Cybersecurity is a critical skill for broadcast journalism professionals in Kenya, where the digital environment is central to news gathering, production, and dissemination. Journalists handle sensitive information daily, including confidential sources and unpublished stories, making data protection essential. This chapter explores how broadcast journalists can safeguard data confidentiality, maintain data integrity, and ensure data availability to protect their work and uphold public trust.

5.1 Data Protection and Privacy

Data protection and privacy safeguard sensitive information from unauthorized access and misuse. For broadcast journalists, this means securing sources, interview materials, and unpublished reports against cyber threats and ensuring compliance with Kenya’s data protection laws such as the Data Protection Act, 2019. Protecting data builds audience trust and preserves the integrity of journalistic content in a digital age where cyberattacks are increasingly sophisticated.

5.1.1 Confidentiality of Data and Information

Confidentiality requires that information is accessible only to authorized individuals. In broadcast journalism, this could involve protecting whistleblower identities or unpublished investigative reports from leaking. Confidentiality is fundamental to maintaining ethical standards and legal compliance.

Components of Confidentiality

• Access Control: Restricting data access to authorized personnel only prevents leaks and unauthorized use. At a university radio station, this might mean limiting access to sensitive interview recordings to senior editors.
• Encryption: Encrypting digital files and communications ensures intercepted data remains unintelligible to unauthorized users, critical during sensitive news investigations.
• Non-Disclosure Agreements (NDAs): NDAs with sources and collaborators legally bind parties to confidentiality, reinforcing trust.
• Secure Storage: Using secure servers or encrypted drives to store data protects against physical and cyber theft, crucial for preserving source anonymity.
• Regular Training: Educating journalists on confidentiality best practices reduces accidental disclosures, essential in busy newsroom environments.

Information in the Context of Confidentiality

While confidentiality focuses on restricting unauthorized access, the nature of information itself also requires careful consideration. In broadcast journalism, information can include raw footage, interview transcripts, and editorial notes. The sensitivity of each type of information determines the level of protection needed. For example, unpublished investigative reports at Nation Media Group may require stricter controls than general press releases. Journalists must classify information based on sensitivity and apply appropriate confidentiality measures, ensuring that only those with a legitimate need can access highly sensitive data.

5.1.2 Integrity of Data and Information

Data integrity refers to the accuracy and consistency of information throughout its lifecycle. For broadcast journalists, maintaining integrity means ensuring that news content is not altered, corrupted, or falsified before publication.

Importance of Data Integrity in Broadcast Journalism

• Trustworthiness: Reliable and unaltered information forms the foundation of public trust in media outlets such as county government radio stations.
• Legal Compliance: Accurate records help meet regulatory requirements and defend against defamation claims.
• Fact-Checking: Preserving original data allows journalists to verify facts and correct errors transparently.
• Accountability: Maintaining audit trails of data changes supports accountability in editorial decisions.
• Reputation: Protecting integrity prevents misinformation that could damage the journalist’s or media house’s reputation.

Information in the Context of Integrity

Beyond ensuring data remains unaltered, journalists must also consider the quality and reliability of the information they handle. Information integrity involves verifying sources, cross-checking facts, and maintaining accurate records of interviews and reports. For instance, at KBC, editorial teams may use source verification protocols to ensure the information broadcasted is trustworthy. This process helps prevent the dissemination of false or misleading information, which is essential for maintaining public trust and upholding journalistic standards.

5.1.3 How to Maintain Data Integrity

Maintaining data integrity involves several practical measures to prevent unauthorized alterations and ensure accurate data transmission.

Techniques for Ensuring Data Integrity

• Use of Checksums and Hash Functions: These verify data has not been tampered with during transfer or storage.
• Version Control Systems: Tracking changes to documents prevents accidental overwriting and allows restoration of original versions.
• Access Management: Limiting editing rights to trusted personnel reduces the risk of deliberate or accidental data corruption.
• Regular Backups: Creating backups safeguards against data loss or damage, enabling recovery of authentic files.
• Secure Transmission Protocols: Using HTTPS or VPNs during data transfer protects information from interception or modification.

5.1.4 Availability of Data and Information

Availability ensures that data is accessible to authorized users whenever needed. In broadcast journalism, timely access to information is crucial for meeting deadlines and broadcasting live events.

Significance of Data Availability

• Operational Efficiency: Journalists at a retail business news channel rely on continuous access to financial data for accurate reporting.
• Disaster Recovery: Availability supports continuity during cyber incidents or technical failures.
• Audience Engagement: Real-time access to content enables prompt updates and live coverage.
• Collaboration: Shared access facilitates teamwork among reporters, editors, and producers.
• Compliance: Maintaining availability aligns with legal requirements for data handling and retention.

Information in the Context of Availability

Availability is not just about system uptime but also about ensuring that critical information is organized and retrievable when needed. In a busy newsroom, information management systems must allow journalists to quickly locate archived footage, previous reports, or contact details for sources. For example, Citizen TV may implement digital asset management systems that categorize and index information for rapid access during live events. Proper information organization supports operational efficiency and ensures that essential content is not lost or overlooked during high-pressure situations.

5.1.5 Ensuring Data Availability

Ensuring availability involves infrastructure and procedural strategies to prevent data loss or downtime.

Measures to Guarantee Availability

• Redundant Systems: Using multiple servers or cloud services prevents single points of failure.
• Regular Maintenance: Updating hardware and software reduces breakdown risks.
• Disaster Recovery Plans: Outlining steps for restoring data after incidents ensures rapid resumption of services.
• Access Permissions: Balancing security with ease of access prevents unnecessary barriers for legitimate users.
• Monitoring and Alerts: Automated systems detect and respond to outages or intrusion attempts promptly.

Chapter Summary

This chapter explored essential cybersecurity skills focusing first on data protection and privacy, emphasizing the confidentiality, integrity, and availability of data as core principles for safeguarding information. It then examined various internet security threats including malware, social engineering, distributed denial of service attacks, man-in-the-middle attacks, password attacks, IoT vulnerabilities, phishing, and ransomware, highlighting the diverse risks faced online. The discussion extended to computer threats and crimes, detailing how malicious actors exploit systems for harmful purposes. To counter these risks, the chapter presented cybersecurity control measures categorized into physical controls, technical or logical controls such as passwords and biometrics, and operational controls that ensure secure practices. Finally, it reviewed the legal framework in Kenya, focusing on the Computer Misuse and Cybercrimes Act No. 5 of 2018 and the Data Protection Act No. 24 of 2019, which govern the protection of ICT and personal data. Together, these topics provide a comprehensive foundation for understanding and applying cybersecurity effectively.