Descrizione
The “TISAX Standard in the automotive sector” course provides a comprehensive and in-depth overview of the TISAX (Trusted Information Security Assessment eXchange) standard, the European reference mechanism for assessing information security maturity.
Information security is crucial for all organizations, especially those operating in the automotive sector, which is characterized by a complex network of suppliers and partners.
The program begins with an introductory overview of the VDA ISA (Verband der Automobilindustrie Information Security Assessment), the catalog of requirements that forms the basis of the TISAX standard. The course presents the context in which the VDA developed this model, aimed at ensuring a common level of information protection and shared recognition of audits among the various industry players.
The course illustrates the TISAX registration process, selecting an audit provider, clarifying the key steps for enrolling in the ENX Association, defining the assessment scope, signing the contract, and planning the audit. It analyzes the three Assessment Levels (AL1, AL2, AL3), their differences, the documentation requirements, and how to conduct interviews and on-site inspections.
The course also explores the assessment criteria and maturity levels established by the VDA ISA, explaining how to move from an “incomplete” process (level 0) to an “optimized” process (level 5). It then proceeds to interpret the self-assessment results and define audit objectives based on the data managed by the organization.
Part of the course focuses on the findings that may emerge from the audit—observations, room for improvement, minor and major nonconformities—and the corrective actions required to obtain the TISAX Label. The course explains how to manage the follow-up phases and the three-year validity of the assessment results, ensuring continued compliance.
Finally, the core of the VDA ISA catalog is explored: Information Security. The focus is on corporate policies, asset management, IT risk management, identity and access, physical security, business continuity, and supplier relationships.
