MPA Content Security

1. 2026-10-28 Medium
   TPN+ Service Provider How-To Guide updated to v5.3.2

   The TPN+ Service Provider How-To Guide has been updated to version 5.3.2. Service providers should refer to this updated guide for current best practices and requirements …

   New version Action required

2. 2026-10-28 Medium
   TPN+ Service Provider How-To Guide updated to v5.3.1

   The TPN+ Service Provider How-To Guide has been updated to version 5.3.1. This guide provides service providers with instructions on implementing and maintaining TPN+ compliance requirements. …

   New version Action required

3. 2026-09-23 Medium
   TPN MPA Content Security Best Practices v5.3.2 with AI Supplemental v1.0 published

   The Trusted Partner Network has published version 5.3.2 of the MPA Content Security Best Practices standard along with an AI Supplemental guidance document version 1.0. This …

   New version Action required

4. 2026-09-23 Medium
   MPA Content Security Best Practices v5.3.1 released

   The Trusted Partner Network has published MPA Content Security Best Practices v5.3.1 in English. This version provides updated guidance on content security practices for organizations in …

   New version Action required

1. 2026-09-23 MPA Content Security Best Practices v5.3.2 and AI Supplemental v1.0 released
2. 2025-08-07 MPA Content Security Best Practices v5.3.1 released

1. 2026-09-23
   MPA Content Security Best Practices v5.3.2 with AI Supplemental v1.0 RevisionCurrent

   Updated existing and added new AI security controls, collected in a new AI Supplemental; the other 79 non-AI controls are unchanged from v5.3.1. source

   More

   • TS-7.0 was renamed "AI/ML - Ingress & Egress Transfer", and its LLM import requirement moved from Additional Recommendations into the Best Practices.
   • OR-5.0 now applies to client inputs, prompts, outputs, embeddings, fine-tuned weights and other artifacts derived from client content.
2. 2025-08-07
   MPA Content Security Best Practices v5.3.1 Revision

   Added an Application Security topic with four new controls, split authorization and authentication into separate controls and renumbered Technical Security controls. source

3. 2024-12-12
   MPA Content Security Best Practices v5.3 Revision

   Added Artificial Intelligence & Machine Learning and Zero Trust Architecture topics and grew the site and application baseline questionnaires from 11 to 16 questions. source

4. 2023-08-30
   MPA Content Security Best Practices v5.2 Revision

   Added Application Hardening Guidelines, consolidated remote work, data centre, cloud and BYOD practices, and renamed Implementation Guidance to Additional Recommendations. source

5. 2023-02-01
   MPA Content Security Best Practices v5.1 Revision

   Updated control numbers to reflect the TPN+ platform. source

A voluntary industry baseline for film and television service providers, used by Content Owners to compare and select vendors.

Purpose

A single benchmark of minimum security preparedness for motion picture, television, streaming and other content-related functions. source

Best Practices

The primary controls reflect the minimum expectations of most MPA member studios; every component of a Best Practice must be satisfied to meet it. source

Additional Recommendations

Supplemental controls that add security layers and are often required by Content Owners where extra security is needed. source

Voluntary

TPN participation is voluntary. source

Translations

Translations are for reference only; the English version prevails and is the basis for all assessment findings. source

Providers self-assess on the TPN platform and can move up four Shield tiers through TPN-accredited third-party assessment and remediation reviewed by TPN.

Blue

Self-assessed and published on the TPN platform. source

Silver

Assessed by a TPN-accredited third party, with a remediation plan submitted by the provider. source

Gold and Gold Star

Gold: all Best Practices remediated and reviewed by TPN; Gold Star: all Best Practices and Additional Recommendations remediated and reviewed by TPN. source

Assessors

Providers choose their own assessor from TPN Accredited Assessors, independent third parties who meet TPN's qualification criteria. source

No certification

TPN provides self-reporting and assessment reports but does not issue certifications; Content Owners make their own risk-based decisions. source

Enforcement is commercial: Content Owners use TPN data to decide which vendors to engage.

Vendor decisions

Content Owners use TPN data to make their own independent, risk-based decisions on vendor sourcing and engagement. source

Classic Gold Shield

A Classic Gold Shield remains valid until its assessment expires; upgrading to the new four-tier system requires a v5.3.1 assessment. source

1. Standard MPA Content Security Best Practices v5.3.2 and AI Supplemental v1.0 (English, XLSX)
2. Standard MPA Content Security Best Practices v5.3.1 (English, XLSX)
3. Guidance TPN links and resources (current, translated and previous versions)
4. FAQ TPN FAQs (programme, Shield tiers, assessments)
5. Guidance TPN Accredited Assessors directory

1. ISO 27001

   ISO/IEC 27001 is a certifiable management system standard for any sector; the MPA Best Practices are a film and TV supply chain baseline, and TPN issues no certification.

2. TISAX

   TISAX is the automotive industry's shared assessment scheme; TPN plays the same role for film and television vendors.

3. Shared Assessments SIG

   The SIG is a general third-party risk questionnaire; the MPA Best Practices are a content security baseline specific to media and entertainment.

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 20 September 2026. Subscribe to MPA Content Security (RSS)