As a veteran and leader in the entertainment industry,
X2X was founded on the sound business practices of being proactive and meticulously thorough. These practices are prevalent throughout the business and are
exemplified on matters pertaining to information protection and security. While generally understood that not every breach is preventable; the importance of
protecting customer data at X2X is paramount.
The security culture is engrained in the company ethos, requiring systematic re-evaluation and continuous improvement.
The X2X information security strategy, which is founded on the adoption of industry-leading techniques and frameworks, carefully implemented by security-conscious
engineers and dedicated security personnel, and validated through regular engagements by internal and external assessors.
Philosophy
Security for X2X starts at the very beginning of production.
It is embedded in the approach to building our core architecture, developing products and applications, and servicing our clients. In order to secure the highest value assets
for the film and television industry we strongly believe that security cannot be bolted on after the fact. Security is in the DNA of our company.
We insist on security training for every new employee and take pride in our regular employee security briefings. We enforce security code review and testing
throughout the design, build, and deployment phases of development. We appreciate and afford our clients audit rights to ensure we continue to be at the cutting
edge of security. We complement our approach to security with a strong belief in full transparency with our clients to ensure the highest level of partnership
in all things security related.
Governance
The PIX Information Security Program is governed by the PIX Security Advisory Board (PSAB).
The PSAB is comprised of senior company leadership, internal information technology experts, and external industry leading experts in the field of cyber security.
The PSAB serves as an executive resource to PIX, CODEX, X2X and the broader Media and Entertainment industry for all matters relating to security.
Standards, Best Practices, and Certifications
We work diligently and
have many allies working with us to mature our cyber security discipline and implementation. Where possible we adopt industry specific standards like TPN and NIST
Cyber Security Framework and apply successful approaches from other industries and/or disciplines.