TISAX training

The following training offer is based on the most recent Information Security Assessment issued by VDA in version 6.0.3

Training agenda:

1) Introduction to the information security domain under the TISAX standard requirements

2) Terms and definitions used in the TISAX standard:

3) TISAX standard implementation framework – workflow overview

4) Detailed TISAX standard requirements overview:

• Module A: Information Security Management System
  • Information Security Policy
  • Organization of Information Security
  • Asset Management
  • Information Security Risk Management
  • Information Security Assessments
  • Information Security Incident Management
  • Information Security requirements in HR
  • Physical Security
  • Elements of Business Continuity Management
  • Elements of Identity and Access Management
  • IT Security – basics of the Cryptography
  • Operations Security
  • System acquisitions, requirement management and development
  • Supplier Relationships
  • Compliance in information security

• Module B: Prototype Protection
  • Physical and environmental security
  • Organizational requirements
  • Handling of vehicles, components and parts
  • Requirements for trial vehicles
  • Requirements for events and shootings

• Module C: Data Privacy Protection
  • Organization of Data Protection
  • Compliance with the GDPR legislation (basis)
  • Privacy Policy
  • Data Privacy trainings
  • Data Protection Impact Assessment (DPIA)

5) Documentation required during the external TISAX assessment (external audit)

6) Techniques and document types (audit evidence) confirming compliance with the TISAX standard requirements

7) Maturity levels in TISAX standard – overview

8) KPIs in the Information Security Management System – possible measurements and analysis based on the ISA VDA assessment

BONUS material for participants:

Each participant will obtain matrix with a proposal of the assigned departments that should be involved for each TISAX question – Excel form template