TISAX

TISAX – a mechanism for assessing the security and reliability of information in the automotive industry

TISAX

TISAX (Trusted Information Security Assessment Exchange) is a mechanism for assessing and exchanging information on the level of information security of enterprises in the automotive supply chain, which allows the recognition and sharing of assessment results among registered participants. If you want to process sensitive information of your customers/partners in the automotive industry or assess the information security of your suppliers, TIS? AX provides you with this capability. The mechanism was created in 2017 by the German Association of the Automotive Industry (VDA) and the Association for Information Security (ENX). It is based on the requirements of ISO/IEC 27001, and to them is added a catalog (a set of questions and requirements that you need to meet) for an information security assessment (ISA), developed by the VDA.
TISAX is used by member companies both for their own internal purposes and for auditing partners and service providers who process sensitive information.

How does TISAX work?
The four steps to successful use and recognition under TISAX are:

• Registration (as a TISAX participant and as a scope of assessment);
• Selection of an audit organization;
• TISAX assessment;
• Exchange of evaluation results with existing and potential partners within TISAX.

Through the TISAX Exchange platform, registered participants can access the results of the evaluation of other registered participants – after sending a request and if it is confirmed. Each participant can provide information from their assessment, as well as request access to the assessment of another.

WHY do you need to meet the requirements of TISAX?

• German car companies (BMW, Daimler and Volkswagen) require compliance with TISAX in order for suppliers to be ranked as "most reliable" in terms of quality and security of digital information management;
• The trend is for TISAX to become a benchmark for certification in the automotive industry and information security management;
• Since its launch, TISAX has attracted the interest of the automotive industry and is already used by over 2500 companies in more than 40 countries;
• The audited and evaluated company may choose to provide its audit results to other TISAX participants with different levels of detail, thus avoiding additional audits by other interested participants with the same security requirements. Therefore, duplication and multiple audits are avoided, which helps everyone involved to save time and money.