Ghanaian Journalists Face High Cyber Risks Despite Awareness, GBC Survey Reveals

A recent assessment of digital security practices among media practitioners at the Ghana Broadcasting Corporation (GBC) has revealed significant vulnerabilities in how journalists manage their online presence. The survey, conducted by Seli Baisie, found that while journalists are increasingly reliant on digital tools such as email, social media, and cloud storage, their practical defense mechanisms are dangerously inadequate. Despite a general awareness of the existence of cyber threats, many journalists remain 'one click away' from a devastating breach that could compromise their professional integrity and the safety of their sources.

The findings provide a stark look at the specific gaps in newsroom security protocols. Only 26.7% of the 15 journalists surveyed reported using unique passwords for all of their work-related accounts. Furthermore, less than one-third of the respondents had enabled two-factor authentication (2FA) on their work emails, a basic security measure widely considered essential in the modern digital landscape. While most participants reported that they update their devices promptly, many demonstrated a lack of knowledge regarding password managers and secure, encrypted communication channels, leaving them highly susceptible to phishing attempts and account takeovers.

Beyond technical lapses, the survey highlighted deep-seated concerns regarding the broader impact of cyberattacks on the media's role in society. Respondents identified disinformation and account takedowns as primary threats that could undermine public trust. The vulnerability is not merely personal; the lack of robust security measures poses a direct risk to source protection. Without secure communication protocols, journalists may inadvertently expose whistleblowers or sensitive information, which is a critical concern for maintaining the credibility and safety of investigative journalism in Ghana.

To address these systemic weaknesses, the report recommends that news organizations move beyond occasional workshops and implement continuous, practical cybersecurity training. Key recommendations include standardizing the use of multi-factor authentication, establishing clear incident-response protocols for when breaches occur, and limiting access to sensitive newsroom systems based on operational necessity. By integrating a stronger digital security culture into daily journalistic practice, newsrooms can better safeguard their information and ensure they remain resilient against an evolving landscape of cyber threats.