EU · Automotive
TISAX
The automotive industry's information security assessment, based on the VDA ISA catalogue.
Who it applies to
Suppliers and service providers that handle sensitive data for automotive manufacturers.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Catalogue
- VDA Information Security Assessment (ISA)
- Assessment levels
- AL1 to AL3
- Label validity
- Three years
What TISAX asks of you
- 01Information security
- 02Prototype protection
- 03Data protection
- 04Supplier and access management
- 05Physical security
- 06Incident management
How orta covers TISAX
35 TISAX requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Policies drafted from a conversation
orta interviews your team by voice or text, asks only what TISAX needs, and drafts the policy set from the answers.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
