What Does TISAX® Mean?
TISAX® stands for Trusted Information Security Assessment Exchange. The framework was developed for the automotive industry to assess information security against a standardised criteria catalogue and to exchange assessment results with authorised business partners in a controlled way.
It is based on the Information Security Assessment Catalogue, known as ISA. The catalogue is maintained by the ENX Association and published by the German Association of the Automotive Industry, VDA. TISAX® therefore provides a shared framework that can reduce individual supplier audits and inconsistent requirements across the automotive supply chain.
TISAX® can be relevant for automotive suppliers, engineering service providers and other partners when they handle, for example, development data, prototypes, technical documentation, production information or customer data.
TISAX® is not a public certificate that confirms an organisation is broadly “TISAX® certified”. It is an assessment and exchange procedure for information security.
The procedure includes registration, the selection of an approved audit provider, the assessment itself and the controlled sharing of results with authorised partners through the ENX portal.
For this reason, btv technologies uses the following wording:
btv technologies has completed the TISAX® standardization process and has been listed on the ENX portal.
What Does ENX Portal Listing Mean for Customers?
The ENX portal is the platform used for the controlled exchange of TISAX® assessment results. Results are not publicly available. They may be shared with selected and authorised business partners within the intended TISAX® framework.
For customers, this means that where information-security evidence is required for a specific supply arrangement or customer requirement, access to relevant assessment information can be clarified through the appropriate process.
btv technologies’ information-security measures were assessed within the TISAX® process by TÜV SÜD, an approved TISAX® audit provider. The corresponding assessment result is available to authorised business partners through the ENX portal.
Why Is TISAX® Relevant for Automotive Suppliers?
Sensitive information is often handled across the automotive supply chain. This may include technical specifications, development data, series and service information, production data or documentation relating to connected components.
TISAX® helps organisations and their business partners assess information security on a standardised basis. It does not replace individual customer requirements, contractual agreements or an organisation’s responsibility for its own processes.
For btv technologies, this is particularly relevant when inventory, processing steps, programming or documented handovers are organised within customer-specific supply structures.
TISAX®, Product Cybersecurity and btv SEEL®
TISAX® concerns information security at organisational level. Product cybersecurity, by contrast, concerns requirements relating to specific products, software, firmware, updates and digital identities.
For programmable components, btv SEEL® can support technical evidence within the process chain through traceable firmware transfers, the allocation of relevant process data to the component and controlled programming processes.
This does not constitute a blanket conformity statement for an end product. Conformity assessment and overall regulatory responsibility remain with the respective manufacturer.
What btv technologies Can Demonstrate
btv technologies can demonstrate its TISAX® status to authorised business partners within the intended framework. In addition, btv technologies is certified to ISO 9001 and IATF 16949.
The evidence required in an individual case depends on the customer requirement, the information being processed, the product and the contractual arrangements.
Clarify TISAX® Status and Requirements
Would you like to clarify which evidence, process information or programming requirements are relevant to your automotive supply chain, your components and your specific customer requirements? Together, we assess your supply structure, the components involved and the requirements for information security and technical evidence.
FAQ – Direct Answers
TISAX® concerns information security at organisational level and the controlled exchange of assessment results within the automotive supply chain. The Cyber Resilience Act concerns cybersecurity requirements for products with digital elements. Both can be relevant for connected products, but they concern different areas and responsibilities.
