Graham Miranda logo
Graham MirandaNetwork
TISAX · Graham Miranda Network

TISAX readiness for automotive supply chain

TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep. Designed for medium-sized suppliers that need TISAX label for OEM business but do not have a dedicated compliance team.

TISAX readiness · VDA ISA · automotive supplier security · TISAX audit prep
TISAX readiness for automotive supply chain Graham Miranda service overview
Обзор

Что охватывает эта страница

TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep.

  • Scoping: VDA ISA assessment level (AL1/AL2/AL3) and information security goals
  • Gap assessment against VDA ISA controls
  • Documentation lift: ISMS framework, policies, procedures
  • Evidence collection for control implementation
  • Audit-prep workshops with rehearsal of likely auditor questions
Как мы работаем

Как мы работаем

Прозрачная модель сотрудничества с чёткими этапами.

01

Scoping

Confirm which TISAX assessment level is contractually required, which information classes (confidential / strictly confidential / protection of prototypes / data protection) are in scope.

02

Map & lift

Map current controls against VDA ISA. Build out missing policies, procedures and evidence over 4–9 months.

03

Audit prep

Rehearse audit interviews, organise evidence, coordinate with ENX-accredited auditor for the formal assessment.

Ожидаемые результаты

Ожидаемые результаты

Практичные, честные ожидания — без преувеличений.

OEM-ready

TISAX label achievable within reasonable timeline.

Documented ISMS

Information security management system that survives staff change.

Audit confidence

Team has practiced; evidence is organised.

Reusable

Documentation also supports ISO 27001 or BSI Grundschutz adjacent work.

Network depth

Связанные страницы сети

Специализированные страницы укрепляют экосистему и направляют к нужной услуге.

FAQ

Частые вопросы

Краткие ответы для посетителей, сравнивающих услуги Graham Miranda.

Are you ENX-accredited auditors?

No — TISAX audits must be conducted by ENX-accredited audit providers. We prepare you for the audit; we do not perform the formal assessment.

Which TISAX level is right for us?

OEMs and tier-1 customers usually specify the required level in the contract or RFQ. AL2 is most common; AL3 for highly sensitive information including prototype protection.

How long does preparation take?

AL2 readiness: typically 4–6 months from baseline. AL3 with prototype protection: 6–9 months. Compresses where ISO 27001 maturity is already present.

Do you cover prototype protection?

Yes — physical and information security requirements for prototype protection are covered, with the caveat that final physical-security work (vaults, controlled rooms) is implemented by physical-security specialists.

What about data protection (VDA ISA chapter)?

Yes — the data protection objective is covered, combining with GDPR readiness work where useful.

Can we keep TISAX after the initial label?

Yes — annual maintenance, retests and 3-year recertification cycles are supported via retainer arrangements.

Следующий шаг

TISAX readiness for automotive supply chain

TISAX preparation for German automotive suppliers and tier-N partners — VDA ISA mapping, documentation lift, evidence collection and audit prep.