What is TISAX?

TISAX stands for “Trusted Information Security Assessment Exchange.” It is a framework for the secure exchange of sensitive information between companies in the automotive industry.

The TISAX framework was developed by the German Association of the Automotive Industry (VDA) in collaboration with other automotive manufacturers and suppliers. It is based on the international standard for information security management, ISO 27001, and covers a range of information security topics, including data protection, access control, incident management, and physical security.

When a company completes a successful TISAX assessment, it receives a TISAX label or assessment label, which is valid for three years. This label indicates that the company has met the information security requirements of TISAX and can exchange sensitive information with other TISAX-certified companies.

Applicability

TISAX is primarily applicable to companies in the automotive industry, including automotive manufacturers, suppliers, and service providers, that exchange sensitive information related to their products, services, and processes. TISAX is particularly relevant for companies that are involved in the development of new technologies and systems for connected cars, autonomous driving, and electric vehicles.

Objective

  1. Establish a standardized approach to information security assessments in the automotive industry
  2. Streamline the assessment process by allowing companies to share assessment results with their partners in the supply chain
  3. Provide a comprehensive framework for evaluating information security risks and identifying areas for improvement
  4. Encourage companies to continuously monitor and improve their information security practices to protect against new and evolving threats
  5. Enhance the overall security and resilience of the automotive industry’s information systems and data.

Approach

      Why CyberSRC®?

      Established in January 2018, CyberSRC® Consultancy offers the full machination of cyber security services ranging from threat intelligence, VMS to general advisory services in areas pertaining to Cyber security such as vulnerability attacks, compliance, and cyber security regulations, and laws. We are into system audits such as ISNP Audits, NBFC Audits, UCB Audits, PPI Audits, and SEBI Audits. We provide our solutions with better accountability. We are a certified assurance firm. We are an ISO 27001 certified organization, backed by a very diverse and dynamic team which have a combined experience.