Attestation, assessment and label schemes
TISAX:ISA 6
The automotive sector's shared information security assessment. Results are exchanged between OEMs and suppliers through the ENX portal rather than distributed as documents, which is precisely why no certificate is issued.
What you receive
Assessment result and label published on the ENX portal
Performed only by an ENX-approved audit provider. The scheme prohibits the issue of certificates: the outcome is a label published on the ENX exchange and shared with named partners.
This scheme does not produce a certificate. If a body has offered you one for TISAX, that alone tells you what their audit work is worth.
Who needs it
Suppliers to European vehicle manufacturers. Usually requested by name in the supplier contract.
Prerequisites
ENX registration and selection of assessment objectives and level (AL2 or AL3).
How this engagement is delivered
Audited by Securo Cert LLC. Certification decision rendered by the appointed partner body.
Securo Cert document not accreditedThe partner body is named in the proposal before any work begins, and printed on the resulting document alongside the delivery mode.
Frequent questions
What do we actually receive?
Assessment result and label published on the ENX portal. Performed only by an ENX-approved audit provider. The scheme prohibits the issue of certificates: the outcome is a label published on the ENX exchange and shared with named partners.
How long is it valid?
Labels are valid for three years.
What has to be in place first?
ENX registration and selection of assessment objectives and level (AL2 or AL3).