The Trusted Partner Network (TPN), a global content security initiative owned by the Motion Picture Association (MPA), aims to protect film and television content from leaks, breaches, and hacks before release. TPN operates as a program, while TPN+ is the platform where most functions, such as assessments and security status management, are conducted. The distinction between TPN Plus (TPN+) and Classic TPN lies in their scope, functionality, and approach to content security, reflecting the evolution of the media and entertainment industry’s needs. Below, I outline the key differences in approximately 600 words, incorporating examples of how different Original Equipment Manufacturers (OEMs) or service providers engage with these frameworks.
1. Program vs. Platform
Classic TPN refers to the original framework of the Trusted Partner Network, established to standardize content security assessments across the media supply chain. It focused on physical and digital security for facilities, primarily through Blue and Gold Shield assessments. Blue Shield involves self-reported security information, while Gold Shield requires a third-party audit by a TPN-accredited assessor, with results shared via a registry for content owners like Disney or Netflix. TPN+ is the modernized platform launched in February 2023, built to manage these assessments and expand their scope. It serves as a centralized, digital hub where service providers can upload security data, complete questionnaires, and share non-TPN certifications like ISO 27001 or SOC 2. TPN+ enhances efficiency by streamlining communication and reducing duplicative assessments.
Example: Vubiquity, a service provider handling content distribution, adopted TPN+ early to centralize its security compliance data, enabling faster onboarding with studios like Paramount. Under Classic TPN, Vubiquity would have relied on manual submissions and separate audits for each studio, which was less efficient.
2. Expanded Scope of Assessments
Classic TPN primarily assessed on-site and work-from-home security for production and post-production facilities. TPN+ broadens this to include software applications and cloud-based workflows, reflecting the industry’s shift toward digital and remote operations. TPN+ aligns with MPA Content Security Best Practices v5.0, incorporating controls for cloud security and software development, which Classic TPN did not emphasize.
Example: LucidLink, a cloud-based collaboration platform, leverages TPN+ to demonstrate its secure cloud workflows, ensuring compliance with studios like Amazon MGM Studios. Under Classic TPN, LucidLink’s cloud operations would have been less comprehensively evaluated, potentially requiring separate studio-specific audits.
3. Membership Model
Classic TPN had a simpler membership structure, focusing on service providers and content owners without tiered participation. TPN+ introduces a tiered membership model to accommodate a wider range of stakeholders, from individual contributors to large-scale OEMs, encouraging broader adoption. This model supports scalability and inclusivity, allowing smaller vendors to participate alongside major players.
Example: ZOO Digital, a localization and media services provider, supports TPN+ for its cloud-focused assessments, aligning with industry trends. Under Classic TPN, ZOO Digital benefited from standardized assessments but lacked the flexibility TPN+ offers for smaller vendors or cloud-based operations.
4. Shield Tier System
Classic TPN used a Blue and Gold Shield system, where Blue indicated self-assessment and Gold a third-party audit. TPN+ introduces an enhanced Shield tier system (effective September 2025), adding Silver and Gold Star tiers. Silver Shield recognizes a completed assessment with a remediation plan, while Gold Star acknowledges full compliance with Best Practices and additional recommendations. This provides greater transparency and incentivizes continuous improvement.
Example: Ateliere, a media supply chain platform, adopted TPN+ early to achieve Gold Shield status, showcasing its robust security to content owners like Warner Bros. Discovery. With the upcoming Silver and Gold Star tiers, Ateliere can further demonstrate remediation progress, which Classic TPN’s binary system couldn’t highlight.
5. Transparency and Functionality
TPN+ offers advanced functionality, such as self-serve tools for vendors to update security statuses and integrate non-TPN certifications. It provides content owners with clearer insights into vendor preparedness, reducing assessment redundancy. Classic TPN lacked this level of automation and transparency, relying on manual processes and less centralized data sharing.
Example: Pixelogic, a post-production service provider, uses TPN+ to streamline security assessments, reducing onboarding times for clients like NBCUniversal. Classic TPN required more manual coordination, slowing down the process.
6. Industry Alignment
TPN+ aligns with evolving threats and technologies, incorporating updated MPA Best Practices (v5.3 by 2025) and supporting global stakeholders. Classic TPN, while effective, was less adaptable to rapid industry changes, such as the rise of cloud-based workflows.
Example: Alps Studios, a VFX provider, adopted TPN+ to undergo rigorous assessments, reinforcing its reputation as a secure partner for studios like Sony Pictures. Classic TPN assessments were sufficient but less tailored to modern VFX workflows involving cloud infrastructure.
Conclusion
TPN+ builds on Classic TPN by offering a more comprehensive, flexible, and transparent platform that addresses modern content security challenges, including cloud and software assessments. OEMs like Vubiquity, LucidLink, ZOO Digital, Ateliere, Pixelogic, and Alps Studios demonstrate how TPN+ enables faster, more scalable compliance compared to the more static Classic TPN framework. By integrating advanced tools and a tiered Shield system, TPN+ ensures the media supply chain remains secure and efficient, meeting the needs of both large studios and smaller vendors. For more details, visit http://www.ttpn.org