Digital media companies face three main cyber threats: confidentiality breaches that expose content and business data, availability attacks like DDoS that disrupt production, and integrity threats including ransomware and account hijacking. Each type directly threatens business goals and should shape security priorities.
Chapters
There are several different aspects of cyber risks for the digital media industry that highlight the importance of cybersecurity. And in general, there are three categories: confidentiality, availability, and integrity types of risks. And these terms are very common in cybersecurity. In fact, they make up the foundations, the very foundations often of what cybersecurity programs are intended to protect. So let's talk about 'em one at a time. When we talk about confidentiality risks, the kinds of things we're thinking about are leaks or unauthorized releases of content, unauthorized copying and distribution of digital media content, business data that could also get exposed, and that could be emails, messages, business plans, lease schedules, content drafts, all sorts of different things. When we look at availability risks, now we're talking about things like online services and content, uh, making sure that that's available to customers or partners, and attacks like distributed denial of service that could bring something like that down. It also includes malicious data destruction, like malware going in and deleting vast amounts of information, data, and systems. It would also include impacts or delays to production operations. And when you've got tight timelines, that kind of availability you need to protect. The third area of risk is integrity, and this is really around the manipulation of data and systems. Think ransomware, um, or any kind of digital extortion. That is really impacting systems or data, changing or modifying those. And we also look at hijacking of those digital resources, whether they're web pages or servers, distribution network— networks, or even user accounts. And lastly, in this area, you know, we would be concerned with modifying or altering the transactions themselves. Think about Payments or billing, moving around money, those are transactions, and the bad guys, many of them like to mess with that. All these risk aspects are relevant to digital media organizations as they put in jeopardy business success goals, and they must be driving considerations for the cybersecurity teams.