Sector
Media & broadcast
Your building is full of people who do not work for you. Freelancers, visiting crews, post houses, client representatives: arriving for a project and gone by the end of the month. We design and maintain security for studios, post facilities and broadcast operations in Mumbai, specified for content that has not been released yet and for a workforce that changes every week.
Your clients audit your premises before they trust you with their content, and that audit is about doors, logs and zones rather than firewalls. Physical security is a commercial qualification in this industry, not an overhead. We design and maintain facilities that pass client content-security audits and keep passing them through constant contractor churn.
What actually goes wrong
The risk is not somebody breaking in. It is somebody who was let in.
| What fails | Why it fails | What it costs |
|---|---|---|
| Freelance credentials never expire | Issued per project, revoked by nobody, because the project ended and everyone moved on. | Hundreds of live credentials belonging to people who finished a job two years ago. |
| Edit suites share an access level with reception | Zoning was too much work at commissioning, so the whole floor became one group. | The room holding unreleased content is as protected as the front desk. |
| Visiting crews join the network with no authentication | The Wi-Fi was set up for convenience, and a crew that arrives for three days is not going to be onboarded properly. | Something is sent from your network that should never have left it. The IP address names your organisation, and the crew went home a month ago. |
| No record of who was in a suite, when | Doors have locks and no readers, because the suite was fitted before the security scope existed. | An asset leaked. You can prove it was in the building. You cannot prove who was near it. |
| Visiting crews signed in on paper | The system was specified for staff and nobody specified the visitors. | The people with the least accountability leave the least trace. |
| Server and MAM rooms uncovered | Treated as IT, so security scope stopped at the door. | Where the content physically lives has less coverage than the corridor outside it. |
| Camera and access clocks disagree | Separate systems, never synchronised. | Two records of the same person, minutes apart, and neither will stand up. |
The audit you cannot pass with a promise
A client asks who was in that suite on the night of the edit. What do you hand them?
Content security audits do not ask whether you take security seriously. They ask for a log. A specific room, a specific window, a list of names, and evidence that the list is complete.
The requirements are contractual rather than statutory, which makes them harder rather than easier: they sit outside anything local code asks for, and they change when your client changes. A facility can be technically excellent and fail on the single fact that its edit suites share an access level with reception.
We hold no TPN status ourselves, and no security contractor can obtain one on your behalf. The assessment is of your facility, not of your installer. What we do is design and install to the physical controls those audits examine, and keep them working between them.
Check what my facility can actually evidenceWhat we carry here
- Access control
- Edit suites, MAM and server rooms, stores and machine rooms as separate zones
- Credentials that expire on their own, per project, per crew
- Every entry and every denial recorded and reportable by room and by date
- Surveillance
- Entrances, corridors, machine rooms and the routes assets physically travel
- Retention set against your delivery cycle, not the recorder's default
- Timestamps synchronised with the access system so the two records agree
- Networking
- Production, corporate and guest traffic separated
- Attribution that names a person rather than a device
- Logs retained and held where somebody can answer for them
- Fire & life safety
- Detection appropriate to machine rooms and equipment that cannot be evacuated
- Suppression specified so a false discharge does not cost more than a fire
- Interlocks documented and tested rather than certified once
Building management is specified where the facility is large enough. AV is your business, not our scope: we secure it.
The same six stages
A studio's risk is entirely internal, so the stages weight differently.
- 01 Outside the gate Usually a street or a shared compound. The least important stage in this sector, and the only one where that is true.
- 02 Entry Where an unknown crew becomes a known one. If pre-authorisation happens here, everything downstream is easier.
- 03 Inside the building The route an asset travels: ingest, suite, store, delivery. That route matters more than any corridor.
- 04 Who goes where The whole sector, compressed into one stage. Who may be in which suite, at what hours, for which project.
- 05 Work areas Machine rooms, stores, and a fire strategy for equipment that cannot be moved.
- 06 Control room Small, usually a desk. Its measure is whether it can produce a room-level access log for a specific night without anybody improvising.
Proof
Two records of the same night, three minutes apart.
A broadcast facility where the door controller and the camera recorder had never been put on one clock. Every incident produced two accounts that disagreed, and neither could be used to correct the other.
Underneath that, two things nobody had counted. Doors that opened for one person and let two through, because tailgating was never designed against. And a credential list that had only ever grown (freelancers, visiting crews, people who finished a project in 2019) every one of them still valid, and the platform is licensed per user, so every one of them was still on the bill.
The system had been working perfectly the entire time. What it had stopped doing was telling the truth.
Year seven
Access control in this sector degrades faster than anywhere else, because the churn never stops.
Every project brings a crew. Every crew needs credentials. Every project ends and nobody revokes them, because the person who issued them has also moved on.
Nothing breaks. The readers work, the doors lock, the logs record. The database simply drifts further from the truth every month, until the access log you hand an auditor names four hundred people, most of whom have not been in the building for years.
The hardware will be working perfectly on the day that becomes a finding.
Find out what your facility can actually evidence.
We test every camera, reader and door, check what your access system can produce for a named room on a named night, and give you a signed condition report.
The assessment is chargeable, quoted against the site, and adjusted in full against the first year if you take cover. Where cover is not taken, the fee covers our team’s time on site and the report we leave behind, and the report is yours either way.
Chargeable, and adjusted in full if you take cover.
Book an assessment