Information security in automotive industry: Mechanism TISAX

Abstract

With the development of information technologies and their application in all spheres of activity, information security has become an actual problem. A significant step towards solving that problem was the adoption of the ISO/IEC 27000 family of standards for information security management systems (ISMS). The practical application of these standards showed that the generic standard cannot satisfy all specific requirements for information security in certain areas, so the adoption of sector standards in areas such as telecommunications, electric power systems, cloud computing, etc. At the same time, in some branches of industry, special standards were adopted to express their specificities. One of those areas is the automotive industry, where the TISAX mechanism has been established to ensure that suppliers comply with information security requirements, especially when it comes to information related to prototypes. This paper provides a summary of the TISAX mechanism, its structure and constituent elements, as well as its relationship with the ISO/IEC 27000 family of standards.

Keywords

• information security
• information security management system (isms)
• automotive industry
• mechanism tisax