The German Association of the Automotive Industry (VDA), together with the ENX Association, has launched TISAX, the Trusted Information Security Assessment Exchange.
TISAX allows automotive suppliers and service providers to be assessed once against a common standard and share the results with multiple manufacturers and customers, rather than completing a different questionnaire for each.
How it works
- Assessments are carried out by accredited audit providers against the VDA Information Security Assessment (ISA) catalogue, which is based on ISO/IEC 27001.
- Additional modules cover prototype protection and data protection.
- Assessment levels (AL1 to AL3) depend on the sensitivity of the information handled.
- Results are shared through the ENX platform, under the control of the assessed organisation.
If you supply the automotive sector, expect to be asked for a TISAX label. An existing ISO/IEC 27001 ISMS gives you a strong head start.
Source: TISAX (ENX Association)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
