TPN Readiness: What We're Seeing in Vendor Assessments

Short field note from the last quarter of TPN assessments — the three controls vendors keep underestimating, and the one finding that almost always reopens after remediation.

A short field note from a busy quarter of TPN assessments across post, VFX and localisation vendors.

Three controls vendors keep underestimating

• Asset inventory accuracy — not the spreadsheet, the reconciliation cadence behind it.
• Removable media policy — written, but rarely enforced at the workstation level.
• Third-party risk — sub-vendors handling content with no flow-down of client security terms.

The finding that reopens most

Logging. Teams turn it on for an assessment, then storage costs spike, retention drops, and the next year's assessor finds the same gap. Budget for 90+ days of centralised logs from day one.

If you're 60-90 days out from a TPN+ assessment and unsure where you stand, a half-day readiness review is usually enough to surface the worst surprises.