Scope, objectives and locations
Document customer requirements, sites, processes and assessment objectives.
Security & cloud
Match assessment objectives and sites to customer requirements
TISAX enables exchange of automotive information security assessment results. Define customer-required objectives, assessment level and locations, then work with an approved audit provider.
Source record updated:
Discuss your certification →Scope and applicability
Automotive supply-chain information security assessment exchange
It is driven by OEM and supplier requirements, not a general Korean statutory certification. Assessment results, labels and sharing permissions are more precise than a generic certificate claim.
Korean certification schemes and international standards are different. A translated guide does not extend a Korean certificate to other countries. Confirm the target market, product classification and current requirements with the relevant body.
Who this is for
- Automotive software and component suppliers
- Organizations responding to OEM security requirements
- Teams coordinating multiple assessment locations
Documents to prepare
ISA self-assessment and policies
Evaluate control maturity, supporting evidence and gaps.
Operations and improvement plan
Prepare access, supplier, physical security, incident and specialized control records.
Preparation process
Confirm requirements and register with ENX
Define objectives, level, scope and locations.
Self-assess and choose a provider
Close ISA gaps and contract an approved audit provider.
Assess and share results
Complete follow-up and configure the customer's required sharing permissions.
Timing
Level, site count, control maturity and remediation drive timing. ENX does not provide a reliable universal completion estimate.
Agency fees
ENX registration and audit fees
EUR 405 per location in scope + audit provider fees
Confirm locations, scope and VAT treatment. Registration and assessment charges are separate.
Sources and references ↗Document automation and management cost KRW 300,000 per month. Expert services and certification body testing or assessment fees are separate. Specify supports preparation; the relevant authority or certification body makes the final decision.
Pricing and certification costs →Optional expert consulting
Expert review and consulting are optional, separately scoped services. Choose support for TISAX based on your team's readiness and the evidence or assessment preparation you need.
- Confirm institutional testing, assessment and registration fees separately in the contract.
- Development fixes, clinical studies where applicable, security equipment and infrastructure operations may require separate budgets.
- Confirm internal staffing, travel, translation, VAT, surveillance and renewal costs in the quotation.
Questions and answers
Does EUR 405 cover the whole project?
No. It is an ENX registration processing fee; assessment, follow-up and preparation support are additional.
Does ISO 27001 replace TISAX?
Existing controls may help, but customer objectives, level, scope and sharing requirements still apply.
Are results automatically public to every customer?
No. Sharing recipients and scope are managed within the ENX system.