The short answer: Film and TV studios want proof that a vendor will not leak their content. Most work through the Trusted Partner Network (TPN), owned by the Motion Picture Association, which assesses vendors against the MPA Content Security Best Practices. To prepare, know where studio content lives and who can reach it, lock down accounts and devices, and have your policies and any certificates ready to share.
What the Trusted Partner Network is
TPN describes itself as the leading global film and television content security initiative, set up to help prevent leaks, breaches and hacks of movies and shows before release. It is fully owned by the Motion Picture Association, whose member studios are Walt Disney Studios, Netflix Studios, Paramount, Sony Pictures, Universal City Studios and Warner Bros.
In February 2023 the MPA announced an upgraded program and a new platform, TPN+. Assessments are based on the MPA Content Security Best Practices, updated to version 5.0, and now cover software application and cloud security as well as site and work-from-home security. Vendors use TPN+ to share their security status with content owners, so they are not assessed separately by every studio. TPN+ can also hold other certificates, such as ISO and SOC 2. TPN accredits auditors to carry out assessments.
What the questions come down to
Whether the request comes through TPN or a studio’s own questionnaire, it comes down to a few questions:
- Where does our content live, and who can reach it?
- How do people sign in, and does access end when they leave the project?
- Are devices managed, encrypted and kept up to date?
- How is content shared with freelancers and partners, at home and on set?
- What cloud services and software do you use, and how are they set up?
- What happens if something goes wrong, and who owns the response?
How to prepare
- Map where studio content is stored and shared, including personal drives and AI tools.
- Turn on single sign-on and multi-factor authentication, and remove old accounts and shared logins.
- Manage and encrypt every device that touches content, including freelancers’ machines.
- Write down your security, access and AI use policies, and an incident plan.
- Collect the certificates and reports you can share, and keep them in one place.
How KoobrikLabs helps
We set up the accounts, devices, access and policies studios look for, and help you answer questionnaires. KoobrikLabs is covered by the SOC 2 Type II of its parent company, Koobrik Inc. Our screenplay management platform, Koobrik, is used by Warner Bros. Discovery, A24, HBO and 70+ studios across the US and UK. See our work with film and TV companies or start with the security sprint.
Common questions
Who owns the Trusted Partner Network?
The Motion Picture Association owns TPN outright.
Does TPN accept SOC 2 or ISO certificates?
The TPN+ platform can hold non-TPN certificates such as ISO and SOC 2 alongside a vendor’s TPN status, according to the MPA.
Related
Sources
KoobrikLabs is the AI and managed IT partner for creative companies, in Los Angeles and London.