Seven Key Considerations Before Your TISAX® Assessment
The TISAX® label is an important prerequisite for doing business in the automotive industry. More and more OEMs require their business partners to demonstrate that they meet defined information security requirements. This applies not only to Tier 1 suppliers but also to companies further down the supply chain and service providers, for example in data processing or advertising. The bottom line: no TISAX® label, no business.
Our TISAX® white paper provides an overview of the key measures and preparations involved in achieving a TISAX® label at Assessment Level 1, 2 or 3. Learn more about why the VDA Information Security Assessment (ISA) has become essential for many automotive suppliers and how ISO 27001 influenced its development.
Read: 7 Tips for Implementing TISAX® in Your Organization
- Lay the groundwork: How contractual, legal and internal information security requirements work together
- Understand the bigger picture: How TISAX® relates to ISO 27001 and IEC 62443, and why it covers operational technology (OT) as well as information technology (IT)
- Assign responsibilities: Why information security is more than IT security
- Clarify roles: What top management is accountable for and why everyone needs to be involved
- Involve suppliers: Differentiated by protection objective, from the data center to the cleaning service
- Define the scope of your assessment: How to choose between a standard and a custom scope, and why ISO experience cannot be transferred directly to TISAX®
- Determine the assessment level: How your protection needs determine the type of assessment
Discover the key takeaways in our white paper.
Complete the form on this page to get immediate, free access to practical insights and tips in PDF format.
Management Summary
TISAX® (Trusted Information Security Assessment Exchange) is an assessment scheme based on the VDA Information Security Assessment (VDA ISA). It enables suppliers and service providers in the automotive industry to demonstrate that they meet defined information security requirements when handling sensitive information entrusted to them by their customers.
TISAX® is relevant to a broader range of organizations than many might expect. In addition to Tier 1 suppliers, companies further down the supply chain are increasingly required to demonstrate compliance with TISAX® requirements. This also applies to service providers, for example in data processing and advertising, as well as other business partners across the automotive industry.
If your organization needs to meet the automotive industry's information security requirements, there are several key decisions to make before preparing for a TISAX® assessment.
Holger Schmeken
Holger Schmeken is Product Manager for TISAX® and VCS , as well as Deputy Information Security Officer at DQS GmbH. An expert in information security and software development, he also contributes his expertise as an ISO/IEC 27001 auditor with audit procedure competence for critical infrastructure (KRITIS).
How to Get Your White Paper
First you need to register. Please use the form on this page.
After registration, you will receive an email from us asking you to confirm your email address.
Please note: Confirmation is required before we can send you the white paper.
After confirming your email address, we will send you the white paper.