What TISAX - Trusted Information Security Assessment Exchange for the Automotive Industry (ENX Association / VDA ISA) requires
TISAX, the Trusted Information Security Assessment Exchange, is the automotive industry mechanism for assessing and exchanging information security assessment results, governed by the ENX Association. The assessment basis is the Information Security Assessment (ISA) catalogue developed by the German Association of the Automotive Industry (Verband der Automobilindustrie, VDA) working group to tailor existing information security standards to automotive-specific needs. Participation follows three stages: registration (gathering company information and defining the assessment scope), assessment (conducted by approved TISAX audit providers), and exchange (sharing results with partners inside the TISAX community; results are used only within this closed community of trust and not published to the general public). Assessments are performed at defined assessment levels: AL 1 is a self-assessment only and is not used for TISAX labels; AL 2 involves plausibility checks with evidence review and interviews, typically via web conference; AL 3 is a comprehensive verification including on-site activities, document examination and interviews. Successful assessment against the selected assessment objectives leads to TISAX labels covering information security (including information with high and very high protection needs, and confidential and strictly confidential information), availability (high and very high), prototype protection (including proto parts, proto vehicles, test vehicles and events), and data protection objectives aligned to Article 28 GDPR processor requirements. TISAX assessment results are valid for three years. Automotive OEMs and tier suppliers require valid TISAX labels from suppliers and service providers handling protected information, making TISAX a de facto market-access requirement in the automotive supply chain.
Pillar: Automotive & Mobility · Authority: ENX Association (operator and governance body of TISAX), on the basis of the VDA Information Security Assessment (ISA) catalogue developed by the German Association of the Automotive Industry (VDA); TISAX Participant Handbook published by ENX Association · Version: 1.0.0 · Last updated:
Primary source: https://portal.enx.com/handbook/tisax-participant-handbook.html
SHA-256 integrity: c777a7a9a8d644d31c5a5f3d5bbf5571e429027a60cea16de93441314fabd116
Primary Citations — 6 traced to source
- TISAX Participant Handbook, ENX Association, at https://portal.enx.com/handbook/tisax-participant-handbook.html - the governing description of the TISAX process stages (registration, assessment, exchange), assessment levels and assessment objectives; TISAX assessment results are used only within the TISAX community and are valid for three years
- TISAX Participant Handbook, assessment levels: AL 1 self-assessment only (not used for TISAX labels); AL 2 plausibility checks with evidence review and interviews, typically via web conference; AL 3 comprehensive verification including on-site activities, document examination and interviews
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/enx-tisax-automotive-information-security-assessment.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/enx-tisax-automotive-information-security-assessment.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/enx-tisax-automotive-information-security-assessment
- Back to registry: Browse all 10,090 compliance nodes