TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep. Designed for medium-sized suppliers that need TISAX label for OEM business but do not have a dedicated compliance team.
TISAX-Vorbereitung für deutsche Automotive-Zulieferer und Tier-N-Partner — VDA-ISA-Mapping, Dokumentations-Lift, Nachweis-Sammlung und Audit-Vorbereitung.
Ein transparentes Engagement-Modell mit klaren Meilensteinen.
Confirm which TISAX assessment level is contractually required, which information classes (confidential / strictly confidential / protection of prototypes / data protection) are in scope.
Map current controls against VDA ISA. Build out missing policies, procedures and evidence over 4–9 months.
Rehearse audit interviews, organise evidence, coordinate with ENX-accredited auditor for the formal assessment.
Praktische, ehrliche Erwartungen — keine übertriebenen Versprechen.
TISAX label achievable within reasonable timeline.
Information security management system that survives staff change.
Team has practiced; evidence is organised.
Documentation also supports ISO 27001 or BSI Grundschutz adjacent work.
Spezialseiten stärken das Graham-Miranda-Ökosystem und führen Besucher zum passenden Service.
Kurze Antworten für Besucher, die Graham-Miranda-Servicebereiche vergleichen.
No — TISAX audits must be conducted by ENX-accredited audit providers. We prepare you for the audit; we do not perform the formal assessment.
OEMs and tier-1 customers usually specify the required level in the contract or RFQ. AL2 is most common; AL3 for highly sensitive information including prototype protection.
AL2 readiness: typically 4–6 months from baseline. AL3 with prototype protection: 6–9 months. Compresses where ISO 27001 maturity is already present.
Yes — physical and information security requirements for prototype protection are covered, with the caveat that final physical-security work (vaults, controlled rooms) is implemented by physical-security specialists.
Yes — the data protection objective is covered, combining with GDPR readiness work where useful.
Yes — annual maintenance, retests and 3-year recertification cycles are supported via retainer arrangements.
TISAX-Vorbereitung für deutsche Automotive-Zulieferer und Tier-N-Partner — VDA-ISA-Mapping, Dokumentations-Lift, Nachweis-Sammlung und Audit-Vorbereitung.
