of the new requirements by noted communications attorney David Oxenford can be found here.

You can see the FCC’s news release here.

You can see the FCC’s decision here.