TISAX®

TISAX® is a programme for assessing the information security systems of companies in the automotive sector. It is targeting data protection and integrity as well as availability in both in the automotive manufacturing process and during vehicle operation. Behind TISAX® stands an Information Security Management System (ISMS) similar to that defined by the International Standard ISO 27001. Based on this standard, the German Association of the Automotive Industry (VDA) developed a set of catalogues of requirement (ISA) for the specific needs of the automotive industry.

The effectiveness of an ISMS can be demonstrated by successfully passing an independent assessment, by an authorized partner, for example TÜV NORD. If so, ENX*, the organisation which administers and manages the TISAX® programme, issues a TISAX® label on its online platform.

This label is recognised by all VDA members and vehicle manufacturers such as Audi, BMW, Mercedes Benz and Volkswagen, thus making it easier to participate in future tenders. Participants – there are active and passive ones – in the TISAX® programme exchange information on the status of information security by applying the online-portal. Alongside contacting each other the exchange of assessment data via the portal generates confidence and trust within the entire supply chain. Registration on the TISAX® portal is essential for those wishing to participate.

• The assessment criteria are particularly relevant for the automotive sector
• The assessment and assessment results are consistent and of high quality
• The assessment and assessment report procedures are standardised
• The results are highly comparable and meaningful
• Double and multiple assessments are avoided

• A risk management system is established and risks are reduced
• The scheme enjoys broad acceptance in the automotive sector
• There is consistent focus on the requirements of the customer

• Online Registration on the TISAX Platform
• Order TÜV Nord to perform the assessment
• Document Review or on –site assessment
• Exchange of assessment results