
Chapter 1
The explosive growth of fake news
Fake news isn’t new, but its impact has exploded with the internet-driven transformation of the media landscape. And audiences are confused.
Anyone can now publish and reach a worldwide audience, giving readers a vast range of potential information sources. At the same time, social media platforms have become important conduits for delivering information to millions of people — at a pace that is difficult to manage and monitor.
In this environment, false information can spread like wildfire, without the counterweight of the research and fact-checking traditionally carried out by journalists. The impact is often magnified by algorithms designed to deliver users content they’re interested in, which also means that they are more likely to believe it when they read it.
Adding to the challenge, the term “fake news” is also used in the global political environment to label news or information that is disliked, exposes confidential information or those that cause concerns.
These trends make it harder for audiences to distinguish truth from falsehood, and to determine which sources to trust. In a 2019 CIGI-Ipsos global survey, 44% of people admitted to being duped by fake news at least some of the time, and 40% said their trust in media had declined because of fake news. And the majority supported efforts to combat false information from spreading, which included deleting fake online posts and closing social media accounts linked to fake news.1
How companies suffer reputational damage
Today, fake news is an expanding problem across the entire media and consumer technology sector, affecting both traditional media (including television, digital and print) and social media platforms.
In this context, fake news can take many forms. For example, traditional media companies may find their reputation undermined by false information published using their brand. This may be because of external causes (such as hackers taking over the brand’s social media accounts) or internal causes (such as rogue journalists).
In 2018, for example, the influential German news magazine Der Spiegel removed an award-winning writer after he falsified articles on a grand scale and even invented characters, deceiving both readers and his colleagues.2
In some cases, state-controlled or foreign ownership of media brands may also pose a risk — for example, it may result in unreliable or biased information being published.
The spread of falsified news or other made-up information can also significantly impact the integrity and reputation of social media organizations. Social media and other online platforms, including those operated by traditional media brands, face the problem of detecting the relatively few damaging fake news items among millions of posts published daily.
For these platforms, the problem of identifying and controlling fake news is made even more difficult by the need to avoid censoring legitimate free speech — particularly since there is often no clearly defined boundary between the two. Online platforms also increasingly face the credibility issues associated with fake products, travel and service reviews that are generated in exchange for payment.
The net effect: if audiences no longer trust media brands as reliable sources of accurate information, brand revenue and sustainability can suffer — e.g., advertisers may not want to be associated with platforms that host problematic content, says Emmanuel Vignal, EY Asia-Pacific Leader, Forensic & Integrity Services.
“If you lose advertisers, that’s a big problem,” he says. “If you lose your audience, that’s an even bigger problem, because you can’t drive advertising dollars if you don’t have eyes on your content.”
A separate regulatory impact
For many media organizations, the fake news challenge is further complicated by the global spread of regulatory initiatives. Nations worldwide are working on efforts to curb various types of misinformation, including hate speech and attempts to influence elections and people’s opinions. Critics have also expressed concerns that laws in some countries may also be used to curb free speech.
Media companies should seek compliance advice to determine their overall exposure and the potential impact of these legislative initiatives in each jurisdiction. In a key development, leading online platforms, social networks, advertisers and advertising industry associations voluntarily agreed to the EU Code of Practice on Disinformation — the world’s first self-regulatory code aimed at addressing the spread of fake news — in October 2018.
The code aims to achieve goals, such as ensuring transparency in political advertising, closing fake accounts, and demonetizing companies that profit by creating fake news. Some countries have gone further by imposing mandatory requirements on media organizations and digital platforms — e.g., in France, a 2018 law empowers judges to order the immediate removal of fake news from internet sites during election campaigns.3

Chapter 2
How media companies can fight fake news
Promoting trust in a landscape where audiences feel duped and confused is not only ethical but vital. Here are four strategies to consider.
In the battle against fake news, media companies need to deploy their most important weapon: trust.
Trust is critical to the organization’s reputation and ultimately to its sustainability as a business. Traditionally, media and consumer technology organizations managed integrity and compliance risks in a process-driven manner. The current debate about fake media and its impact on organizations shows that there’s a much more critical success factor for an ethical business: the organization’s people.
The key steps to building and maintaining trust include:
- Building a culture of integrity, compliance and ethics that support accurate and well-verified information, with a focus on quality content and journalism
- Strengthening cybersecurity to prevent breaches that generate fake news
- Monitoring content on news platforms, social media and other interactive channels to identify potentially damaging fake news items
- Creating a crisis management plan to react quickly and effectively when problems occur
For many companies, it may be challenging to make the investments necessary to achieve these goals, particularly if budgets are being squeezed due to the broader internet-driven disruption impacting the entire media industry. The need to direct resources toward these goals makes it even more important to maximize operational efficiency throughout the organization.
To fund strategic investment in this area, the organization may need to unlock capital by identifying other efficiencies, through approaches such as increasing automation — which can create problems as well as solve them — or outsourcing some corporate functions. Many media organizations have already undertaken a wide range of initiatives to improve efficiency.
1. Building a culture of integrity, compliance and ethics
Proactively building a culture that retains trust is a far more effective and sustainable approach than scrambling to rebuild trust after it has already been lost.
A strong culture of integrity, compliance and ethics, supported by an integrated compliance and risk management program, is the key to helping media and consumer technology companies prevent fake-news-related problems and maintain brand reputation over the long term. Resources should be allocated using a risk-based approach that identifies the business’s greatest risks and directs investment in proportion to each risk.
Establishing this culture requires commitment from the highest levels of the organization; executives need to make it clear that maintaining trust is a business imperative.
“Ultimately, you need to set a tone from the top: ‘this is what we stand for,’” says John Harrison, EY Global Media & Entertainment Sector Leader. “It's part of the overall value proposition that the organization responsibly delivers content that’s as accurate as possible — even if, in some cases, publishing the content may not be in its immediate commercial interest.”
This integrity-based culture avoids focusing solely on maximizing clicks per story. Instead it aims to preserve quality journalism, including control mechanisms to prevent inaccuracies. Still, it also needs to recognize commercial reality by balancing the value of aggressive journalism against the need to protect the brand and its reputation — assessing what’s worth publishing and what may cause trouble for the organization.
At the level of individual journalists and others involved in the day-to-day news flow, establishing a culture of integrity involves creating the right balance between incentives and metrics. It’s important to examine what motivates each individual, and to create the right blend of success factors, weighted toward information value, integrity and responsibility.
“Media companies need to clearly define what success means — for individuals as well as for the organization as a whole,” says Dr. Stefan Heissner, EY EMEIA Forensic & Integrity Services Leader. “Is there too much pressure on journalists which could lead them to manipulate their own articles? Is success measured using a balanced scorecard that takes into account quality as well as the number of clicks?”
2. Strengthening cybersecurity
Cyberattacks present major threats to trust — breaches and data thefts can result in scandals that undermine the trust media companies have built with audiences and advertisers. The risks media organizations face include attackers who may seek to spread fake news by stealing social media account credentials, or they may aim to disrupt operations through cyberattacks or may steal and misuse user information.
These threats underline the importance of a strong cybersecurity strategy covering both technical controls and employee behavior. Strong technical controls are essential to protect users and information, including secure storage, firewalls and multilevel authentication.
But it’s also vital to establish clear policies that build employee risk awareness and drive secure behavior. Which information should be shared? How should it be shared, and with whom? Are there clear policies for handling passwords, dealing with suspicious email attachments and preventing phishing?
3. Monitoring social media, platform news and social interaction
Tracking and stopping the spread of fake news requires constant vigilance, and monitoring of social media platforms and other interaction channels. Fake news may appear almost anywhere in the online environment and then rapidly spread across multiple platforms.
Therefore, media and consumer technology companies may need to conduct internal monitoring of their own platforms and channels as well as external monitoring across the broader online landscape to identify the source of fake news that might affect the company. These sources include malicious domains and fake websites, and false rumors proliferated by social media bots.
Multiple levels of monitoring are needed, notes Heissner. The first level — flagging potentially suspicious items — must be automated due to the sheer volume of information that must be scanned. But once this automated monitoring has flagged a suspicious item, manual analysis may be needed to determine whether it’s a “false positive” or a real problem that the company needs to investigate and address.
4. Creating a crisis management plan
Fake news problems can threaten even the best-run media business, since they are often outside the organization’s control. By creating a comprehensive crisis management plan in advance, the business can respond rapidly and effectively to minimize the damage and counteract the potential loss of trust.
Though fake news problems may have diverse causes, the crisis management principles and steps are often similar. When a problem emerges, a predetermined clear plan of action enables organizations to react quickly and investigate it.
It’s important to promptly engage with key stakeholders to acknowledge the problem and what’s being done, even if you’re still investigating the root cause. Delaying engagement with stakeholders, in the hope that the problem will vanish on its own, may be a losing strategy because it allows more time for the impact to spread. Internally, organizations need the ability to escalate their response depending on the extent of the problem. Crisis management actions may include:
- Performing a forensic investigation of impacted data and systems
- Analyzing the attack type
- Assessing the potential damage and stakeholder impacts
- Setting up a crisis reaction team to respond to customer questions
- Liaising with law enforcement
- Rebuilding trust in the market through proactive communication, transparency and authenticity
Building a trusted and sustainable media business
Much like guarding against cyberattacks, the battle against fake news appears to be never-ending: even as organizations learn to identify and prevent existing threats, fake news sources and tactics will continue to evolve.
This environment demands a long-term plan for retaining the trust of audiences and advertisers and combating this existential threat. While the problem may seem amorphous and impossible to control, inaction is not an option when the stakes are so high. Strengthening trust, integrity and security and creating plans for monitoring and responding will put organizations on a stronger foundation.
Summary
To distinguish their brand and protect their reputation, media companies need to build trust by creating a culture of integrity, compliance and ethics that supports accuracy and promotes quality content and journalism. They also need to strengthen their cybersecurity measures, monitor online content and create a crisis management plan to respond effectively to issues as they occur.