TISAX including ISA version 6.0 for the Automotive Industry

The latest version of the TISAX (Trusted Information Security Assessment Exchange) framework, based on the VDA Information Security Assessment (ISA) Catalog, includes a comprehensive set of controls aimed at ensuring information security, prototype protection, and data protection within the automotive industry. Here's a general overview of the control areas, though specific control details can change with updates:

1. Information Security (IS)

• Security Policies and Organization
• Human Resources Security
• Physical and Environmental Security
• Identity and Access Management
• IT Security / Cyber Security
• Operations Security
• Supplier Relationships
• Compliance

2. Prototype Protection

• Physical and Environmental Security
• Access Control
• Information Handling

3. Data Protection

• Data Privacy and Protection
• Security Policies for Personal Data
• Rights of Data Subjects
• Data Security Measures

General Control Requirements:

• Risk Assessment and Management:
• Incident Management:
• Business Continuity and Disaster Recovery:
• Security Awareness and Training:

Notable Changes or Additions in Recent Updates:

• Focus on Availability: Controls related to ensuring availability would be integrated across various existing controls, particularly in operations security and physical security.
• Enhanced Controls for Software Management: This would be addressed under IT Security controls like ISA 7.2 for managing software updates.
• Cybersecurity Maturity: The assessment of maturity levels would involve a holistic view of all controls, not necessarily new controls but how existing controls are implemented.

Please note, these numbers are indicative and based on the structure of past versions of the VDA ISA. The exact control numbering and content might shift with each revision of the standard. For the latest and precise control numbers and requirements, always refer to the current VDA ISA Catalog.

Get you TISAX handbook here : https://www.enx.com/handbook/TISAX%20Participant%20Handbook.pdf

#TISAX #automotive #SA #EU #cybersecurity #VDA #ISA