Content security best practices are designed to take into consideration the services the facility provides, the type of content the facility handles, and in what release window the facility operates. The purpose of these guidelines is to provide current and future third party vendors engaged by MPAA Members with an understanding of general content security expectations and current industry best practices. Decisions regarding the use of vendors by any particular Member are made by each Member solely on a unilateral basis.
Best practices are organized according to the MPAA Content Security Model, which provides a framework for assessing a facility’s ability to protect a client’s content. It is comprised of 49 security topics across its management system, physical security and digital security. The components of the MPAA Content Security Model are drawn from relevant ISO standards (27001/27002), security standards (i.e., NIST) and industry best practices.
There will now be one common best practice, which applies to all facilities that handle motion picture content, and a series of supplemental guidelines, which apply to specific facility types (e.g., post-production or distribution). The following table provides an electronic version of the current set of best practices:
COMMON GUIDELINES (ALL FACILITY TYPES) | |
Download | This document applies to all facility services offered. |
SUPPLEMENTAL GUIDELINES | |||
Download PDF | Facility Type | Typical Facility Services | Type of Content |
![]() |
Audio, Dubbing and Sub-Titling |
|
|
![]() |
Courier, Delivery and Freight |
|
|
![]() |
Creative Advertising |
|
|
![]() |
Digital Cinema |
|
|
![]() |
Digital Services |
|
|
![]() |
Distribution |
|
|
![]() |
DVD Creation |
|
|
![]() |
Film Lab |
|
|
![]() |
In Flight Entertainment (IFE) and Hospitality Services |
|
|
![]() |
Post-Production Services |
|
|
![]() |
Replication |
|
|
![]() |
Visual Effects (VFX) |
|
|
This set of best practices replaces the ones initially released in February 2010.
In order to assist facilities conducting self-assessments, the MPAA has included a spreadsheet version of the guidelines shown in the current set of best practices:
Download All Facility Services
Download Additional Controls for Each Facility Service