Skip to content
de

TISAX® - The safety standard of the automotive industry

What is TISAX®?

TISAX® (Trusted Information Security Assessment Exchange) is the standard for information security developed by the automotive industry. It regulates the secure processing of information between car manufacturers, service providers and suppliers.

What is TISAX®?

TISAX® (Trusted Information Security Assessment Exchange) is the standard for information security developed by the automotive industry. It regulates the secure processing of information between car manufacturers, service providers and suppliers.

Why TISAX® is important

In recent years, TISAX® has become increasingly important and is now indispensable for offering services in the automotive sector.

Our certification

SPIRIT/21 is proud that all relevant locations are TISAX® Level 2 certified. At the beginning of 2022 we started the audit cycle and since the successful final audit on 03.03.2022 we are officially allowed to use the TISAX® label for three years. The audit results can be viewed on the TISAX platform for interested partners and customers.

Requirements for TISAX® certification

  • Information Security Management System (ISMS)**: A system that is specifically tailored to the TISAX® criteria. Learn more
  • Data protection and prototype protection: Compliance with data protection (AL2) and prototype protection (AL3) requirements.
  • Risk management**: Regular checks for early detection and treatment of risks to information security.
  • Process documentation**: Documentation of all security-relevant processes.
  • Incident Response Plan: Ability to respond quickly and appropriately to security incidents.
  • Training and awareness programs: Knowledge and awareness of information security and data protection must be in place.

TISAX® certification process

Self-assessment: Evaluation of own information security organization and processes based on the VDA-ISA questionnaire.
External audit: An external auditor reviews the self-assessment, checks documents and evidence and conducts interviews.