Information security is now recognized as an important business process that, if not managed correctly and efficiently, may impact an organization’s ability to deliver its products and services to its customers. Just as important, a lack of security has the potential to impact revenues. The highly specialized skills and practical knowledge needed to assess an organization’s capability to manage all aspects of information security is one that can be learned.

This innovative, two-day course provides a comprehensive examination of VDA ISA requirements based on TISAX as well as a solid foundation in all aspects of the audit process. Stage by stage, delegates are taken through a structured programme that includes a balance of theory and practice. It uses a combination of collaborative learning and practical activities, enabling delegates to gain an understanding of the key activities for auditing.

Course Aim

You will learn the basic requirements of an automotive ISMS in the context of the VDA ISA requirement to establish and promote the necessary understanding of the VDA ISA requirements within the organization. Furthermore, this course will provide guidance and practical experience in planning, executing and reporting TISAX Information Security Management System Audits.

How will I benefit?

This course will help you:

• Identify the key requirements for an ISMS according to TISAX
• Gain insight into the specific requirements of the VDA ISA catalogue
• Understand asset and risk management in the context of an ISMS as a prerequisite for successful implementation of the requirements
• Recognize the testing process and ENX label process and the benefits to all parties
• Attract and retain customers by meeting their current and future needs better

What will I learn?

By the end of the course, you will be able to:

• Understand the advantage and value of a label and the differences of labels
• Identify terminology and definitions
• Comprehend the structure of VDA ISA catalogue and the maturity levels
• Understand the benefits of an ISMS for your customer and your organization
• Map the path to achieve the TISAX label.
• Comprehend the rationale for TISAX registration
• Explain pre-audit activities in the TISAX process
• Demonstrate how to use maturity and assessment levels
• Explain the requirements for ENX registration
• Identify the differences between TISAX requirements and ISO 27001
• Conduct TISAX audit activities
• Identify post-audit activities

You will have the skills to:

• Initiate the audit
• Prepare the audit activities
• Conduct audit activities
• Audit follow-up
• Audit an ISMS to establish conformity (or otherwise) with VDA ISA V5.1

Who should attend?

The course is especially suitable for:

• Anyone who is or will be coordinating internal audit activities within your organization
• Those who have responsibility to audit an Information Security Management System
• Existing auditors who wish to refresh their skills

Course Duration

2 days

Prerequisites

There are no formal prerequisites, however it will be useful for delegates to read the standard (VDA ISA) before attending the course.

Related Training

The course "Implementation VDA ISA based on TISAX" can be interesting as a meaningful continuation and deep dive is focused here.

Course Materials

Soft Copy: You will receive an email prior to the course with instructions on how to access the online Student Handbook, which can be viewed, downloaded or printed.

Course Logistics

If your class is Live Online:

Students need to connect to the class from any internet accessible location.

Webcam and Microphone are REQUIRED.

ALL course times shown are US EASTERN TIME.

If your class is In-person :

You are encouraged to bring a laptop with you to class.

*Session lengths could vary depending on amount of class discussion.

BSI provides independent TISAX training. There is no official relationship between BSI Training Academy and ENX.