{"id":5630,"date":"2023-12-05T15:05:43","date_gmt":"2023-12-05T14:05:43","guid":{"rendered":"https:\/\/vdaisa-berater.optiqum.de\/faq\/"},"modified":"2024-05-23T14:55:43","modified_gmt":"2024-05-23T12:55:43","slug":"faq","status":"publish","type":"page","link":"https:\/\/vda-isa-berater.com\/en\/faq\/","title":{"rendered":"FAQ"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Questions? We have the answers!<\/p>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Help on the subject of TISAX\u00ae<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Do you need help with TISAX\u00ae?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Here is our FAQ on most questions for quick Tisax\u00ae help:<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is TISAX\u00ae?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

The Trusted Information Security Assessment EXchange, TISAX\u00ae for short, is a standard for information security defined by the automotive industry.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhy was TISAX\u00ae introduced?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

The member companies of the German Association of the Automotive Industry (VDA) have created a catalog derived from the international industry standard ISO 27001, which has been adapted to the specific requirements of the automotive industry.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWho operates TISAX\u00ae?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

TISAX\u00ae is operated by the legally independent organization ENX Association based in France, which accredits the assessment service providers and monitors the quality of implementation and the assessment results.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhy do you need TISAX\u00ae?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Since 2017, any company that works for customers in the automotive industry can be required to submit a TISAX\u00ae approval in accordance with VDA-ISA. Suppliers in the industry need them in order to continue to receive orders. And in order to avoid the threat of delisting, certification must take place as quickly as possible and be guaranteed.
Secure the decisive competitive advantage and join us on the path to your TISAX\u00ae approval. At OPTIQUM, we help you to reach your goal without any detours.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat and how is evaluated?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

The VDA-ISA questionnaire uses the measures from ISO 27001. These are formulated as questions and must be rated by the company with a maturity level of 1 to 5. The actual evaluation of the result is carried out mathematically, always checking against the average target maturity level of 3. But beware: A high degree of maturity of one measure cannot compensate for the low maturity level of another measure.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is the rough procedure?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

First, a scope and gap analysis is carried out to map the status quo of your company. By comparing this with the catalog of requirements, it becomes clear which measures need to be implemented. On this basis, a specific procedure can now be developed to achieve the desired level of maturity for the certification audit. Once all measures to be taken have been completed and successfully implemented, approval and certification follow.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat examination levels are there?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

TheTISAX\u00ae label distinguishes between three assessment levels:<\/p>\n

Assessment level 1<\/strong><\/span>
Normal protection requirements<\/em><\/strong>
The lowest level: The AL1 is a pure self-disclosure and is hardly used in common practice. They are primarily used for internal purposes, have little informative value and are not used in TISAX\u00ae. The AL1 is identical to the VDA-ISA questionnaire with the difference that the results are shared simultaneously via the TISAX\u00ae platform.<\/p>\n

Assessment level 2<\/strong><\/span>
High protection requirements<\/em><\/strong>
In addition to its own assessment of the level of security, the AL2 undergoes a plausibility check by means of a telephone interview with an external testing service provider. An on-site visit can take place in addition to this telephone call, for example at:<\/p>\n