TISAX · VDA ISA · AUTOMOTIVE SUPPLY-CHAIN SECURITY

TISAX assessment readiness and label-renewal support

Scope definition, VDA ISA gap analysis, remediation guidance, mock assessment and formal-assessment readiness for first-time, renewal, multi-site and high-protection scenarios.

01Scope before activity
02Management, technical and physical
03Evidence of operation
04Independent decisions

WHEN TO START

These situations usually call for early preparation

01

Customer admission requirement

A customer or group asks for a new, renewed or shared TISAX assessment result.

02

First-time participation

Objectives, scope, sites and internal ownership have not yet been defined.

03

Labels approaching expiry

Changes and scope need review before coordinating the next external assessment.

04

Evidence gaps

Policies exist, but technical controls, site operation or evidence remain incomplete.

05

Multiple sites

Headquarters, plants and development centres need a common plan with local differences.

DELIVERY JOURNEY

A six-step path from requirement to readiness

  1. 01

    Clarify need and scope

    Align requirements, objectives, sites and timing.

  2. 02

    Review and investigate

    Establish a baseline through documents, interviews and sampling.

  3. 03

    Analyse VDA ISA gaps

    Prioritise control and evidence gaps by risk.

  4. 04

    Remediate and build

    Improve roles, policies, technology, physical sites and records.

  5. 05

    Run a mock assessment

    Test key roles, evidence and site operation.

  6. 06

    Close and prepare

    Track issues and prepare the organisation for assessment.

WHY MIRACLE SAIL

Automotive context with a strong focus on controls that operate

Miracle Sail provides consulting, gap analysis, remediation, mock assessment and readiness support. Formal assessment, label and exchange decisions remain with ENX, the audit provider and other responsible parties.

01

Business context

Understand OEM admission, R&D, manufacturing and supply-chain needs.

02

Control alignment

Connect governance, technology, physical environments and people.

03

Traceable evidence

Link policy, responsibility, operation and records.

04

Phased delivery

Prioritise around maturity, sites and timing without blanket promises.

ANONYMISED SCENARIOS

Representative automotive project scenarios

Reusable delivery patterns without unauthorised client names or conclusions.

CASE 01East China · Automotive electronics · Renewal scenario

Renewal under high-protection needs

Situation
Existing controls need review against organisational change, access control, physical zones and operating evidence.
Work
Review the prior scope, run a VDA ISA gap analysis, prioritise remediation and perform a mock assessment.
Outcome
A traceable remediation plan, evidence register and assessment-readiness path.
CASE 02South China · Automotive components · First-time scenario

From customer requirement to assessment scope

Situation
The organisation has a new customer requirement but scope, objectives, ownership and evidence boundaries are unclear.
Work
Clarify the requirement, plan scope and sites, and establish controls, evidence and cross-functional ownership.
Outcome
A project roadmap, responsibility matrix and phased readiness package.
CASE 03Multiple regions · Manufacturing group · Multi-site scenario

Central governance with site differences

Situation
Headquarters wants common policies while plants and development centres retain technical and physical differences.
Work
Separate shared and local controls, standardise evidence and plan site-specific remediation.
Outcome
A group framework and site-level implementation lists that support coordinated delivery.

These anonymised representative scenarios explain delivery methods. They do not disclose a client identity, internal finding or assessment result.

Explore services and scenarios

PARTICIPANT GUIDE

A practical reading path through the TISAX process

Navigate registration, scope, assessment, remediation, exchange and renewal with source and version context.

Open the participant guide

FAQ

FAQ

Is TISAX a certificate?

TISAX is an assessment and exchange mechanism. We use label renewal and reassessment language and do not describe consulting as certification.

When should renewal preparation start?

The current ENX handbook recommends starting at least one year before expiry where continuous label validity is required.

Is ISO/IEC 27001 enough?

An ISMS is useful groundwork, but TISAX objectives, automotive scope and evidence still need confirmation.

Can multiple sites be managed together?

A common framework is possible, while business, technical and physical differences still require site-level review.

TISAX CONTACT

Start with scope and timing

Share the customer requirement, sites, target date and current baseline so we can outline the next step.

DIRECT CONTACT

Direct contact

Address
上海市灵山路 1000 弄 2 号楼 1305 室
Official WeChat account
Official WeChat accountWeChat enquiry
Add WeChat
Add WeChatScan the QR code to add a consultant on WeChat

TISAX enquiry

Your enquiry is sent through the existing Web3Forms channel. Do not submit passwords, keys, assessment reports or client-confidential information.

Check renewal timingWeChat enquiry