In recognition that much of the industry’s business is conducted through the cloud, the Motion Picture Association’s Trusted Partner Network has announced sweeping enhancements, including updated security best practice guidelines for cloud workflows; a simplified qualification onboarding process for all TPN assessors; an enhanced “Gold Assessment Program” for application, site and cloud workflows; and a new “Blue Self-Attestation Program” to provide vendors with the ability to report alternate security certifications to support the urgent need for a centralized, confidential and flexible content security solution.
These will be introduced over the course of the next twelve months. In May, TPN will begin a pilot program to test, evaluate and elicit feedback to its expanded guidelines. That pilot program will include the participation of leading creative service providers, as well as cloud security subject matter experts from the MPA’s six member companies, the Cloud Security Alliance (CSA) and Convergent Risks.
In June, TPN plans to launch a streamlined qualification program for security assessors, and this fall, will publish expanded best practice guidelines covering application, site and cloud workflows.
The new guidelines will be used to develop TPN’s Gold Assessment Program, to launch in Q1 2023, which will enable vendors to measure and report conformity to the industry’s most recognized standards. TPN will also launch its Blue Self-Attestation Program in Q1 2023. The Blue program will provide a flexible framework for vendors to self-attest and report compliance with various alternate security control sets.
Read further details in the TPN announcement
Why it matters
“TPN is growing to keep pace with an industry where security threats are more insidious and sophisticated, and work in the cloud has become the new norm,” said TPN President Terri Davies. “Our expanded program will embrace all the ways work gets done in our industry today while growing capacity, making it easier for service providers to ensure they are meeting security benchmarks and for content owners to make more informed independent vendor selections from a more accessible and centralized solution.”
