Loading...

Run: Cinema Digital Cinema Package (DCP) and KDM Security Management Audit

Audit DCP receipt, KDM validity, content-server access, and expired-content removal in one cinema security checklist. Use it to prove chain of custody and ca...

Fill this out, get a PDF emailed to you. No account required. Want to run it with your team and track results? Sign up free →

Audit Scope and Asset Identification

Record the cinema location, auditorium/screen number, and content server or playback system covered by this inspection.
Document the date and time of the inspection and the content control period being reviewed.
Verify that current SOPs for DCP receipt, storage, KDM handling, and content deletion are available to staff.
Confirm the inspected server, storage device, and playback endpoint match the approved inventory or asset register.

DCP Receipt, Chain of Custody, and Delivery Confirmation

Verify receipt records include title, distributor, delivery date/time, package identifier, and receiving staff member.
Confirm the DCP media or transfer record shows no signs of tampering, corruption, missing files, or transfer errors.
Check that all handoffs, transfers, and temporary custody changes are logged with date/time and responsible person.
Verify signed or system-generated delivery confirmation is retained and linked to the corresponding title and delivery event.

KDM Receipt, Validity, and Expiration Control

Confirm KDMs are received only through authorized distributor or studio channels and not via unsecured personal accounts or media.
Verify the KDM start and end times cover the planned playback dates and auditorium/server identifier.
Confirm expiration dates are tracked in a log or system and reviewed before showtime to prevent failed playback.
Verify expired, superseded, or unused KDMs are removed from active use and retained only per retention policy.

Content Server Access Control and Security Logs

Confirm shared credentials are not used and each operator has a unique account or approved role-based access.
Verify authentication controls are enabled and consistent with site policy for the content server or TMS interface.
Check logs for failed logins, out-of-hours access, unexpected content changes, or unauthorized export attempts.
Verify admin or elevated privileges are restricted to approved staff and periodically reviewed.

Expired Content Removal and Storage Hygiene

Confirm expired or unauthorized content is deleted or quarantined from active playback storage according to retention policy.
Verify content directories contain only approved titles and that orphaned, duplicate, or unknown files are addressed.
Check that archived DCPs, KDMs, and logs are retained only for the approved period and protected from unauthorized access.

Exceptions, Corrective Actions, and Sign-Off

Record any non-conformance, root cause, immediate containment, and corrective action owner with due date.
Attach supporting evidence for any critical item failure, such as screenshots, log excerpts, or receipt records.
Inspector confirms the audit findings are accurate and complete.

Get your results

Enter your email — we'll send you a PDF of your filled-out template, plus the occasional MangoScoop newsletter (templates, workflow tips, product updates). Unsubscribe anytime — link is in every email.

Generated with MangoApps Templates — browse 250+ free