TISAX (Trusted Information Security Assessment Exchange) is the information-security standard of the global automotive industry, developed by VDA (the German Association of the Automotive Industry). Every supplier transferring sensitive information to global carmakers — VW, BMW, Mercedes, Toyota, Ford and more — must hold TISAX. CBE has been guiding Israeli automotive suppliers to certification for 30 years — with 100% audit success and over 4,000 satisfied clients.
CBE specializes in guiding and certifying organizations for the TISAX standard, tailoring the management system to the organization's needs.
Quick facts – TISAX
Goal
Protecting sensitive information in the automotive supply chain
Who needs it
Tier 1/2 suppliers to global carmakers
Importance in Israel
Required by VW, BMW, Toyota, Ford and more
Complements
ISO 27001, IATF 16949, ISO 9001
CBE – success rate
100% – hundreds of certified clients
TISAX is an assessment and information-exchange mechanism (Trusted Information Security Assessment Exchange) developed by VDA (Verband der Automobilindustrie) — the German Association of the Automotive Industry. It's based on ISO 27001 with extensions unique to the automotive industry.
TISAX defines three assessment levels (Assessment Levels): AL1 (self-assessment), AL2 (audit by an accredited external body) and AL3 (strict audit for highly confidential information). Most suppliers are required to reach AL2.
CBE doesn't just guide you to TISAX — we build a GRC framework that combines TISAX, ISO 27001 and IATF 16949, because automotive suppliers face multiple requirements simultaneously.
Development information, prototypes and technical data — protecting the most sensitive assets.
Controls based on ISO 27001 with automotive extensions.
The TISAX result is published on the ENX platform and shared directly with carmakers.
Prototypes, development data, sensitive sector information — requirements unique to the sector.
Supplying components directly to VW, BMW, Mercedes? TISAX AL2 is almost always a hard requirement.
To sector pageYour Tier 1 supplier passes the TISAX requirement to you? CBE also guides Tier 2 suppliers to fast certification.
Developing software for automotive systems (infotainment, ADAS, ECU) — sensitive development information requires TISAX.
To sector pageTransporting components or running a warehouse for the automotive industry? TISAX can be a supplier requirement.
To sector pageConsulting, QA testing and professional services that access sensitive production information.
Manufacturers that already have IATF 16949 and want to add TISAX — CBE builds an efficient integrated process.
To sector pageWithout TISAX — no access to contracts with global carmakers
Protecting development data, prototypes and trade secrets
One result on the ENX platform serves all carmakers
If you have ISO 27001 — the move to TISAX is significantly faster
Defining the organization's needs, stakeholders and the scope of the quality management system.
Process planning and control, managing customer requirements, external providers and output control.
Management commitment, quality policy and defining roles and responsibilities.
Measurement, analysis, internal audit and management review.
Risk and opportunity management, quality objectives and plans to achieve them.
Managing non-conformities, corrective actions and continuous improvement of the system.
Resources, employee competence, internal communication and documentation.
CBE performs a full Gap Analysis and builds a work plan tailored to your organization.
Automotive suppliers are usually required to hold several standards in parallel — here's the full picture
CBE accompanies you at every stage — from requirement mapping to the certification-body audit
Identifying the required AL level, mapping sensitive information and gap analysis
Security policy, ISA VDA controls, automotive-unique procedures
Applying controls, team training, ENX-platform registration
A full simulation before the Assessment Body — zero surprises
Guidance through the official audit and annual renewals
30 years, hundreds of clients, 100% success — here's what sets us apart
Committed to success! No client has ever failed a certification audit. Not certified — you don't pay!
We adapt the schedule to your deadline — tender, supplier, client.
CBE's skilled human team writes your procedures and documentation tailored to your organization.
TISAX is the foundation. CBE also guides you to ISO 27001, IATF 16949, ISO 9001 and more — under one roof.
We don't disappear after the certificate. Annual audits, standard updates, organizational changes.
From startup to corporation — experience with every organization type in every field.
TISAX is the security pillar for the automotive industry — but automotive suppliers are usually required to hold additional standards too. CBE manages your entire GRC journey under one roof.
About CBE's GRC frameworkCBE specializes in guiding and certifying organizations for the TISAX standard. The service is provided by CBE's experts, with 30 years of experience in ISO standards, over 4,000 satisfied clients and 100% success in audits.
Tell us about the carmaker requiring TISAX — we'll come back with an action plan