FAQ

The questions we get asked most, answered plainly.

What the campaign is, who it's for, where to start, and what's in the free toolkit. Open a question to read the answer.

What is Fix It or Risk It?

Fix It or Risk It is an industry-wide campaign designed to help people recognize everyday security risks and take practical action before small vulnerabilities become bigger problems.

More about the campaign
Who is Fix It or Risk It for?

Everyone working across the content production ecosystem—from freelancers and small studios to large facilities, across pre-production, production, post-production and beyond. Good security practices matter whatever the size of your organization or your role.

Who is Sam?

Sam isn't a real person, but the situation is. Sam is a fictitious persona who represents someone working in the media and entertainment supply chain with limited time, budget, and resources. Sam's journey shows how the Fix It Toolkit can be used to tackle security improvements at a manageable pace, starting with quick, high-impact actions and building stronger security practices over time.

Follow Sam's journey
Where should I start?

Start with the actions that are easiest to fix and can make the biggest difference. The toolkit groups practical steps by level of effort—Fix it this week, Fix it this month and Fix it this quarter—so you can work through them at a pace that makes sense for you.

Where to begin
What resources are available?

The free toolkit includes practical guidance, policy templates, training, grant information, and other resources designed to be helpful for everyone—from freelancers and small businesses to larger facilities. A free gap analysis is also available to help identify where you may want to focus first.

See the toolkit
Is Fix It or Risk It a compliance or certification program?

No, it's not a compliance, certification, enforcement, or vendor-ranking program. It's a practical, non-commercial initiative designed to help the industry understand common risks and take manageable steps to address them.