ISO 27001 vs. TISAX
Cybersecurity standards compared
TL;DR
ISO 27001:2022 has 93 controls (Annex A) and is industry-neutral. TISAX (Trusted Information Security Assessment Exchange) supplements ISO 27001 with automotive-specific requirements + a central platform.
What is ISO 27001 vs. TISAX?
When is TISAX needed?
- Automotive suppliers (OEM requirement)
- Mechanical engineering companies with automotive customers
- IT service providers for the automotive sector
Costs: ISO 27001 EUR 15-50k. TISAX EUR 8-25k (own costs + platform fee).
Practical example
An automotive supplier with BMW + VW as customers: TISAX is mandatory (OEM requirement). ISO 27001 is recommended as preparation.
Frequently asked questions
Which one first?
ISO 27001 as the basis, then the TISAX extension.
Recognition under NIS2?
Both are equivalent.
See also
Practitioner note: This article is practice-oriented compliance documentation, not legal advice. We are compliance specialists, not a law firm. For legally binding advice, consult an admitted lawyer.