Anti-Piracy and Compliance Program Audits - Content Security Brochure

1. It only takes one.
One security breach
One stolen file
One incident of copyright infringement
One single mistake can easily damage your
brand and reputation – and financially
devastate your organization.
The Content Delivery and Storage Association’s
global Anti-Piracy and Compliance Program (APCP)
Standards are an authoritative, industry-driven
set of best practices designed to manage and
minimize risks associated with handling, storage
and delivery of entertainment, software and
information content.
The Content Security Standards:
Content Protection and Security and Digital Download Supply Chain Security Standards
Procedures can be applied to all points
Intellectual property is arguably your or-
ganization’s most valuable asset. CDSA’s along the supply chain - from content cre-
Content Security Standards provide a ation, production, post production, digital
comprehensive framework for managing compression, encoding and authoring to
and safeguarding intellectual property, manufacturing, and the physical and digital
related media and digital assets, and physi- distribution of final product.
cal products. By achieving certification
in either Standard, your organization will The Standard is also compatible with
DIGITAL DOWNLOAD
SECURITY develop sound policies and procedures for ISO 27001 requirements and tailored spe-
PROGRAM better managing clients’ assets, prevent- cific issues associated with the handling,
ing unauthorized access, and mitigating or storage and delivery of valuable entertain-
preventing losses. These Standards and ment, software and information and assets.

2. Copyright & Licensing Standard:
COPYRIGHT & taken against them. Our programs have been
By achieving certification in the Copyright & Licens-
100% effective since the beginning nearly 10
ing Verification Program, your media replication
LICENSING VERIFICATION years ago.
facility demonstrates a high-level of capability and
PROGRAM commitment to the prevention of piracy throughout
The Standard is compatible with ISO 9001 require-
the manufacturing process - from order process-
ments and tailored to media manufacturing.
ing to delivery of the final product. The Copyright
& Licensing Standard specifies a framework for an
CDSA developed these standards in conjunction
effective anti-piracy compliance program, repre-
with an industry task force representing media
senting the essence of good and ethical business
manufacturers, content owners and their organiza-
practices.
tions from the motion pictures, music, games and
software publishing sectors. Our program is sup-
The Copyright & Licensing Standards are highly
ported and endorsed by the worldwide intellectual
effective: no certified disc replicator participating in
property community, manufacturers, and govern-
CDSA’s Copyright and Licensing audit program has
ment enforcement agencies.
ever had a copyright-related law enforcement action
Why become certified through a CDSA APCP?
We're proud to
The Content Delivery & Storage Association (CDSA) and its worldwide Anti-
• The Gold Standard - APCP Certification is the “gold Piracy and Compliance Programs reduce the risk of intellectual property
protect your content
being pirated, stolen or produced without authorization. Supply chain
sites providing post production, manufacturing, and physical and digital
standard” in anti-piracy and content protection and distribution services are certified by ISO-accredited auditors to ensure Copyright and Licensing Verification Certified Sites united Kingdom
CINRAM UK LTD, Ipswich www.cinram.com
compliance with rigorous APCP content protection and security standards. EDC BLACKBURN, Blackburn, Lancashire www.edc-blackburn.co.uk
AfriCA
ENTERTAINMENT DISTRIBUTION COMPANY (EDC) BLACKBURN LTD.,
Your content is in safe hands when you use a CDSA-certified site.
South Africa
security. For the past 10 years, CDSA has circled the
Blackburn www.edcllc.com
COMPACT DISC TECHNOLOGIES, Midrand
SONY DADC UK LTD, Southwater, West Sussex www.sonydadc.com
ASiA/PACifiC
NorTH AMEriCA
Australia
Canada
ARVATO DIGITAL SERVICES PTY LTD, Chester Hill, NSW
Q-MEDIA SOLUTIONS CORP, Richmond, British Columbia www.qmscorp.com
www.arvatodigitalservices.com
globe, performing numerous certification audits on
SONY DADC CANADA CO., Toronto, Ontario www.sonydadc.com
SONY DADC AUSTRALIA PTY LTD, Huntingwood, NSW www.sonydadc.com
uSA
SUMMIT TECHNOLOGY AUSTRALIA PTY LTD, Silverwater, NSW
AMERIC EVOLVED INC., Charlotte, North Carolina www.americdisc.com
www.summittechnology.com.au
arvato digital services llc, Weaverville, North Carolina
TECHNICOLOR PTY LTD, Alexandria www.technicolor.com.au
www.arvatodigitalservices.com
TECHNICOLOR PTY LTD, Braeside, Vic www.technicolor.com.au
CINRAM INC., Huntsville, Alabama www.cinram.com
China
nearly every continent.
CINRAM INTERNATIONAL, Richmond, Indiana www.cinram.com
SHANGHAI EPIC MUSIC MANUFACTURING OPERATIONS/SONY DADC CHINA CO
DELUXE DIGITAL STUDIOS, Burbank, California www.bydeluxe.com
LTD, Shanghai
DISC MAKERS, Pennsauken, New Jersey www.discmakers.com
SHANGHAI HUADE PHOTOELECTRON SCIENCE & TECHNOLOGY CO LTD, Shanghai
DISCFARM CORPORATION, Corona, California www.discfarm.com
Hong Kong
ENTERTAINMENT DISTRIBUTION COMPANY, Grover, North Carolina www.edcllc.com
ARVATO DIGITAL SERVICES LTD, Tai Po www.arvatodigitalservices.com.hk
JVC AMERICA INC., Tuscaloosa, Alabama www.jvcdiscusa.com
SONY DADC HONG KONG LTD, Tuen Mun www.sonydadc.com
L & M OPTICAL DISC LLC, Brooklyn, New York www.dxbind.com
india
OPTICAL DISC SOLUTIONS, INC (formerly SANYO Laser Products),
• Protecting Your Company - The preservation of
SONY DADC INDIA PVT LTD, Mumbai www.sonydadc.com
Richmond, Indiana www.odiscs.com
indonesia OPTICAL EXPERTS MANUFACTURING (OEM), Charlotte, North Carolina
DIGITAL MEDIA TECHNOLOGY PT, Bekasi www.dmtech.web.id www.oemdisc.com
PT. TAKDIR JAYA ABADI, Tangerang SONY DADC US, Terre Haute, Indiana www.sonydadc.com
Malaysia THE ADS GROUP, Plymouth, Minnesota www.theadsgroupdifference.com
GSB SUMMIT CD (M) SDN BHD, Kuala Lumpur www.gsbsummit.com.my UNITED RECORD PRESSING, Nashville, Tennessee www.urpressing.com
content security is crucial to your company’s financial
Singapore VIGOBYTE DE MEXICO, San Diego, California www.vigobyte.com.mx
ARVATO DIGITAL SERVICES PTE LTD, Woodlands www.arvatodigitalservices.com
SUMMIT CD MANUFACTURE PTE LTD, Singapore www.smsummit.com.sg SouTH/LATiN AMEriCA
Taiwan Argentina
INFODISC TECHNOLOGY CO., LTD, Taipei www.infodisc.com AVH S.R.L, San Luis www.avh.com.ar
U-TECH MEDIA CORPORATION, Tao-Yuan Shien www.utechmedia.com.tw EPSA FABRICACIÓN, Buenos Aires www.epsa.com.ar
success, business reputation, and image. Our certifica-
LASER DISC ARGENTINA S.A., Buenos Aires www.grupolaserdisc.com
EuroPE TELTRON S.A., Buenos Aires www.teltron.com.ar
Austria Brazil
KDG MEDIATECH AG, Elbigenalp www.kdg-mt.com ARVATO DIGITAL SERVICES, Manaus www.arvatodigitalservices.com.br
SONY DADC AUSTRIA AG, Anif www.sonydadc.com ARVATO DIGITAL SERVICES, São Paulo, SP www.arvatodigitalservices.com.br
Belgium MICROSERVICE TECNOLOGIA DIGITAL da AMAZONIA, Barueri, São Paulo
tion programs have a direct and positive impact on the
VOGUE TRADING VIDEO NV, Kuurne www.vtv.biz SONY DADC BRAZIL, Manaus, Amazonas www.sonydadc.com.br
Czech republic VIDEOLAR S.A., Barueri, São Paulo www.videolar.com
GZ DIGITAL MEDIA, Lodenice www.gzcdm.com VIDEOLAR S.A., Manaus www.videolar.com
france Mexico
CINRAM OPTICAL DISC S.A./CINRAM FRANCE, Louviers www.cinram.com ARVATO DIGITAL SERVICES MÉXICO, Atzcapozalco, Mexico City www.
bottom line.
CINRAM OUEST S.A., Gallion www.cinram.com arvatodigitalservices.com
MPO FRANCE, Averton www.mpo.fr CINRAM LATINOAMERICANA, S.A. DE C.V., Mexico City www.cinram.com.mx
SONY DADC MEXICO S.A. DE C.V., Tlalnepantla, Edo. De Mex. www.sonydadc.com
Germany
ARVATO DIGITAL SERVICES MANUFACTURING EMEA, Gütersloh
www.arvatodigitalservices.com
FOR MORE INFORMATION: Digital Download Supply Chain Certified Sites
CINRAM GmbH, Alsdorf www.cinram.de
• Timothy J. Gorman, Director of Anti-Piracy Compliance Program - Worldwide ELSÄSSER GLASSMASTER GMBH, Horb an Neckar www.elsaesser.com
tgorman@contentdeliveryandstorage.org EuroPE
ENTERTAINMENT DISTRIBUTION COMPANY, Hannover www.edc-gmbh.com
• Highly Qualified Audit Staff - Our audits are
INFODISC TECHNOLOGY GMBH, Renchen www.infodisc-gmbh.de france
• Peter Wallace, Director of Anti-Piracy Compliance Program - Europe/Middle East/Africa
OPTIMAL MEDIA PRODUCTION GMBH, Röbel www.optimal-online.de OPENDISC, Paris
pwallace@contentdeliveryandstorage.org
italy
• James S. Wise, Director - Director of Anti-Piracy Compliance Program - Asia
IMS MANUFACTURING SRL, ITALY, Caronno Pertusella (VA) www.imsgroup.it
jwise@contentdeliveryandstorage.org Post Production Anti-Piracy Security Certified Sites
Netherlands
docdata media b.v., Tilburg www.docdatamedia.com
w w w. c o n t e n t d e l i v e r y a n d s t o r a g e . o r g
performed by a highly qualified audit staff with an av-
NorTH AMEriCA
Poland
uSA
TAKT Sp. z o.o., Boleslaw www.takt.eu
The CDSA Anti-Piracy Certification/Compliance Programs are supported by the following worldwide agencies: DELUXE DIGITAL STUDIOS, Burbank, California www.bydeluxe.com
russia
• International Federation Of The Phonographic Industry (IFPI) • Business Software Alliance (BSA) • Digital Software Association
REPLIMASTER, Moscow www.dvdpro.ru
(DSA) • Entertainment Software Assoc. (ESA) • Software & Information Industry Assoc. (SIIA) • International Video Federation (IVF)
Spain
• Motion Picture Association (MPA) • Bureau International des Sociétés Gérant les Droits d’Enregistrement et de ARVATO DIGITAL SERVICES, Madrid www.arvatodigitalservices.com
erage of 15 years experience and possess a wide array
Reproduction Mécanique (BIEM) • Bescherming Rechten Entertainment Industrie Nederland (BREIN) Sweden
DICENTIA SWEDEN AB, Kista www.dicentia.se
CONTENT DELIVERY & STORAGE ASSOCIATION
of professional credentials (e.g, ISO 9001, ISO 27001,
ISO 14001, Certified Information Security Auditor Who should use CDSA’s APCP certification programs?
(CISA), Certified Information Security System Professional
• Any entertainment, software, media, data center, or e-
(CISSP), and/or law enforcement and security investigations
Commerce organization that values information and asset
experience).
protection and security
• Demonstrated Commitment - By achieving APCP cer-
• CFO, Purchasing executives or other key financial profes-
tification, your company demonstrates to its supply chain
sionals responsible for selecting qualified suppliers and
partners and employees that it is committed and capable of
supply chain partners. Our standards are an exceptional
offering the best possible assurance that clients’ priceless
set of requirements that should be a part of all Requests
assets and information will be kept safe and secure.
for Proposals (RFPs)
• Cost Effective - We provide certification audits at a frac-
• Marketing and Sales executives
tion of the cost of most corporate supplier audit programs.
• Corporate IT and Quality Assurance functions who seek to
• Alignment with Other Management System - Our
outsource costly supplier audits and site visit programs
industry-specific standards are compatible with ISO 9001
• Any studio or intellectual property rights owner needing
(quality management system) and ISO 27001 (information
objective, 3rd party assessments of its supply chain
management system) standards, while addressing other key
partners
issues important to your industry.
• Any company interested in demonstrating its own compe-
• Fiscally Responsible - CDSA’s independent, third-party
tence, commitment, and technical and process capability
site certification programs are a true value. Our audits are
to effectively handle, maintain, transmit and/or deliver
affordable, especially when compared to the staggering
information content, assets, or products securely and
costs of a single security breach.
responsibly

3. What is the certification process?
Whether an organization applies for certification to the CDSA
Copyright & Licensing Verification or one of the Content Security
APCP Certification Process
Standards, the certification process consists of four steps.
• Step One Step One:
Program Application
Submit Application for an
Receipt of your application and $5,500 US fee is the first step
APCP Certi cation Program
in the certification process. Once you are accepted into the pro-
gram your organization will be provided APCP program resources
and orientation training/training materials to help your organiza- • Develop management system
tion implement the applicable Standard. documents in conformance
with requirements of Standard
The Program Application Fee includes a review of your organiza-
tion’s program documentation. If necessary, any required changes • Submit documentation to CDSA
would be recommended to bring your manual in compliance with for Pre-Audit Approval
CDSA standards.
Step Two:
• Step Two
Undergo Initial
Initial APCP Certification Audit Phase
Certi cation Audit
The Initial Certification Audit Phase requires an audit to be con-
ducted, upon approval of manuals and procedures documentation.
The Initial Certification is valid for six months. The audit fees for
• Submit Corrective Action(s) to
this Initial APCP Certification Phase include the cost of the CDSA
CDSA, if applicable
certification audit, the audit report, corrective-preventive action
reviews and approval, and other benefits of participation program. • Site receives APCP Certification,
Upon successful audit completion, CDSA issues a Certificate of if the audit is successfully
Conformance to your organization. completed.
The initial audit fee is determined by the size and scope of your
Step Three:
organization. See the APCP Fee Schedule for more details.*
Undergo a Six-Month
• Step Three
Surveillance Audit
Initial Six-Month Audit and Annual
Certification Continuation Audits
Within six-months after Initial APCP Certification, your organiza- • Submit Corrective Action(s) to
tion must undergo a follow-up audit to ensure that the Program CDSA, if applicable
continues to conform to the requirements of the Standard. In this
• Site APCP Certification is renewed
Phase, your CDSA Certification is valid for a year from the date
for six-months, if the audit is
of the six month audit. Internal audits also must be conducted
successfully completed.
by your organization six months after the first CDSA certification
audit, and then annually thereafter.
Step Four:
The six-month audit fee is outlined in the APCP Fee Schedule.*
Undergo Continuation
• Step Four
Audits Annually Thereafter
Undergo Continuation Audits
Annually Thereafter
Annually, your organization must undergo a CDSA certification • Site APCP Certification is renewed
audit to maintain and annual CDSA audits thereafter; see fees for one (1) year, if the audit is
below. Annual audit fees include CDSA certification audit, the successfully completed
audit report, corrective-preventive action reviews and approval,
• To maintain certification, the site must:
and participation program. Upon successful completion of each
- Continue to conform to APCP requirements
annual audit, CDSA renews your organization’s Certificate of
- Conduct internal audits
Conformance.
- Undergo annual CDSA Audits successfully
The annual audit fee is outlined in the APCP Fee Schedule.*
*APCP Fee Schedule is available at www.contentdeliveryandstorage.org/apcpfees

4. Why CDSA?
More than 100 media creation, manufacturing, and distribution facilities worldwide participate in CDSA’s Anti-Piracy
and Compliance Programs, which are supported and endorsed by the intellectual property community, its supply chain
partners and government enforcement agencies. Program standards are designed to provide content supply chain se-
curity at each site through comprehensive security risk management assessments and ongoing audits by independent
ISO, CISA, and/or CISSP - accredited auditors.
Certification audits are performed by a staff of highly-qualified auditors who possess both industry credentials and
auditing experience qualifications to demonstrate our commitment to providing the highest quality risk assessment
and content protection to the content communities supply chain partners.
Our audit programs are designed to improve your business results. It is not just an audit and assessment process; our
objective is to help your organization to thrive and achieve measurable results it never thought possible before.
For 38 years, CDSA (formerly the IRMA, International Recording Media Association) has been the source of critical
information regarding content protection and security. CDSA networks across all sectors of the industry and with the
content community that drives the businesses of the CDSA membership. As such, it provides unparalleled technology
and innovation, and insight into your organization in a way that others cannot.
Contact Us
Content Delivery and Storage Association (CDSA)
182 Nassau Street • Suite 204 • Princeton, NJ, 08542 USA
Tel: +1-609-279-1700 • Fax: +1-609-279-1999
www.contentdeliveryandstorage.org