FCC Shields Emergency Alerts from Cybercrooks and Foreign Foes
Published Date: 7/31/2026
Rule
Summary
In the Report and Order, the Federal Communications Commission (the FCC or the Commission) seeks to preserve the public's trust in the Emergency Alert System (EAS) by requiring targeted cybersecurity improvements that will help protect against hijacking by cybercriminals and our nation's adversaries.
Analyzed Economic Effects
5 provisions identified: 3 benefits, 2 costs, 0 mixed.
Estimated industry cost: $26 million/year
The Commission estimates implementation costs for the adopted measures will not exceed $26,198,094 per year in total, based on 25,800 affected entities, 10 hours per entity per year, a $65 mean hourly wage, and mark-ups. This implies an average burden of roughly $1,000+ per entity per year under the Commission's assumptions.
No broad risk-plan or incident-reporting mandate
The Commission declined to adopt the broader cybersecurity risk management plan and incident-reporting proposals from the Alerting Security NPRM. Instead, it adopted only the limited baseline requirements (passwords, patching, segmentation), eliminating requirements to create, update, or annually certify comprehensive risk plans or to report unauthorized access incidents.
Baseline cybersecurity rules for EAS gear
EAS Participants (broadcasters, cable headends, and similar providers) must secure EAS equipment by changing default passwords before use, using strong passwords of at least 15 characters that avoid dictionary words and reuse, or by using alternative authentication meeting NIST guidance. They must also promptly test and install security-related firmware/software patches and use a network firewall or comparable network segmentation to limit remote access.
60-day compliance deadline
EAS Participants must comply with the new cybersecurity requirements within 60 days after the rule's publication in the Federal Register; the rule's effective date is September 29, 2026. The 60-day compliance timeframe applies to changing defaults, patching, and implementing network segmentation or equivalent safeguards.
WEA not covered by these rules
The Commission does not apply these targeted cybersecurity requirements to Wireless Emergency Alerts (WEA) at this time. The Order finds no reported successful WEA attacks and concludes best practices rather than mandatory requirements are currently appropriate for WEA.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-20591, Information Collection Being Reviewed by the Federal Communications Commission Under Delegated Authority
The FCC is checking in on its paperwork rules for TV stations using Next Gen TV technology to make sure they're not too tricky or time-consuming. Businesses, governments, and nonprofits involved with local TV broadcasts might need to share info, but the FCC wants to keep it simple and clear. If you have thoughts, speak up by December 7, 2026, so the FCC can keep things smooth and fair without extra costs or hassle.
2026-20590, Information Collection Being Reviewed by the Federal Communications Commission
The FCC is asking for your thoughts on how it collects info about radiofrequency safety rules. This affects individuals, businesses, and governments who must report or share info sometimes. They want to make the process easier and clearer, especially for small businesses, and need your comments by December 7, 2026.
2026-20676, Information Collection Being Reviewed by the Federal Communications Commission Under Delegated Authority
The FCC is checking in on its paperwork rules for cable companies and local governments to make sure the info they collect is useful and not too much work. They want your thoughts on how to make the process easier, especially for small businesses with fewer than 25 employees. If you want to share your ideas, send them in by December 7, 2026—this helps keep things fair and smooth for everyone involved.
2026-20607, Information Collections Being Submitted for Review and Approval to Office of Management and Budget
The Federal Communications Commission (FCC) is asking the public and other agencies to review and comment on their paperwork plans to make things easier, especially for small businesses with fewer than 25 employees. They want feedback by November 9, 2026, to help reduce the time and hassle of filling out forms. This is part of a government effort to cut down on unnecessary paperwork and save everyone time and money.
2026-20681, Information Collection Being Submitted for Review and Approval to Office of Management and Budget
The Federal Communications Commission (FCC) is asking the public and other agencies to comment on a paperwork update aimed at making things easier, especially for small businesses with fewer than 25 employees. They want your thoughts by November 9, 2026, to help reduce the hassle and keep everything running smoothly. This is part of a government effort to cut down on unnecessary forms and save time and money.
2026-20486, Information Collections Being Reviewed by the Federal Communications Commission
The FCC is asking the public and businesses to review and comment on some paperwork they collect to make sure it’s useful and not too much of a hassle. This review affects companies, nonprofits, and government groups, especially small businesses with fewer than 25 employees. Comments are due by December 7, 2026, and the FCC aims to keep things clear, quick, and fair without costing too much time or money.
Previous / Next Documents
Previous: 2026-15599, Amendment of United States Area Navigation Route T-388 in the Vicinity of Kodiak, Alaska
The FAA is updating the flight path T-388 near Kodiak, Alaska, to make flying safer and smoother. This change helps pilots connect routes better and kicks in on October 29, 2026. If you fly or manage flights in Alaska, get ready for this improved route—no extra costs involved!
Next: 2026-15603, Amendment of United States Area Navigation Routes (RNAV) T-285 and T-286 in the Vicinity of Thedford, NE
This action amends the published coordinates of the Thedford, NE, Very High Frequency Omnidirectional Range/Distance Measuring Equipment (VOR/DME) in the legal descriptions of Area Navigation (RNAV) routes T-285 and T-286 in the vicinity of Thedford, NE. The FAA is taking this action due to discovering that the published coordinates were incorrect by a distance of 344 feet.