Lesson 1, Topic 1
In Progress

Define inspection target

Usually the complete TISAX process starts when a partner asks you to present a TISAX certification. This partner should specify the test target that he expects from you. If this is not the case, or if you are striving for TISAX certification on your own initiative, you should definitely talk to your partner and consider the test goal.

Tip: As you share your result in the ENX Association portal after you have passed the exam, it might be better if you tend to have successfully implemented a higher exam target, as this way you will address more potential customers.

There are only eight possible check targets in the current version, namely the following:

Information SecurityPrototype protectionData protection
Basic examinationAdvanced ControlsAdvanced Controls
Information highProto PartsData
Info very highProto VehiclesData high
Test vehicles
Events & Shootings

The smallest test target and therefore the weakest label (certificate) you can get is “Info High”.

In the following, the eight different test objectives are explained in more detail so that this can help by choosing one of them:

  • Information high
    • Required when processing confidential information from your OEM or partner
  • Info very high
    • Required when processing confidential and proprietary or top secret information of your OEM or partner
  • Proto Parts
    • Is required if you manufacture, store or have received for use individual parts or components of a vulnerable vehicle from your OEM or partner.
  • Proto Vehicles
    • Is required if you manufacture, store or have received for use a vulnerable integral vehicle from your OEM or partner.
  • Test vehicles
    • Is required if you have received a vulnerable vehicle from your OEM or partner for test drives and tests.
  • Events & Shootings
    • Is needed if you have received vulnerable components, parts or vehicles from your OEM or partner for exhibitions, events, film or photo shootings.
  • Data
    • Required when processing personal data of your OEM or partner.
  • Data high
    • Required when processing personal data and “special data” (such as religious affiliation or health data) of your OEM or partner.

You must then implement the appropriate measures (controls) for the selected inspection target.

Note: In the VDA ISA catalogue, please note that you can expand further columns. There you will see, for example, in the M and N column the differences between the test target “Info High” and “Info very High”.

VDA ISA Catalogue

It is the case with the higher test targets that the smaller test targets are included. This is shown again graphically in the following diagram.