Meeting information security expectations in the automotive industry

What it is

VDA ISA is the information security assessment framework behind TISAX ↗️ (Trusted Information Security Assessment Exchange) in the automotive sector. It is heavily based on ISO 27001 but uniquely tailored to the high-stakes demands of manufacturers, suppliers, and service providers within the global automotive ecosystem.

When to use it

Use this add-on when your organization works with automotive customers or needs to fulfill mandatory TISAX-related compliance requirements. If you want to secure contracts with major automotive brands, particularly in Germany and Western Europe, TISAX is not optional. It is the absolute benchmark for information security in the supply chain.

What it adds

It connects automotive information security requirements directly to your ISO 27001 ISMS, allowing you to manage specialized sector risks, such as prototype protection and high-level third-party data handling, without building a separate management system. This add-on provides a much more extensive mapping than the standard VDA ISA catalog by delivering:

• 7 specialized mapping tables for core information security controls.
• 1 dedicated mapping table specifically engineered for strict Prototype Protection requirements.
• 1 dedicated mapping table for sector-specific Data Protection criteria.
• Full digital integration featuring active hyperlinks within each mapping table that connect directly to the corresponding policy and control pages in your Instant 27001 environment.

Relevant for

• Suppliers to automotive companies
• Software companies serving automotive customers
• Organizations handling confidential automotive information
• Companies preparing for TISAX-related assessments

Pricing

All prices are excluding applicable taxes and subscription fees for Confluence, Microsoft 365 or ISOPlanner.