Frequently Asked Questions

Trusted Partner Network (TPN) is a global, industry-wide content security initiative that is wholly owned by the Motion Picture Association. TPN provides programming intended to address security in various contexts and at various points in the content pipeline. These include: the MPA Content Security Best Practices, which are maintained by TPN, and establish a single benchmark of minimum security preparedness for content industries; TPN security assessments, which measure a Service Provider's current security posture against the MPA Best Practices; and TPN+, a proprietary software application and global registry of industry service providers, which enables service providers to securely and seamlessly share their security information with Content Owners.

As the eco-system of third-party Service Providers continues to expand, the threat to the entertainment industry's most valuable asset, the content, escalates exponentially. The TPN program seeks to raise security capabilities throughout the industry, while generating cost and time efficiencies for participants.

While TPN participation is voluntary, every Company that values content security should join TPN membership and realize the significant benefits of our security reporting tools and programming, as well as becoming a part of a growing industry community dedicated to raising security standards.

Trusted Partner Network (TPN) is the name of the program. TPN+ is the name of the platform in which most program functions are performed and managed.

No. TPN provides self-reporting and assessment functionality including reports but does not issue certifications. Content Owners use TPN data to make their own independent, risk-based decsionswith regard to vendor sourcing and engagement.

Yes, TPN supports members globally.

The majority of TPN assessments include remediation items and this represents a critical and persistent risk to our content. These updates will improve transparency, promote continuous security improvement, and address real-world security gaps.

Starting with the launch of the TPN questionnaire and assessment for MPA Content Security Best Practices v5.3.1, TPN is moving from a two-tier model to a four-tier program:

• chevron_right Blue - self-assessed and published on the TPN platform
• chevron_right Silver - TPN-accredited 3rd party assessed and remediation plan submitted by the provider
• chevron_right Gold - all best practices are remediated by the provider and reviewed by TPN
• chevron_right Gold Star - all best practices and additional recommendations are remediated by the provider and reviewed by TPN

Your Classic Gold Shield remains valid until assessment expiration. To upgrade to the new tier system, complete a v5.3.1 assessment.

• chevron_right Complete a v5.3.1 self-assessment: Blue
• chevron_right Undergo 3rd-party assessment and submit a remediation plan: Silver
• chevron_right Remediate all best practices with TPN validation: Gold
• chevron_right Remediate all best practices + additional recommendations with TPN validation: Gold Star

No. The expiration remains tied to the assessment report publication date.

It remains valid until expiration, but won't reflect remediation progress under the new model.

Yes. All members must use the four-tier Shield framework starting with v5.3.1.

Reduces the number of redundant assessments; Greater visibility via the TPN+ Registry; Demonstrate security maturity and remediation progress.

Reduces the number of redundant assessments; Greater visibility via the TPN+ Registry; Demonstrate security maturity and remediation progress; Ability to share software configuration guidelines.

Centralized access to security info, assessments and profile information; Greater visibility via the TPN+ Registry; Helps streamline risk-based sourcing decisions.

Content Owner and Service Provider TPN+ users who wish to use the TPN program.

Membership benefits include: placement in TPN's global registry; secure sharing of your security posture, third-party certifications, and documents; unlimited users and subsidiary profiles; unlimited registration of services, sites, and applications; access to TPN-accredited assessments; and tools to manage your remediation status.

Unlimited TPN+ user access; visibility into Service Provider profiles, including questionnaires, assessment reports, remediation items, and self-reported data; access to legacy and downloadable reports. Gold members also help shape TPN strategy and can import basic TPN data into their own systems.

No. Third-party assessments are contracted separately. We recommend collecting more than one bid for competitive pricing.

For Service Providers, please click here to go to our membership page. Content Owners should email support@ttpn.org.

Your annual TPN membership begins upon full execution of the TPN membership agreement.

Please visit the Membership page on this website to view Content Owner and Service Provider membership tiers.

Your membership level and associated annual gross revenue tier is strictly confidential and is only visible to TPN and will not be shared.

Annual gross revenue refers to your company's and wholly-owned subsidiaries total media and entertainment revenue from the prior year. For details, contact support@ttpn.org to request the membership agreement.

TPN reserves the right to research your annual gross revenue. Please also note that in the membership agreement, you represent and warrant that the annual gross revenue reported to TPN is complete, accurate and not misleading.

Yes, you can find a comprehensive “how to guide” on our website under the Resources page.

Upon payment of the TPN annual membership fee, your details are visible in the TPN+ Company (and Application if applicable) registry and to Content Owners.

Yes, we have designed the TPN process to remove as many bottlenecks as possible. For this reason, you are able to create a TPN+ account, complete your profile and complete TPN Best Practices questionnaires for your sites and/or owned applications ahead of signing the TPN membership agreement paying the annual fee. Please note that you cannot use the TPN Blue Shield, and your information will not be visible in TPN+, until you have completed the TPN Best Practices questionnaire and paid the annual membership fee.

Your answers are only visible to: participating Content Owners; your selected accredited assessor, if you choose to obtain a TPN assessment.

For those Companies with more than 3 sites or apps with the same security implementation, TPN offers a “Global Pass” process. Please contact us when setting up your profile and before you start your questionnaires for details at support@ttpn.org.

Due to confidentiality, evidence uploaded to TPN+ is optional and only visible to your assigned TPN accredited 3rd party assessor. If you prefer that Content Owners can also see your uploaded evidence, you must select “Visible to CO” for each piece of evidence.

TPN assessments do not provide “pass/fail” grades, certifications, or ratings. TPN assessments provide Content Owners with information about a site or application's conformance with the MPA Content Security Best Practices at the time of the assessment. Aspects of security not fully in conformance with with the Best Practices will be listed as a remediation item. Content Owners use this information to make their own independent risk-based decisions.

By TPN SecOps, who will work with you to review appropriate evidence.

Blue - 1 year from submission (update required annually); Silver, Gold and Gold Star - 2 years from assessment report publication.

Your highest Shield status for each tier will be visible in the registry, helping customers understand your security progress.

It supports more transparent, risk-based service provider selection.

For Service Providers, please click here to go to our membership page. Content Owners should email support@ttpn.org.

Our Operations and Membership Services teams are ready to assist with onboarding and transition.

Yes. Access step-by-step instructions here, or find them on TPN+ under How-To Guides.

TPN Assessors are independent third-party professionals who undergo a rigorous review process to become accredited for Site and/or App assessments, including Zero Trust certifications. A current list is available on the Assessors page with various filter criteria for eg: site/cloud/zero trust etc.

Service Providers select TPN Assessors from the online directory and are encouraged to request more than one bid for competitive pricing. Pricing, timing, and project scope should be discussed directly with Assessors.

Advanced TPN Assessors have more TPN experience and a higher performance rating. Assessment quality is reviewed by TPN bi-annually and levels are updated accordingly.

Yes. Service Providers choose based on needs, complexity, pricing, and expertise. TPN does not assign work or influence hiring decisions.

No. Accredited Assessors are responsible for their own outreach, sales, and client relationships.

Assessments must be completed and submitted within 15 business days, including pre-review and platform updates.

Contact TPN with an explanation. Extensions may be granted on a case-by-case basis.

Only if they are separately accredited as Site Assessors.

Yes, under the following conditions:

• chevron_right They may consult or plan remediation only if not the assigned assessor within two years of the assessment.
• chevron_right They may perform technical testing (e.g., pen testing) if not currently assigned, but may do so before or after assessment.

Applicants must have Media & Entertainment and assessment experience plus valid certifications for Site, Cloud, or Zero Trust, from recognized bodies. Please visit the Assessors page for more information about qualification and renewal criteria.

Click here to begin. TPN and a third-party verify your experience and certifications.

• chevron_right $150 non-refundable fee for reference and certification review
• chevron_right $150 per additional certification
• chevron_right $500 accreditation fee (valid for two years, covers multiple categories if qualified)

Yes. They must apply separately and pay the $150 application fee but do not need to pay an additional membership fee.

Yes. There is no restriction on reapplying, but the $150 fee applies each time.

Once your application is reviewed, TPN will notify you whether you meet the criteria for Site, Cloud, or both.

• chevron_right Approved as Site, Cloud, or Hybrid Assessor
• chevron_right Not approved due to unmet criteria

Possibly. TPN reviews all submitted certifications and may approve new ones if they meet the standard.

You must maintain valid certifications during your two-year membership. If they expire, you may not perform assessments until renewed.