CBC/Radio-Canada is a crown corporation and Canada's national public broadcaster, operating since 1936 with approximately 8,000 employees. The threat surface is massive: bilingual news and entertainment delivery across radio, television, and digital platforms like CBC.ca, Radio-Canada.ca, and the streaming service ICI TOU.TV. Securing a public broadcaster means defending content integrity, source protection for journalists, and the continuous uptime of services Canadians rely on for emergency information - state-sponsored influence operations and DDoS are on the table, not hypotheticals.
Security teams here operate at the intersection of media production infrastructure and high-traffic web properties serving the entire country. The digital attack surface spans streaming platforms, newsroom systems, and the broadcast chain itself. Defending crown corporation assets means navigating the reality of nation-state interest in media manipulation, securing journalist communications under legal and adversarial pressure, and maintaining the availability of public-facing services during crisis events.
The mandate is straightforward but non-negotiable: protect the infrastructure that delivers news and culture to a bilingual, geographically dispersed nation. This isn't a private-sector content company optimizing for engagement - it's a public institution where security failures have democratic consequences. The tooling and domains will reflect that: think broadcast infrastructure hardening, platform security at scale, and operational resilience for services that can't go dark.
