FCC Shields Emergency Alerts from Cybercrooks and Foreign Foes
Published Date: 7/31/2026
Rule
Summary
In the Report and Order, the Federal Communications Commission (the FCC or the Commission) seeks to preserve the public's trust in the Emergency Alert System (EAS) by requiring targeted cybersecurity improvements that will help protect against hijacking by cybercriminals and our nation's adversaries.
Analyzed Economic Effects
5 provisions identified: 3 benefits, 2 costs, 0 mixed.
Estimated industry cost: $26 million/year
The Commission estimates implementation costs for the adopted measures will not exceed $26,198,094 per year in total, based on 25,800 affected entities, 10 hours per entity per year, a $65 mean hourly wage, and mark-ups. This implies an average burden of roughly $1,000+ per entity per year under the Commission's assumptions.
No broad risk-plan or incident-reporting mandate
The Commission declined to adopt the broader cybersecurity risk management plan and incident-reporting proposals from the Alerting Security NPRM. Instead, it adopted only the limited baseline requirements (passwords, patching, segmentation), eliminating requirements to create, update, or annually certify comprehensive risk plans or to report unauthorized access incidents.
Baseline cybersecurity rules for EAS gear
EAS Participants (broadcasters, cable headends, and similar providers) must secure EAS equipment by changing default passwords before use, using strong passwords of at least 15 characters that avoid dictionary words and reuse, or by using alternative authentication meeting NIST guidance. They must also promptly test and install security-related firmware/software patches and use a network firewall or comparable network segmentation to limit remote access.
60-day compliance deadline
EAS Participants must comply with the new cybersecurity requirements within 60 days after the rule's publication in the Federal Register; the rule's effective date is September 29, 2026. The 60-day compliance timeframe applies to changing defaults, patching, and implementing network segmentation or equivalent safeguards.
WEA not covered by these rules
The Commission does not apply these targeted cybersecurity requirements to Wireless Emergency Alerts (WEA) at this time. The Order finds no reported successful WEA attacks and concludes best practices rather than mandatory requirements are currently appropriate for WEA.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-18774, Information Collection Being Reviewed by the Federal Communications Commission
As part of its continuing effort to reduce paperwork burdens, and as required by the Paperwork Reduction Act (PRA) of 1995, the Federal Communications Commission (FCC or the Commission) invites the general public and other Federal agencies to take this opportunity to comment on the following information collection. Comments are requested concerning: whether the proposed collection of information is necessary for the proper performance of the functions of the Commission, including whether the information shall have practical utility; the accuracy of the Commission's burden estimate; ways to enhance the quality, utility, and clarity of the information collected; ways to minimize the burden of the collection of information on the respondents, including the use of automated collection techniques or other forms of information technology; and ways to further reduce the information collection burden on small business concerns with fewer than 25 employees.
2026-18778, Review of the Commission's Assessment and Collection of Regulatory Fees for Fiscal Year 2026
In this document, the Federal Communications Commission (Commission or FCC) adopts its regulatory fee schedule to assess and collect regulatory fees for Fiscal Year 2026 (FY 26).
2026-18585, Notice of Debarment; Federal E-Rate Program
The Enforcement Bureau (the "Bureau") debars Donatus Anyanwu from the schools and libraries universal service support mechanism (or E-Rate Program) and all federal universal service support mechanisms for three years.
2026-18581, Notice of Debarment; Federal E-Rate Program
The Enforcement Bureau (the "Bureau") debars John Comito from the schools and libraries universal service support mechanism (or E-Rate Program) and all federal universal service support mechanisms for three years.
2026-18582, Notice of Debarment; Federal E-Rate Program
The Enforcement Bureau (the "Bureau") debars Shawn Clemmons from the schools and libraries universal service support mechanism (or E-Rate Program) and all federal universal service support mechanisms for three years.
2026-18591, Notice of Debarment; Federal E-Rate Program
The Enforcement Bureau (the "Bureau") debars Donna Woods from the schools and libraries universal service support mechanism (or E-Rate Program) and all federal universal service support mechanisms for three years.
Previous / Next Documents
Previous: 2026-15599, Amendment of United States Area Navigation Route T-388 in the Vicinity of Kodiak, Alaska
The FAA is updating the flight path T-388 near Kodiak, Alaska, to make flying safer and smoother. This change helps pilots connect routes better and kicks in on October 29, 2026. If you fly or manage flights in Alaska, get ready for this improved route—no extra costs involved!
Next: 2026-15603, Amendment of United States Area Navigation Routes (RNAV) T-285 and T-286 in the Vicinity of Thedford, NE
This action amends the published coordinates of the Thedford, NE, Very High Frequency Omnidirectional Range/Distance Measuring Equipment (VOR/DME) in the legal descriptions of Area Navigation (RNAV) routes T-285 and T-286 in the vicinity of Thedford, NE. The FAA is taking this action due to discovering that the published coordinates were incorrect by a distance of 344 feet.