Securing Journalists
summary
Built a newsroom security program that scales from baseline password/TOTP work to bespoke support for investigations, travel and source handling; the org protects a 1500-person newsroom across ~23 bureaus and runs SecureDrop (~30 orgs). Practical changes include a cross-team threat-response unit, a VP of corporate security hire, monthly phishing tests with publicized results, and a popular doxing workshop — all tools and processes deployed and iterated until usable under deadline pressure.
AI-written summary · about
chapters (9)
- 0:00Introduction and background
- 6:33Newsroom culture and security challenges
- 13:25Threat modeling for journalists
- 19:55Securing corporate accounts
- 24:34Protecting reporter-source communications
- 29:50Online threats and harassment
- 32:00Cross-team collaboration on security
- 38:01Building a security culture
- 42:24Supporting other media organizations
related talks
44mSecuring Journalists in 2022
44mBuilding a Culture of Security at The New York Times
50mWhen Your Threat Model Is "Everything": Defensive Security in Modern Newsrooms
03mBuilding a culture of security at the New York Times
33mRapid-Fire Stories of Creative Solutions to InfoSec Problems
05mEnough an app and a community to help journalists, sources and HRD
21mSecuring a Security Company
24mConcrete Steps to Create a Security Culture