Map your exposure. Here is how, and what it buys you with the board. Operator Series – Part 2

Last week’s post ended with an assignment: map your stack. Every layer of distribution, monetization, and infrastructure. Note who owns each piece. Note which pieces are U.S.-controlled. Note which pieces you could replace in six months if you had to.

Most operators who try this exercise stall in the first 10 minutes. Not because the answer is complicated. Because nobody has ever asked the question in a form that produces an answer.

The five layers

Every Canadian media operation runs on the same five layers, regardless of format:

• Distribution. Where does the audience actually receive you – broadcast signal, app, connected TV channel, platform feed, direct URL?
• Monetization. Who processes the money – programmatic ad exchange, platform ad network, direct subscription billing, a media rep firm?
• Infrastructure. Where does the content actually live and move – CDN, cloud hosting, streaming delivery, smart speaker skill?
• Measurement. Whose numbers do you sell against – Numeris, platform-reported analytics, your own first-party data?
• Audience data. Who holds the list – a platform’s black-box recommendation engine, or a database you can export tomorrow?

Five layers. For each one, answer three questions: Who owns it? Is it Canadian or foreign? And how long would it take you to replace it if the owner pulled it tomorrow?

Run it on a composite regional broadcaster – a mid-market operator running AM/FM plus a streaming simulcast…not a real company, but a shape most operators in this business will recognize.

Distribution: broadcast signal (owned), streaming app (owned), Roku Channel carriage (foreign, platform-controlled, replaceable in roughly a year if you already have an app team – most don’t).

Monetization: local direct sales (owned), programmatic through a U.S. ad exchange (foreign, replaceable in months if you have a rep relationship ready — most don’t).

Infrastructure: streaming delivery through a U.S. CDN (foreign, replaceable in weeks, it’s a vendor swap).

Measurement: Numeris (Canadian, but a negotiated proxy, not owned by you, replaceable never – it’s an industry utility, not a product decision).

Audience data: none. No list. Nothing to export. Nothing to replace because there was nothing there.

Read that back. Two owned layers. Two foreign layers with a real, but survivable replacement timeline. One layer that isn’t a dependency, it’s a void.

The void is the finding that matters. Most operators expect the audit to surface a scary foreign-ownership problem. It surfaces a missing-asset problem instead. You can renegotiate a CDN contract in a quarter. You cannot renegotiate an audience list that was never built.

Score it, don’t narrate it

A stack audit that produces a paragraph gets ignored. A stack audit that produces a number gets funded.

For each layer, assign an exposure score:

0 – if you own it outright
1 – if it’s foreign-controlled but replaceable inside six months
2 – if it’s foreign-controlled and replacement would take a year or more
3 – if there is no alternative and no plan.

The composite broadcaster above scores something like:

Distribution – 1
Monetization – 1
Infrastructure – 1
Measurement – 1 (structural, not urgent)
Audience data – 3

That 3 is the number the board of directors needs to see. Not because it is dramatic. Because it is precise. It says: this operation has zero owned relationship with its own audience, and if any single platform decision goes against us, we have nothing underneath it.

The audit is the board case. Stop treating them as two documents.

Boards do not fund “digital transformation.” They fund threats they can see and price. The stack audit, done properly, is not a preamble to the CapEx (capital expenditure) pitch, it is the CapEx pitch.

Do not present it as “here is an opportunity to modernize.” Present it as “here is where we have zero owned position, here is what it costs to close that gap, and here is what happens to the business if the platform we depend on there changes terms before we do.” Quantify the gap-closing cost against the exposure score, not against a growth projection. A board will fund $400,000 to eliminate a 3. It will table a $400,000 pitch to “improve audience engagement” indefinitely.

The 18-month timeline is not arbitrary either. It maps to the audit: six months to close what’s genuinely fixable fast (the CDN swaps, the ad exchange renegotiations), 12 to 18 to build what’s actually missing (the first-party list, the direct monetization layer, the owned measurement signal). Present the roadmap in that order and the CapEx ask reads as sequencing, not speculation.

What this does not require

It does not require new headcount before you start. It does not require a vendor. It does not require waiting for the CRTC’s September deadline, a Federal Court ruling, or another trade escalation to justify urgency. The audit can be run this month, by whomever already understands your distribution and monetization contracts, using a spreadsheet.

The only thing it requires is doing it honestly enough to write down the 3s.

The question.

Run the five layers. Score them. Find your void – the layer where the answer isn’t “foreign, but replaceable,” it’s “nothing here at all.”

That void is not a technology gap. It is the place where the business has been assuming reach was the same thing as ownership. It was never the same thing. The stack audit is just the first document that says so in a format a board has to respond to.

A right you can’t enforce isn’t leverage, it’s branding. An asset you can’t audit isn’t a strategy, it’s a hope.

Next week: what to cut – the formats and costs your P&L (profit and loss statement) is protecting that this audit just told you are liabilities.