TISAX® Acronym Guide

AL - Assessment Level

BIA - Business Impact Analysis

CB - Certification Body

DLP - Data Loss Prevention

DP - Data Protection

DPA - Data Processing Agreement

EDR - Endpoint Detection and Response

ENX - European Network Exchange (governing body operating TISAX®)

ENX Portal – Platform used for registration, scope definition, and label sharing

GDPR - General Data Protection Regulation

IAF - International Accreditation Forum

IAM - Identity and Access Management

ICS - Industrial Control Systems

IS - Information Security

ISA - Information Security Assessment

ISMS - Information Security Management System

IT - Information Technology

IoT - Internet of Things

MFA - Multi-Factor Authentication

NDA - Non-Disclosure Agreement

OEM - Original Equipment Manufacturer

OT - Operational Technology

PII - Personally Identifiable Information

PP - Prototype Protection

RA - Risk Assessment

RPO - Recovery Point Objective

RTO - Recovery Time Objective

SIEM - Security Information and Event Management

SOC - Security Operations Center

SoA - Statement of Applicability

Tier 1 / Tier 2 – Supplier levels in the automotive supply chain

TISAX® - Trusted Information Security Assessment Exchange

TISAX® Participant – Company undergoing assessment

TISAX® Provider – Accredited audit provider

VDA - Verband der Automobilindustrie (German Association of the Automotive Industry)

VDA ISA – The official TISAX® control catalog (e.g., version 6.0.3)

VPN - Virtual Private Network

This TISAX® acronyms list helps automotive suppliers understand the key terms used throughout the TISAX® assessment process, including ISA, assessment levels, and ENX-related terminology.