Snežienkova 1/A, 971 01 Prievidza SR
en
de
cs
sk

TISAX - Information security of suppliers in the automotive industry

 

How can you demonstrate information security management to your OEM customers?

TISAX is a standard defining information security requirements that has been binding on suppliers to the German automotive industry since 2008. TISAX is a mechanism for evaluating and exchanging security information for organizations. Members of the automotive industry association VDA have developed a catalogue of information security requirements, which follows the requirements of the international standard ISO/IEC 27001 and reflects the specific requirements of the automotive industry.

CeMS s.r.o. will help you correctly understand the specific requirements of the TISAX standard and explain to you the possibilities of how to connect them with ISMS's own information security management system.

You will gain expertise and practical tips on how to properly implement the TISAX standard in practice and how the TISAX certification process works.

 

What is the result of the implementation of TISAX?

The supplier verifies the established information security system by an accredited certification authority. You can access the TISAX service by registering online on the TISAX portal. After registration, you can ask an authorized auditor to perform an assessment based on the VDA ISA questionnaire. After evaluation, the results are transferred to the TISAX database..

After successful certification, you receive a so-called "TISAX label", which proves that you, as a supplier, have successfully passed an information security audit. A re-evaluation is required after 3 years.

The results of the evaluation are published on the TISAX portal, where they can also be seen by other business partners involved in this system - OEM carmakers and other suppliers in the Tier 1 - x automotive chain.

The supplier can thus gain new business opportunities without being re-audited for information security requirements.

 

How can we help you?

  • The key is to gain enough expertise on TISAX - we will train your cross-functional team
  • We will perform initial analysis in your company and check the current state of your system
  • We will develop a differential analysis, identify weaknesses in the form of a so-called "GAP analysis" and jointly propose appropriate corrective and preventive measures.
  • If critical discrepancies are found, we will help you eliminate them effectively
  • We will help you register with TISAX
  • Together with you, we will prepare a questionnaire based on VDA ISA and ensure your effective preparation for the subsequent audit from an accredited certification organization.

 

For more information, do not hesitate to contact us either via the form or by phone.
.