LA VOIE RAPIDE VERS VOTRE LABEL TISAX®

TISAX® signify Trusted Information Security Assessment Exchange It is a registered trademark of the ENX association. The agit d'une norme de sécurité pour l'industrie automobile – initiated à l'origine par l'Association de l'industrie automobile allerande (VDA) – qui aide à augmenter la sécurité de l'information dans le secteur. TISAX® is not a verifier and a certifier of the security of the information of the companies. After checking the data, the companies reçoivent a label TISAX® qui renforce la confiance des clients et des partenaires et peut servir d'avantage concurrentiel.

The TISAX® certification is not a legal obligation. Cependant, il exists a non-official obligation for this / rester compétitif in the sector. The OEM name is intended for a TISAX® label for all collaboration between suppliers and partners. If you are a supplier, a partner or a manufacturer in the automotive industry, you are not recommended by your fair certifier to augment your commercial opportunities.

En règle générale, plus les exigences sont complexes (Assessment Level 1 to 3 possible), plus the coûts sont élevés. To determine the concrete points, different factors are taken into account: The level is at the level of evaluation (Assessment Level) TISAX® que vous visez? Have you already put yourself in the ISMS and, if you have the device, you are still certified according to the ISO 27001 standard? Etc.

Plus the level is high, plus the exigences in matière de protection de la sécurité de l'information are important. The evaluation at level 1 has an effect on the aid of an auto-evaluation that is not verified by a prestataire de services. Elle n'est donc généralement utilisée qu'à des fins internes. The results of the evaluation are not a good value for information and are part of the label TISAX® reconnu. C'est pourquoi la plupart des fabricants exigent au moins le Level d'Evaluation 2.

Dans ce cas, the control of the auto-evaluation is effectué by an auditor autorisé. This exam is souvent réalisés by téléphone or videoconférence. A control on the place does not have any effect if you control the module « Protection of prototypes » You can also express yourself in control of the place.

Pour the level 3, an auditor effectue a complete control on the place of your auto-evaluation. This exam lasts 2 to 3 days.

Once you have passed the evaluation at level 2 or 3, you will receive a label that summarizes the results of your exam. The label means that the information is relative to your evaluation, and you can consult it on the ENX port for the OEM approvals. In return, you can also consult the labels TISAX® and the results of the other participants.

One thing you have to remember is your label, the est valid for 3 years. Ensuite, it is now renovated. The condition of the renouvellement is generally lower than the certification initial. Dans ce cas, you disposez déjà d'une expérience et de certains processus établis in the domaine de la sécurité de l'information.

La duration of evaluations There are different considerations and depending on the different factors, depending on the size of your company and the name of your company's sites. The taille of the company is supposed to be 2 to 3 days in the place suffisent for the procedure of the audit. In revenge, la preparation de l'evaluation can be used before beaucoup plus de temps. The exam or audit has the same effect as you respond to the TISAX® exigences in the catalog of questions VDA-ISA. If the case is contrary, you will not receive the audit and will not receive the certificate. You risk devoir passer a new audit, ce qui entraînera des coûts supplémentaires.

The preparation and the process of auditing can be carried out throughout the course of time up to 8 or 12 months. Le processus d'examen proprement dit You don't have to wait more than 9 months to get the inscription, faute de quoi vous ne recevrez pas de label. A preparation suffisante en amont de votre evaluation est donc determinante!

An ISMS (système de gestion de la sécurité de l'information) has been established and certified according to the ISO 27001 standard and is not in a pre-approved condition TISAX® evaluation. Pour l'audit, il suffit de prouver que vous travaillez avec une gestion de la sécurité de l'information et que les processus et procédures correspondants sont mis en œuvre dans l'entreprise. An ISO 27001 certification now exists and you have already received a good basis for the TISAX® certification.

Our solution NORM X guide your company to TISAX® evaluation De manière ciblée avec l'aide d'un responsable de la security de l'information de notre enterprise, de processus automatisés, de listes de contrôle et de guides. Nous adaptons la prestation aux besoins specifics de votre entreprise. You will be able to save up to 50% of the total amount of work in your work in such a beautiful way.