Skip to content

TiSAX

Managing information security in automotive sector

With our extensive experience and strong market presence in information security and privacy management, TECHNOCRAT CONSULTANTS is now offering expert consulting services for TISAX certification to our valued customers in the automotive sector.

What is TISAX?

Information security plays a critical role in the automotive industry. Suppliers and service providers in this sector must regularly demonstrate their compliance with information security standards and regulations to their customers. Previously, this was done through the Information Security Assessment (ISA) developed by the Verband der Automobilindustrie (VDA), the German Association of the Automotive Industry. However, suppliers and service providers were required to undergo multiple audits for each client. To streamline this process, VDA introduced Trusted Information Security Assessment Exchange (TISAX). TISAX is a standardized assessment and exchange mechanism in the automotive industry that promotes quality assurance and eliminates redundant audits.

To help organizations meet TISAX requirements and better understand the assessment process, TECHNOCRAT CONSULTANTS provides TISAX consulting services and foundational training courses.

TISAX Assessment Levels:

  • Level 1 (Self-Assessment): The auditee performs a self-assessment, typically used for simplified group assessments in specific cases.
  • Level 2 (Document Review): This level involves assessing the plausibility of the self-assessment based on documents and evidence provided. It is usually conducted remotely.
  • Level 3 (Full On-Site Assessment): This comprehensive assessment includes all methods used in management system audits, such as ISO 27001, and requires an on-site evaluation.

Our Advantage

With over 10 years of experience in information security, we have served a diverse client base, offering a full range of certification and assessment services.

Our consulting team is highly skilled, with top-tier qualifications and extensive technical expertise.

We have a global presence and a dedicated, loyal client base.

Applicability

This standard is relevant to all businesses in today’s world. Contrary to common belief, it is not limited to the automotive industry and its supply chain. It applies to all industrial and service sectors. Given the vast amount of data these sectors handle, obtaining a TISAX certification is essential.

Consulting Methodology

Concept Building Training

Providing training to the client team to enhance their conceptual understanding of requirements and highlight the key drivers necessitating implementation.

Gap Analysis Report for IT Infrastructure & Configuration

Our team of domain experts will evaluate the current IT infrastructure, focusing on networking and data security controls to ensure effective management of information security, privacy, and business continuity. A comprehensive report detailing identified gaps and recommending potential solutions will be provided.

Design and Implementation of a Documented Management System

Creation of a tailored management system encompassing policies, system manuals, procedural guidelines, risk assessment frameworks, security control SOPs, and customizable templates.

Risk and Privacy Assessment Support

Providing expert guidance and assistance to clients in completing risk assessments, implementing necessary controls, and presenting the residual risk inventory to top management.

Implementation Training

Conducting one-on-one sessions with the key implementation team to provide comprehensive training on the documented management system and its implementation strategies.

Implementation Handholding

Providing ongoing consulting support to address routine queries and ensure the successful implementation of the requirements.

Internal Auditor Training

In-depth training on clause requirements and audit techniques, including case studies and assessments.

Conducting the Internal Audit

Our consulting team, along with the trained internal auditors from the client's team, conducts a comprehensive internal audit to assess all requirements and generates the audit report.

Closure of Audit Findings

We provide guidance and support to help the client address and resolve internal audit findings, ensuring readiness for the certification assessment.

Certification Audit Process

International certification and regulatory bodies will conduct the final assessment and issue an audit report upon successful evaluation.

Certificate Issuance by Certification Body

Once all audit findings are successfully closed, the client will receive the certification from the certification body.

Ongoing Consulting Support for Surveillance & Recertification Audits

As part of our commitment to long-term client partnerships, we provide continued consulting support for all future certification needs, assisting in the ongoing growth and success of our valued clients.