TISAX® stands for Trusted Information Security Assessment Exchange. TISAX® enables mutual acceptance of information security assessments in the automotive industry and provides a common assessment and exchange mechanism that ensures the secure sharing of sensitive information to partner companies, to inspire trust throughout the automotive supply chain.

TISAX® was established by VDA (the German association of the automotive industry) and is operated by ENX Association, who have assessed and confirmed BSI’s status as a TISAX® approved audit provider.

Developed by automotive industry security experts and based on international information security management system (ISMS) standards like ISO/IEC 27001, TISAX® provides a catalogue of requirements, covering virtual, physical and social aspects of information security, specific to the automotive supply chain. This catalogue is referred to as the Information Security Assessment (ISA) and forms the basis of the assessment conducted by BSI as an approved TISAX® audit provider.

Original Equipment Manufacturers (OEMs) are increasingly recognizing, and in some cases mandating, that a TISAX® label is a demonstration of an organization’s compliance with information security requirements, therefore helping assure information security across the automotive supply chain.

There are currently more than 3,000 TISAX® participants (OEMs and TISAX® certified suppliers) across almost 6,000 registered locations worldwide. This includes a range of organizations working with OEMs, from vehicle component suppliers to technology service providers and beyond.

1. TISAX® registration: the client registers in the ENX portal, indicating the scope of the assessment.
2. TISAX® assessment: the client goes through the assessment(s), conducted by a TISAX® assessment provider, i.e. BSI.
3. TISAX® label: upon successful completion of the assessment, ENX provides the TISAX® label, enabling the assessed organization to share this with all TISAX® participants, or selected business partners.

There are 3 TISAX® assessment levels, as described below. You will select the appropriate level at the registration stage.

• AL 1: Self-assessment by the auditee. Assessment of existing self-declaration of the auditee
• AL 2: Plausibility check of self-assessment restricted to evaluation of evidences and an expert interview
• AL 3: Full assessment including evaluation of evidence, on-site inspection and expert interviews