Media risk management: the top risks 50 media companies disclose
Good media risk management starts with knowing which risks your peers actually face. Broadcasters, cable operators, studios and publishers are managing a structural shift in how audiences watch, listen and read — on top of heavy debt loads in much of the sector. We counted how many of 50 US-listed media companies disclose each risk in their latest annual report and compared the result with fourteen other industries.
Media companies most often disclose cyberattacks (94%), acquisitions (78%) and substantial indebtedness (66%). The risks that set media apart are falling audiences, content that fails to attract them, rising content and rights costs, broadcast licences, carriage agreements and on-air talent.
- Cyberattack exposing data and disrupting operations: 94% of media companies (84% on average in the other fourteen industries).
- Substantial indebtedness constraining cash flow: 66% (40% elsewhere), with debt covenants at 52%.
- Falling audience, users or subscribers: 58% (3% elsewhere).
- Decline in advertising spend and revenue: 54% (4% elsewhere).
- Rising content, rights and royalty costs (36%) and FCC broadcast licence and content rules (34%) — both 0% elsewhere.
Turn this list into your own risk registerRisk Samurai starts you with the risks typical for media companies, then helps you score them, assign owners and track actions.
Get early accessHow we built this. We took the Risk Factors section of the latest annual report of 50 US-listed media companies on SEC EDGAR (filed 3 March 2025 to 7 August 2026), recorded every disclosed risk and grouped equivalent risks across companies. “Share” is the percentage of media companies whose filing discloses the risk. Disclosure is not likelihood: filings are written by lawyers, are over-inclusive and come from public companies that are mostly larger than a typical small business, and shares are approximate. Full method and caveats.
Who is in the sample
The benchmark covers 50 media companies: 49 filed a Form 10-K and 1 filed a Form 10-KT (a transition-period annual report), with filing dates between 3 March 2025 and 7 August 2026. By SEC industry code (SIC), the group is made up of 10 cable and pay television (4841), 10 television broadcasters (4833), 7 film and video production (7812), 7 radio broadcasters (4832), 5 newspaper publishers (2711), 2 video rental and distribution (7841) and 9 in other codes.
In plain words, the sample is mostly mid-sized and large broadcasters, cable operators, studios and publishers: median annual revenue is about $1.9 billion, the smallest company reports around $39 million and the largest around $123.7 billion. The median filing yields 47 distinct risks (range 20–95), among the shortest medians in our study.
| Measure | Value |
|---|---|
| Companies | 50 |
| Annual reports | 49 × 10-K, 1 × 10-KT |
| Filing dates | 3 March 2025 – 7 August 2026 |
| Annual revenue | median $1.9 billion; smallest $39 million; largest $123.7 billion |
| Risks identified per filing | median 47 (range 20–95) |
| Company-level risks the filing explicitly calls new this year | 4.4% |
The top 30 risks media companies disclose
The table ranks risks by the share of media companies whose annual report discloses them. The last column is the average share across the other fourteen industries in our study, so you can see at a glance whether a risk is generic to listed companies or particular to this sector. Risks marked distinctive are disclosed by at least 20% of media companies and by at least 15 percentage points more than in any other industry.
| # | Risk | Media companies | Other industries (avg) |
|---|---|---|---|
| 1 | Cyberattack exposing data and disrupting operations Hacking, malware or ransomware against company systems exposes confidential or personal data and disrupts operations, causing liability, regulatory penalties, financial loss and reputational damage. | 94% | 84% |
| 2 | Acquisitions fail to integrate or deliver benefits Poor selection, valuation or integration of acquired businesses diverts management and disrupts operations, so expected synergies and returns are not realised and results suffer. | 78% | 73% |
| 3 | Substantial indebtedness constraining cash flow High leverage, including further permitted borrowing, diverts cash flow to debt service and limits flexibility, increasing vulnerability to downturns and default. | 66% | 40% |
| 4 | Intense competition eroding share and pricing Larger, lower-cost, private-label or new competitors undercut prices or outperform on products, causing loss of customers, market share and margins. | 62% | 71% |
| 5 | Evolving privacy laws raising compliance costs New, changing and inconsistent privacy laws across jurisdictions require costly changes to systems and practices, raising compliance costs and exposure to penalties. | 60% | 40% |
| 6 | Falling audience, users or subscribers distinctive Competition and changing habits reduce audience ratings, active users, subscribers and engagement, lowering advertising, subscription and monetisation revenue. | 58% | 3% |
| 7 | Evolving AI laws and liability New, divergent AI laws and flawed AI outputs may restrict AI use, require costly compliance changes and expose the company to fines and liability. | 54% | 40% |
| 8 | Adverse litigation and legal proceedings Lawsuits, claims and legal proceedings may produce adverse judgments, settlements and defence costs exceeding insurance, diverting management and harming reputation. | 54% | 64% |
| 9 | Goodwill and intangible asset impairment Weaker performance, forecasts or market valuations reduce the fair value of goodwill and intangible assets, requiring non-cash impairment charges that reduce earnings and equity. | 54% | 33% |
| 10 | Decline in advertising spend and revenue Economic weakness, doubts about returns, ad-blocking or budget shifts to other channels lead advertisers to cut spending, reducing advertising revenue. | 54% | 4% |
| 11 | Inadequate protection of own intellectual property Weak registration, protection or enforcement of proprietary technology and rights allows competitors to copy or misappropriate it, eroding competitive advantage and revenue. | 52% | 42% |
| 12 | Debt covenant restrictions and breach Restrictive covenants constrain operations, and a breach or cross-default allows lenders to accelerate debt, halt funding and enforce security over assets. | 52% | 41% |
| 13 | Political and legal risks of foreign operations Operating across foreign jurisdictions exposes the business to political instability, differing laws, tax, currency and expropriation, increasing costs and reducing profitability. | 50% | 32% |
| 14 | Third-party IP infringement claims Products, services or technology allegedly infringe third-party intellectual property, leading to litigation, damages, royalties, injunctions, redesign or withdrawal of offerings. | 48% | 39% |
| 15 | Failure to keep pace with technological change Rapid technological change outpacing investment and adoption leaves products, platforms and systems obsolete or uncompetitive, causing lost customers, market share and profitability. | 48% | 33% |
| 16 | General regulatory change and non-compliance Changes in, or failure to comply with, laws and regulations across jurisdictions may raise compliance costs, bring penalties or licence loss and force operational changes. | 46% | 36% |
| 17 | Ineffective internal control over financial reporting Weak internal controls or unremediated material weaknesses may cause misstated or late financial reports and restatements, leading to sanctions and loss of investor confidence. | 46% | 54% |
| 18 | Weaker consumer discretionary spending Falling consumer confidence, inflation or high interest rates reduce discretionary spending, lowering traffic, sales and margins on consumer offerings. | 46% | 25% |
| 19 | Adverse changes in tax laws and rates Changes in domestic or foreign tax laws, rates or interpretations increase effective tax rates and cash taxes, reducing earnings and cash flow. | 44% | 53% |
| 20 | Currency translation reducing reported results Adverse exchange rate movements reduce the translated value of foreign revenue, earnings and assets, lowering reported results and causing volatility. | 42% | 27% |
| 21 | Cyber insurance inadequate or unavailable Cyber insurance limits, exclusions, denial or unavailability leave security incident losses and liabilities uninsured, causing unexpected costs. | 40% | 32% |
| 22 | Third-party vendor breach exposing company data Weak security at vendors or service providers holding company, customer or employee data leads to a breach, causing data exposure, regulatory liability, litigation and reputational harm. | 40% | 32% |
| 23 | Content fails to attract audiences distinctive Unpredictable audience tastes mean programming, games or content may fail to attract users, reducing engagement, ratings and revenue and leaving production costs unrecovered. | 40% | 1% |
| 24 | Loss of senior executives or key employees Unexpected departure of senior executives or key employees without ready replacements could disrupt operations, impair strategy execution and harm financial results. | 38% | 56% |
| 25 | Volatile quarterly results missing expectations Uneven order timing, fixed costs and other variable factors cause quarterly results to fluctuate and miss guidance, undermining forecasts and the share price. | 38% | 29% |
| 26 | Rising content, rights and royalty costs distinctive Escalating programming, sports rights, music royalties and licensing costs or fixed commitments exceed revenue generated, reducing margins and returns. | 36% | 0% |
| 27 | Rising interest costs on variable-rate debt Rising benchmark interest rates on floating-rate borrowings increase interest expense and debt service, reducing earnings, cash flow and liquidity. | 36% | 21% |
| 28 | Internal IT system failure or outage Failure, defect or interruption of internal information systems could halt transaction processing and services, causing financial loss, data loss and reputational harm. | 36% | 45% |
| 29 | Strikes and work stoppages by own workforce Failed collective bargaining or union disputes lead to strikes, lockouts or stoppages at own sites, disrupting operations, delaying output and raising labour costs. | 36% | 12% |
| 30 | FCC broadcast licence and content rules distinctive Breach of FCC requirements, indecency rules or ownership limits may lead to fines, divestitures or loss of broadcast licences. | 34% | 0% |
Debt is a defining theme for media. Alongside indebtedness, the top 30 includes debt covenants (52%) and rising interest costs on variable-rate debt (36%). Many broadcasters and cable operators were built through leveraged acquisitions, and goodwill impairment (54%) is the accounting echo of that history as audiences shift. Real estate and hospitality companies disclose high leverage about as often, so it does not count as distinctive to media.
Competition shows up twice. Generic intense competition is disclosed by 62% of media companies, below the 71% average elsewhere, but the media-specific version — falling audience, users or subscribers as habits change (58%) — and content failing to attract audiences (40%) carry much of the weight. Read the three together as the media version of competitive risk.
Advertising is the other pillar. Decline in advertising spend ranks tenth, and the distinctive list adds failure to adapt to digital advertising and shifts in consumption and distribution platforms. Strikes and work stoppages (36%) reflect the unionised workforces in film, television and publishing.
What is distinctive about media companies
Nine risks meet our test for being distinctive to media: disclosed by at least 20% of media companies and at least 15 percentage points more often than in any other industry. Four areas cover most of them; we add high indebtedness, which does not meet the test but shapes how every other media risk plays out.
Falling audiences and content that misses
“Falling audience, users or subscribers”: 58% (other industries 3%). “Content fails to attract audiences”: 40% (other industries 1%).
Audiences are spreading across streaming services, social video, podcasts and games, and the largest streaming platforms can outspend most traditional media on content. For a broadcaster or publisher the risk is gradual erosion of ratings, subscribers and reach, which feeds straight into advertising and carriage revenue — and each new programme or title is a bet on unpredictable tastes. Track audience share by platform and age group, and test strategy against a steady-decline scenario rather than assuming stability.
Rising content and rights costs, and licensors pulling content
“Rising content, rights and royalty costs”: 36% (other industries 0%). “Content licensors withdrawing or restricting content”: 34% (other industries 1%).
Sports rights, programming and music royalties tend to rise faster than the revenue they generate, and many are multi-year commitments that cannot be cut when audiences fall. At the same time, content owners increasingly keep their best material for their own services. Before committing, model the rights cost against conservative audience and advertising assumptions, track committed content spend against forecast revenue as a portfolio, not deal by deal, and know which licences expire when.
Carriage, affiliation and broadcast licences
“Carriage and network affiliation renewal”: 32% (other industries 0%). “FCC broadcast licence and content rules”: 34% (other industries 0%).
Retransmission and carriage disputes can lead to blackouts, and network affiliation terms decide what a local station can air and what it pays. Broadcast licences in the US depend on FCC renewal and on compliance with content and ownership rules. These are concentrated relationships: list renewal dates, model the revenue at risk in each, and start negotiations early.
Loss of on-air talent and performers
32% of media companies disclose it, against 0% on average in the other industries.
Popular presenters, hosts and performers carry audiences with them. Contract terms (length, exclusivity, non-compete where enforceable), succession plans for key shows and building brands that are not dependent on a single personality all reduce the exposure.
High indebtedness (not formally distinctive)
66% of media companies disclose it, against 40% on average in the other industries.
Leverage turns a slow decline in revenue into a refinancing problem. When cash flow falls, covenant headroom shrinks and maturities that were routine become risky. Keep a rolling view of covenant headroom under downside scenarios, plan refinancing well ahead of maturity walls, and decide in advance which assets or costs would go first if headroom tightens.
The remaining distinctive media risks, both about audiences and advertisers moving to new platforms:
| Risk | Media companies | Other industries (avg) |
|---|---|---|
| Failure to adapt to digital advertising evolution Failure to keep pace with evolving digital advertising platforms, measurement standards and mobile shifts reduces relevance to advertisers and advertising revenue. | 24% | 1% |
| Shifts in consumption and distribution platforms Changing consumer behaviour, cord cutting, digital distribution and console transitions erode traditional distribution models, reducing carriage, physical sales and advertising revenue. | 22% | 1% |
The category mix
Every identified company-level risk is classified into one of nine groups. The table shows how media companies’ risk mentions split across them — a rough picture of where their attention goes, not of where losses come from.
| Risk group | Share of risk mentions |
|---|---|
| Strategic | 33.4% |
| Compliance and legal | 23.2% |
| Financial | 21.3% |
| Operational | 10.3% |
| IT and cyber security | 4.8% |
| People | 2.8% |
| ESG and sustainability | 2.2% |
| Reputational | 1.8% |
| Project | 0.2% |
Strategic risks lead at 33.4% of mentions — the highest strategic share of the fifteen industries — followed by compliance and legal (23.2%) and financial (21.3%). Operational risks are only 10.3% of mentions, the second lowest share in our study after real estate: media filings focus on audiences, advertising and capital structure rather than day-to-day operations.
How to use this in your own risk register
A benchmark is a checklist of what peers disclose, not a risk assessment of your business. Use it to spot gaps, then do the real work yourself.
- Pick. Read the distinctive risks and the top ten first. Tick the ones that genuinely apply to your business model, size and markets, and drop the rest. Publishers and digital media can drop the broadcast licence and carriage items; local broadcasters will usually keep all of them.
- Rewrite for your business. Filing wording is deliberately generic. Turn each risk into a specific statement of cause, event and consequence — see what a risk register is for the format.
- Score likelihood and impact. Score each risk on your own risk matrix. Do not use the share column as a likelihood: it measures how many companies mention a risk, not how often it happens.
- Name an owner and controls. Each risk needs one accountable person and a short list of the controls that actually reduce it today.
- Add indicators. Pick one or two key risk indicators for the risks that score highest, with thresholds that trigger action.
For example, “Decline in advertising spend and revenue” becomes: “A slowdown in local retail and automotive advertising during an election-free year reduces our advertising revenue below plan, cutting covenant headroom on our term loan.” That version connects the advertising risk to the debt risk, which is how the two actually interact in a leveraged media business.
Indicators that suit media companies include:
- Covenant headroom on the main credit facility under the base and downside forecast.
- Audience share for key programmes or titles by platform, quarter on quarter.
- Committed content and rights spend as a share of forecast revenue.
- Advertising revenue pacing against the same period last year.
- Carriage and affiliation agreements expiring in the next 12 months, by revenue.
Media companies hold large subscriber and audience databases; our data breach response plan guide covers what to do when a breach happens. For broadcast licensing, privacy and content regulation, see compliance risk management.
Frequently asked questions
What are the biggest risks for media companies?
In 50 US media annual reports, the most widely disclosed risks are cyberattack (94% of companies), acquisitions that fail to deliver (78%), substantial indebtedness (66%), intense competition (62%) and evolving privacy laws (60%).
Which risks are specific to the media industry?
Compared with fourteen other industries, media companies disclose much more often: falling audience, users or subscribers (58% vs 3%), content failing to attract audiences (40% vs 1%), rising content and rights costs (36% vs 0%), FCC broadcast licence rules (34% vs 0%), content licensors withdrawing content (34% vs 1%), loss of on-air talent (32% vs 0%) and carriage and affiliation renewals (32% vs 0%).
How much do media companies worry about advertising?
A lot. Decline in advertising spend and revenue is disclosed by 54% of media companies against 4% on average elsewhere, and two further distinctive risks — failing to adapt to digital advertising and shifts in distribution platforms — describe the same pressure. For an advertising-funded business, connect the advertising risk to cash and debt headroom in your register.
How was this list built?
From the Risk Factors section of the latest annual report of 50 US-listed media companies on SEC EDGAR. We recorded every distinct risk each section discloses, grouped equivalent risks across companies and counted the share of companies disclosing each one.
Does a higher share mean a risk is more likely?
No. The share measures how many companies chose to disclose a risk, not how often it happens or how much it costs. Annual reports are written by lawyers to protect the company, so they are over-inclusive: a risk can appear in nearly every filing and still be unlikely in any given year. Score likelihood and impact for your own business separately.
Start your register from this benchmark
Risk Samurai uses this benchmark to suggest the risks companies in your industry typically face — debt, audience, advertising, content cost and licence risks for a media company — when you build your register. You then rewrite, score and assign owners to them.
Get early access