What It Is

TISAX (Trusted Information Security Assessment Exchange) is an industry framework developed by the ENX Association and VDA for standardizing information security assessments in the automotive supply chain. It verifies protection of sensitive data like prototypes and IP using VDA ISA catalog (version 5.0.4+), building on ISO 27001 with risk-based maturity levels.

Key Components

• **7 control groupsPolicy, Organization, Personnel, Physical Security, Access, Cryptography, Operations.
• **Assessment levelsAL1 (self), AL2 (remote), AL3 (onsite).
• **ModulesInformation Security, Prototype Protection, Data Protection.
• 3-year labels shared via ENX portal.

Why Organizations Use It

OEMs mandate TISAX contractually for suppliers, preventing revenue loss and enabling market access. It reduces duplicate audits (70-90% efficiency), mitigates breaches (€4.5M avg cost), builds trust, and drives ROI through resilience and IP protection in €2.5T chain.

Implementation Overview

Phased: Preparation (gap analysis), Remediation (controls, table-tops), Audit (provider like DQS/TÜV), Sustainment. Applies to OEMs, Tier 1/2 suppliers, services globally; scalable for SMEs to enterprises. Costs €15K-€150K+, 6-18 months.

What It Is

AS9120B is the IAQG quality management system standard for aviation, space, and defense distributors. It augments ISO 9001:2015's high-level structure with over 100 aerospace-specific requirements. Primary purpose: ensure traceability, prevent counterfeit parts, and maintain product conformity in distribution without altering characteristics. Adopts risk-based thinking and PDCA approach.

Key Components

• Core clauses 4-10 covering context, leadership, planning, support, operation, evaluation, improvement.
• Distributor emphases: counterfeit prevention, traceability for split lots, external provider controls, configuration management, preservation.
• Built on ISO 9001:2015; certification via accredited bodies, OASIS listing.

Why Organizations Use It

• Commercial prerequisite for OEM/Tier-1 supply chains.
• Mitigates risks like traceability loss, documentation errors.
• Builds customer trust, enables market access (2,442 global certifications).
• Drives efficiency, reduces nonconformities.

Implementation Overview

• Phased: gap analysis, process design, training, audits (6-12 months).
• Applies to stockists, pass-through distributors globally.
• Requires internal audits, management review, Stage 1/2 certification audits.