TISAX® - Fast & Secure Assessment
Follow us on
Learn more
Please fill out the form below to learn more about TISAX®, sign up for future communications, or get in touch with an SGS representative.
Many vehicle manufacturers are requiring their suppliers and partners demonstrate the information crossing their vast supply chain is secure. A Trusted Information Security Assessment Exchange (TISAX®) label provides this assurance.
Meet the new security challenges of the automotive industry
We are SGS – the world’s leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories around the world.
Resources
What is TISAX®?
TISAX® was developed by the German Association of the Automotive Industry (VDA) and is the Information Security Assessment (ISA) – a catalog of requirements based on ISO/IEC 27001. ENX Association acts as the governance organization within TISAX®. It approves audit providers and monitors the quality of implementation as well as the assessment results.
TISAX®
- Focuses on security within automotive Industry supply chain
- Compliance is mandated by German automotive original equipment manufacturers (OEMs)
- Satisfies (in part) Section “6.1.2.3 Contingency plans” in IATF 16949:2016
Simplifies renewal of existing supplier relations
What are the advantages of TISAX®?
Enables transparency of assessment prices
Facilitates new business connections through industry-wide recognition
Allows common recognition of assessment results
Saves manufacturers and suppliers costs and effort
Establishes common level of information security
Brochure
Information Security in the Automotive Industry
Technical Sheet
Trusted Information Security Assessment Exchange Technical Sheet
1. Review the TISAX® participant handbook.
Download the handbook here.
3. Selection of a TISAX® audit provider.
Once you are registered, select SGS as your TISAX® audit provider for your assessment.
2. Register via the TISAX® online platform.
4. SGS document review and/or on-site assessment, depending on the level of assessment required.
As an overview there are three levels:
- Assessment level 1: Self-assessment which is primarily for internal purposes.
- Assessment level 2: Documentation review of the self-assessment, and verification of the information through an examination of the supporting evidence and an interview with the head of information security.
- Assessment level 3: Comprehensive review and verification of the company’s compliance with the applicable requirements. This involves reviewing the self-assessment and supporting documentation, as well as observing local conditions, conducting additional interviews, both planned and unplanned, as well as observation of the process execution.
(Consult 4.3.3.5. Protection needs and assessment levels of the participant handbook for more detailed information.)
There are five stages to gaining a TISAX® label:
5. Optional exchange registration of assessment results.
Webinar: Vehicle Cybersecurity
Securing the Future: Navigating Vehicle Cybersecurity Standards
Webinar: ENX VCS and TISAX®
Driving Automotive Security: Navigating ENX VCS and TISAX® Compliance