TISAX®

2. Information Gathering and Self-Assessment (Phase One)

We will provide an audit plan and information request list for the initial assessment.  You will electronically submit your responses to the Self-Assessment (VDA ISA) according to the maturity model and we’ll then perform a remote review of your Self-Assessment.

3. Plausibility/Verification Check (Phase Two)

You will electronically submit any revisions to the self-assessment and the supporting documentation requests based on the information request list, which we will then review in detail.

We will meet with ISMS and control owners for either the plausibility check (AL2/remote) or the comprehensive verification check (AL3/onsite)—depending on which assessment you’re undergoing. 

4. Final Reporting

Our review of your materials will yield a result of either “conform” or “non-conform” within a detailed assessment report that includes identified areas of non-compliance, observations, and opportunities for improvement.

If you receive a result of “conform”, you will be issued TISAX® Label(s) according to your assessment objectives issued via the TISAX® Platform.

If your assessment result is instead “non-conform,” you’ll need to take further steps involving corrective action plans and/or a follow-up assessment to validate remediation efforts for areas of non-compliance, before a TISAX® Label(s) can be issued.