8 steps to the label for TISAX^®: your roadmap for implementation

ROADMAP FOR CERTIFICATION ON TISAX®

As the digital landscape evolves, the need for robust information security measures has become increasingly paramount. TISAX® (Trusted Information Security Assessment Exchange) has emerged as a pivotal platform, particularly within the automotive industry, to ensure that organisations meet stringent information security requirements. Derived from ISO 27001, TISAX® serves as a comprehensive catalogue of criteria and questions for information security, encompassing general information security, prototype protection, and data protection.

Join us on this journey to fortify your organisation's information security posture and gain invaluable insights into the world of certification on TISAX®.

8 steps to certification

From initial education and assessment to the final certification audit, each phase plays a crucial role in successfully implementing an Information Security Management System (ISMS).

Step 1: Complete gap analysis questionnaire

To build your ISMS or review an existing one, we first need to understand what information assets your business is trying to protect and what documentation (policies, processes, procedures) exist today which can be repurposed and adapted to form part of your ISMS. We run this discovery process through our platform, where you can answer the comprehensive questionnaires which cover all chapters of the Information Security Management System (ISMS). Simply answer them at your own pace.

Deliverables: A report outlining your biggest process gaps & risks

Step 2: Project plan

Off the back of the gap analysis, you and your expert will create a set of tasks to work on in the coming days and weeks. Our platform also generates a set of recommendations based on the gaps in your information security, which will be automatically available as tasks for you. You prioritise the tasks and assign them to relevant owners. Your DataGuard expert is there to provide you with more clarity to recommendations and will also work on a joint action plan.

Deliverables: Clear next steps to prepare for TISAX®, plus a joint action plan

Step 3: Asset management

Our platform enables you to track and classify all information assets according to the level of protection needed and assess associated risk for each asset. Your assets can be imported from a CSV file and easily maintained by adding and deleting assets. If you can provide evidence of this centralised and standardised documentation for all of your company's databases, nothing stands in the way of your certification on TISAX®.

Deliverables: A living record of all company assets established

Step 4: Risk management

Using inputs from the gap analysis and asset inventory, our risk management feature will create a risk map which gives your team a complete overview of your risks and vulnerabilities. Our experts help you interpret these risks and define the appropriate response your business should take (e.g., not having a business continuity and disaster recovery plan in place).

Deliverables: A visual overview of your biggest risks and vulnerabilities so that your team can prioritise what to tackle next.