Fix It or Risk It: recognize risk in ordinary moments
HPA is supporting Fix It or Risk It, a non-commercial, industry-wide public-service campaign helping organizations across the media and entertainment supply chain recognize everyday security risks and take practical action.
Launched at IBC2026, the campaign turns findings from the TPN STAR Report into free resources that organizations of every size can use.
Every security incident begins with an ordinary moment: a password is reused, MFA is left off, an update is delayed, or a system setting changes and is never checked. Created by the Trusted Partner Network (TPN) and supported by multiple Fix It Partners, the campaign turns findings from the TPN STAR Report and TPN security alerts into free, practical resources.
Where risk begins
These moments are easy to overlook. Recognizing them early can prevent a small vulnerability from becoming a bigger risk.
By Q3 2026, the number of TPN security alerts was already more than double the total recorded in 2025.
The TPN STAR Report also found that approximately 70% of known security gaps are never remediated. Many common issues – including missing MFA, misconfigured systems and unpatched software – can be addressed through immediate, manageable action rather than a major security project.
Free tools to help you act
The Fix It or Risk It toolkit brings together practical resources that help organizations understand what to look for and what to do next, including:
- Best practice guidance
- Information to help organizations understand common risks
- Adaptable policy templates
- Training resources
- TPN security alerts
- A free gap analysis
- Information about grants and further support
Organizations can start with low-cost, high-impact actions that are easiest to carry out, then build from there.
A public-service campaign for the whole industry
Fix It or Risk It is not a compliance program, assessment, certification scheme or sales campaign. Using the toolkit doesn’t indicate that an organization, product, or service has been approved or endorsed by TPN or HPA.
The campaign is focused on education, shared resources, and voluntary action. It’s open to the wider industry, whether or not an organization is currently a TPN member.
IBC2026 is the launch moment, not the endpoint. New educational content, security alerts and opportunities to participate will continue after launch.
Recognize the moment. Fix it or Risk it.
You don’t need to fix everything at once. Start with one ordinary moment, one manageable action, and one practical improvement.
Access the free toolkit at fixitorriskit.org, where you can also sign up for timely security alerts.