Question 1

What is TISAX®?

Accepted Answer

TISAX®, which stands for Trusted Information Security Assessment Exchange, is a label that represents an information security standard designed specifically for the automotive industry. Originally initiated by the German Association of the Automotive Industry (VDA), the standard has since become established throughout Europe. Since 2000, TISAX® has been a registered trademark of the ENX Association, the association of the European automotive industry. TISAX® is based on ISO 27001 but tailored to the requirements of the automotive industry. ISO 27001 is the international standard for information security management systems, providing guidelines for protecting information assets. Requirements for the assessment on TISAX® additionally apply to the protection of prototypes and data privacy.

Question 2

What does the certification on TISAX® cost?

Accepted Answer

It's important to note that the complexity of the requirements directly influences the preparation effort and the TISAX costs. Therefore, the question of costs cannot be answered with a one-size-fits-all approach. To determine the cost of the certification on TISAX®, various factors need to be considered: What TISAX® assessment level does a company aim to achieve? Is an Information Security Management System (ISMS) already in place, and does it meet the requirements of ISO 27001? This assessment helps determine how much groundwork is needed before you can start the implementation process.

Question 3

How can I get TISAX® certified?

Accepted Answer

Identify gaps and kickoff TISAX® implementationBegin by familiarizing yourself with the TISAX® framework. Conduct a gap analysis to identify areas where improvements are needed to meet the requirements. Work with our certified information security experts to build a customized TISAX® implementation plan. This plan also defines the scope of your Information Security Management System (ISMS). Build your ISMSISMS is a comprehensive set of policies, processes, procedures, and controls designed to improve your organization's information security practices. Identify and mitigate risksInformation security risks stem from various organizational sources, including people, infrastructure, physical security, and third-party relationships. So, you start with brainstorming hypothetical scenarios to identify the various information security risks your organization is exposed to. Assess their impact from a financial, reputation, legal, and operation point of view. Afterwards, you can implement technical or procedural measures to mitigate and manage the identified risks. Protect information assetsIdentify and document all information assets in your organization, like hardware, data, and personnel. Categorize them based on criticality and value to determine appropriate security controls. Define ownership and assign responsibilities for asset management and protection. Pass your audit on TISAX®In the external audit, an accredited auditor assesses all aspects of your organization’s ISMS to verify the level of compliance with TISAX®. DataGuard experts help you conduct a thorough internal audit, maximizing your chances of external audit success. Our TISAX® audit checklist ensures your business addresses all key compliance areas. The real journey begins: Maintaining your ISMSEvolving security threats and changes to the organizational infrastructure constantly create new risks. To ensure continued compliance with TISAX®, you need to regularly review and update your ISMS. This includes risk assessments, internal audits, and employee training.  To stay certified, your organization must pass a re-audit every 3 years. Continually improve your ISMS as your business grows and matures. Show your commitment to information security with certification on TISAX® and win more deals.

Question 4

Who needs certification on TISAX®?

Accepted Answer

Certification on TISAX® is not legally required. Companies cannot be required to implement management systems that fulfill the requirements for the assessment on TISAX®. However, in practice, certification on TISAX® is indispensable for all companies aiming to operate as suppliers or partners for automotive manufacturers. Without certification on TISAX®, cooperation with major OEMs (Original Equipment Manufacturers) will become increasingly challenging in the future.

Question 5

What is Level 1 of compliance with TISAX®?

Accepted Answer

TISAX® works with three different levels of protection - Assessment Levels 1, 2, and 3 of compliance to TISAX®. To obtain a Level 1 of compliance to TISAX®, a self-assessment is sufficient, which is processed through the handbook for the certification on TISAX®.

Question 6

Who tests TISAX®?

Accepted Answer

TISAX® has been a registered trademark of the European Automotive Industry Association, the ENX Association, since 2000. The ENX Association is entrusted with the assessment on TISAX®. The procedure is based on an ISA questionnaire of the Association of the German Automotive Industry VDA (VDA-ISA). ISA stands for Information Security Assessment.

Question 7

Is TISAX® international?

Accepted Answer

TISAX® is the internationally recognized standard for auditing information security and prototype protection in the automotive industry.

Question 8

How long is certification on TISAX® valid?

Accepted Answer

Certification on TISAX® must be renewed every three years. Therefore, not only the certification but especially the maintenance of the ISMS is an ongoing process. Continuous checks and updates of the ISMS are the best prerequisite for renewed certification.

Question 9

What is an ISMS?

Accepted Answer

An Information Security Management System (ISMS) is a framework of policies and procedures designed to reduce the impact of security breaches. It is also the foundation and outcome of implementing the ISO 27001 standard.

Question 10

Are you ready for the assessment on TISAX®?

Accepted Answer

The prerequisite for the assessment on TISAX® is an active information security management system (ISMS). TISAX® bases its ISMS on the requirements of ISO 27001. We assess whether your ISMS meets these requirements and identify areas for potential improvement. This systematic approach ensures that your company is well-prepared for the assessment on TISAX®.

Question 11

Which level of compliance to TISAX® do you need to master?

Accepted Answer

TISAX® has eight different test objectives and three different assessment levels. Depending on the desired label, the spectrum ranges from simple self-assessment to remote audits and on-site live assessments. No matter which audit objectives and which assessment level you have to fulfill: we systematically and effectively prepare you for success.

Question 12

How long does certification on TISAX® take?

Accepted Answer

Depending on the complexity and scope of the assessment on TISAX®, it can take three months to a year before companies are ready for auditing. Depending on the assessment level, the TISAX® management system covers all areas and processes of a company without exception. Therefore, in preparation for the audit, all processes, routines, and departments must be analyzed and, depending on the initial situation, optimized.

Speed up certification on TISAX®with confidence

Join 4,000+ companies who are driving their security and compliance objectives with DataGuard

Why businesses rely on DataGuard for certification on TISAX®

Efficient certification on TISAX^®

Enhanced risk management

Streamlined audit readiness

Scalable security solutions

Cut risks and workload –achieve certification on TISAX® faster

100%

100 hours

50%

Get in the fast lane for TISAX®7 steps to certification and ongoing risk mitigation

Discover how you can achieve your security & compliance objectives with DataGuard.

Frequently asked questions about TISAX®

What is TISAX^®?

What does the certification on TISAX^® cost?

How can I get TISAX^® certified?

Who needs certification on TISAX^®?

What is Level 1 of compliance with TISAX^®?

Who tests TISAX^®?

Is TISAX^® international?

How long is certification on TISAX^® valid?

What is an ISMS?

Are you ready for the assessment on TISAX^®?

Which level of compliance to TISAX^® do you need to master?

How long does certification on TISAX^® take?

Relevant resources

How to implement TISAX^® in your organization

Checklist on TISAX^®

TISAX^® or ISO 27001?

What is the certification on TISAX^®?

Fast-track TISAX® certification now

How can we help?Contact us.

Products

Platform

Frameworks

Solutions

Resources

Company