# TISAX: Trusted Information Security Assessment Exchange (ENX / VDA ISA)

> The automotive industry’s information security assessment, required by many OEMs from suppliers.

URL: https://securei3.com/standards/tisax/
Category: Cybersecurity frameworks: Attestation / assessment
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


TISAX assessments, run by ENX-approved audit providers against the VDA Information Security Assessment catalogue, let automotive suppliers share results with OEMs. Assessment levels and objectives cover information security, prototype protection and data protection. We prepare suppliers using their ISO 27001 foundation.

## Who it is for

- Automotive suppliers and engineering service providers
- Companies handling OEM prototypes

## Benefits

- Access to automotive OEM contracts

## How Secure iQube helps

1. **Scoping**: Agree the systems, services and criteria in scope, and whether a Type 1 or Type 2 report fits your customers and timeline.
2. **Readiness assessment**: Map existing controls to the criteria, identify gaps and design missing controls with owners and evidence.
3. **Remediation**: Put policies, tooling and processes in place, and rehearse evidence collection so it is routine, not a scramble.
4. **Assessment coordination**: We help you engage an ENX-approved audit provider, prepare the evidence and support you through the assessment and any follow-up actions.
5. **Observation period and report**: For Type 2, we monitor controls through the observation window and help you respond to exceptions before the report is issued.

## Frequently asked questions

### Is TISAX a certificate?

TISAX produces an assessment result shared through the ENX platform rather than a traditional certificate. OEMs specify the level and objectives they require.

Related: https://securei3.com/standards/iso-27001/, https://securei3.com/standards/iatf-16949/

Contact: https://securei3.com/contact/: info@securei3.com