IMPLEMENTATION OF MANAGEMENT STANDARDS
Your rating 0 from 0 votes


TISAX - Mechanism for Assessing the Security and Reliability of Information in the Automotive Industry

TISAX is an assessment and exchange mechanism for the information security of enterprises in the automotive supply chain and allows recognition and sharing of assessment results among the participants. If you want to process sensitive information from your customers and partners in the automotive industry or evaluate the information security of your own suppliers, TISAX supports you in reducing efforts.
The mechanism was established in 2017 by the German Automobile Industry Association (Verband der Automobilindustrie, VDA) and ENX Association. It is based on the requirements of ISO/IEC 27001 and a catalogue (set of questions and requirements to be covered) for information security assessment (ISA) developed by the VDA is added.
TISAX is used by participants both for their own internal purposes and for auditing partners and service providers that process sensitive information.


How does TISAX work?
There are four steps to successfully use and recognize TISAX:
  • Registration (as a participant in TISAX and as a scope of evaluation);
  • Selection of an a audit provider;
  • TISAX assessment;
  • Exchange of the TISAX assessment results with existing and potential partners within TISAX.
Through the TISAX Exchange platform, registered participants can access theassessment results of other registered participants after confirmation of the sent request. Each participant can provide information from their assessment, as well as request access to the assessment of another.

WHY is it important to meet the requirements of TISAX?
  • German car companies (BMW, Daimler and Volkswagen) require suppliers to comply with TISAX in order to rank them as "most reliable" in terms of quality and security of digital information management;
  • There is a tendency for TISAX to become a benchmark for certification in the automotive industry and information security management;
  • Since 2017, TISAX has attracted the interest of the automotive industry and is used by more than 2,500 companies in more than 40 countries;
The audited and assessed company may choose to provide its audit results to other TISAX participants with different levels of detail and thus to avoid additional audits by other stakeholders with the same security requirements. This avoids duplication and multiple audits, which helps companies save time and money.

www.portal.enx.com
News
12
10.26
NATO Quality Assurance Standards Gain Attention in Defence Industry Investment
NATO quality assurance requirements are of practical importance to Bulgarian com...
25
09.26
European Cybersecurity Month 2026: The Human Factor in Focus
Today, the Court of Justice of the European Union in Luxembourg is hosting the o...
Accents
06
11.26
AQAP-2110: Beyond ISO 9001 Requirements
What additional requirements apply to suppliers in the defence industry? For ...
20
10.26
​Change Management in the Food Sector: When Is a New Risk Assessment Necessary?
Changing a supplier may seem like a routine commercial decision, while extending...

Implementation of management standards

CONSEJO Ltd. is a consulting company with over 20 years of practical experience in the development, implementation and maintenance of management systems in accordance with international standards and regulatory requirements. The company provides consulting services in the areas of quality management, environmental management, occupational health and safety, food safety, information security, cybersecurity, risk management and sustainable development. Our expertise covers standards and schemes such as ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO/IEC 27001, IFS Food, BRCGS and HACCP, as well as consulting services related to NIS2, DORA, GDPR and EcoVadis.

The CONSEJO team has been involved in over 1,500 projects for organizations across various sectors of the economy, including manufacturing, construction, energy, information technology, transport, trade, the food industry and services. Our approach focuses on developing management systems that work effectively in practice, tailored to the specific characteristics and needs of each organization. We work closely with our clients, providing consulting support, staff training and assistance during implementation. We strive to deliver high-quality services within the agreed deadlines and solutions that support successful certification and create long-term value for businesses.

See more
Partners