{"id":5662,"date":"2023-11-14T09:05:43","date_gmt":"2023-11-14T08:05:43","guid":{"rendered":"https:\/\/vdaisa-berater.optiqum.de\/tisax-our-guide-for-companies\/"},"modified":"2024-03-06T11:52:10","modified_gmt":"2024-03-06T10:52:10","slug":"tisax-our-guide-for-companies","status":"publish","type":"post","link":"https:\/\/vda-isa-berater.com\/en\/tisax-our-guide-for-companies\/","title":{"rendered":"TISAX\u00ae – our guide for companies"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Your customer asks you for proof of the TISAX\u00ae label. What now?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

There it is, the information from your customer that you or your company should now please provide proof of a TISAX\u00ae label.<\/p>\n

Now the question arises as to what exactly needs to be done, which departments need to be involved and how the process for a successful assessment according to TISAX\u00ae actually works in order to meet the customer’s requirements.<\/p>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Here is a short guide for orientation:<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is TISAX\u00ae actually?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

TISAX\u00ae, the standard for information security in the automotive industry, is a common assessment and exchange mechanism that makes the findings from information security assessments accessible to all manufacturers. The results of the tests are mapped in a maturity model. Recertification is generally carried out every three years or, for example, if the participating company wishes to demonstrate a further audit objective or if a major organizational change has taken place.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs a TISAX\u00ae assessment really necessary?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

To cut a long story short: If a customer requests proof of the TISAX\u00ae label, proof of TISAX is usually mandatory. However, if you do not receive customer data or do not have access to the customer’s systems, then in very rare cases the customer’s request may be unfounded.<\/p>\n

You should also check at which locations the actual service provision that makes the TISAX\u00ae assessment necessary takes place. For example, if you have several locations in your company but do not produce\/provide the service at all of these locations, then only those at which the service is provided for the OEM must provide evidence of the TISAX\u00ae label.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow much time do I need to plan for the TISAX\u00ae label?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Depending on the size of the company and the assessment objectives, a time frame of at least 6 months should be planned for a successful TISAX\u00ae assessment. Depending on the resources available and day-to-day business, for example, this can of course take up to 18 months. TISAX\u00ae is therefore not “just done on the side”.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWho should become part of the TISAX\u00ae team in my company?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

TISAX\u00ae is the standard for information security in the automotive industry. It therefore makes sense to integrate members into the team who have knowledge of your company’s IT and information security processes as well as employees who have expertise in internal project management areas and are characterized by strong communication skills. In other words, employees from all areas of your company in which values (information in digital or physical form, prototypes) are used and passed on.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat exactly does the process for the TISAX\u00ae label look like?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

If your company already has an integrated information security management system (ISMS for short) that is practiced by all employees, this greatly simplifies the implementation of the TISAX assessment. If no ISMS is in place, the required documentation must be prepared in accordance with the audit objectives.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t