Cybersecurity frameworks / Attestation / assessment

TISAX: Trusted Information Security Assessment Exchange (ENX / VDA ISA)

The automotive industry’s information security assessment, required by many OEMs from suppliers.

TISAX assessments, run by ENX-approved audit providers against the VDA Information Security Assessment catalogue, let automotive suppliers share results with OEMs. Assessment levels and objectives cover information security, prototype protection and data protection. We prepare suppliers using their ISO 27001 foundation.

Who it is for

  • Automotive suppliers and engineering service providers
  • Companies handling OEM prototypes

What you gain

  • Access to automotive OEM contracts

How we get you ready

  1. Scoping

    Agree the systems, services and criteria in scope, and whether a Type 1 or Type 2 report fits your customers and timeline.

  2. Readiness assessment

    Map existing controls to the criteria, identify gaps and design missing controls with owners and evidence.

  3. Remediation

    Put policies, tooling and processes in place, and rehearse evidence collection so it is routine, not a scramble.

  4. Assessment coordination

    We help you engage an ENX-approved audit provider, prepare the evidence and support you through the assessment and any follow-up actions.

  5. Observation period and report

    For Type 2, we monitor controls through the observation window and help you respond to exceptions before the report is issued.

TISAX questions

Is TISAX a certificate?
TISAX produces an assessment result shared through the ENX platform rather than a traditional certificate. OEMs specify the level and objectives they require.

Ready to start on TISAX?

Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.