TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep. Designed for medium-sized suppliers that need TISAX label for OEM business but do not have a dedicated compliance team.
TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep.
Een transparant samenwerkingsmodel met heldere mijlpalen.
Confirm which TISAX assessment level is contractually required, which information classes (confidential / strictly confidential / protection of prototypes / data protection) are in scope.
Map current controls against VDA ISA. Build out missing policies, procedures and evidence over 4–9 months.
Rehearse audit interviews, organise evidence, coordinate with ENX-accredited auditor for the formal assessment.
Praktische, eerlijke verwachtingen — geen overdreven beloftes.
TISAX label achievable within reasonable timeline.
Information security management system that survives staff change.
Team has practiced; evidence is organised.
Documentation also supports ISO 27001 or BSI Grundschutz adjacent work.
Specialistische pagina’s versterken het ecosysteem en leiden bezoekers naar de juiste dienst.
Beknopte antwoorden voor bezoekers die Graham Miranda-diensten vergelijken.
No — TISAX audits must be conducted by ENX-accredited audit providers. We prepare you for the audit; we do not perform the formal assessment.
OEMs and tier-1 customers usually specify the required level in the contract or RFQ. AL2 is most common; AL3 for highly sensitive information including prototype protection.
AL2 readiness: typically 4–6 months from baseline. AL3 with prototype protection: 6–9 months. Compresses where ISO 27001 maturity is already present.
Yes — physical and information security requirements for prototype protection are covered, with the caveat that final physical-security work (vaults, controlled rooms) is implemented by physical-security specialists.
Yes — the data protection objective is covered, combining with GDPR readiness work where useful.
Yes — annual maintenance, retests and 3-year recertification cycles are supported via retainer arrangements.
TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep.
