From today, all newly commissioned TISAX assessments must be carried out against version 6.0 of the VDA Information Security Assessment (ISA) catalogue, published in October 2023.
Key points
- The catalogue is updated to reflect ISO/IEC 27001:2022 and its revised Annex A controls.
- New assessment objectives distinguish availability and confidentiality.
- Adds requirements relevant to operational technology and production environments, drawing on IEC 62443.
- Prototype protection and data protection modules continue alongside information security.
- Assessment levels AL1 to AL3 continue to depend on the sensitivity of information.
UK suppliers to German and European automotive manufacturers should prepare for renewal assessments under the new catalogue and review any gaps, particularly for production and OT environments.
Source: ISA Version 6 now available (ENX Association)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
