VDA ISA 6.0 — workforce awareness and training are mandatory assessment objectives at AL 1, 2, and 3
Done-for-you TISAX training for automotive suppliers
We deliver mandatory TISAX awareness training across your workforce — VDA ISA control catalogue, prototype protection, data protection, and connection to customer assessments. Designed for automotive suppliers in the VW, BMW, Mercedes-Benz, Audi, Stellantis, and Porsche supply chains. Live for your team in under a week.
- 100,000+ professionals trained
- Aligned to VDA ISA 6.0
- Live for your team in 5 business days
Why TISAX awareness training is mandatory — not optional
Trusted Information Security Assessment Exchange (TISAX) is the de-facto information security qualification for the European automotive industry, governed by ENX Association. The VDA ISA control catalogue (currently version 6.0) makes information security awareness, training, and competence explicit assessment objectives at every protection level (AL 1, 2, 3). Auditors review training records during assessments. OEMs (VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis) require positive TISAX assessment results as a precondition for supplier onboarding and ongoing contracts.
ENX-accredited audit providers review training records during AL 2 self-assessment plus AL 3 on-site audit
OEM contracts cascade: VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis require TISAX results as a sine qua non
Prototype protection (PP), data protection, and connection-to-3rd-parties scopes each require role-specific training
Role-based
by default.
Different roles face different risks. Training tailored to job responsibilities.
- 01All Workforce Members
All Workforce Members
- 02Engineering & R&D
Engineering & R&D
- 03Manufacturing & Production
Manufacturing & Production
- 04Procurement & Supplier Mgmt
Procurement & Supplier Mgmt
- 05IT & Security
IT & Security
- 06Senior Management
Senior Management
From kickoff to fully trained in under four weeks.
- Week 1 · Discovery
Scope your risk
A 60-min working session with a specialist. We map your obligations, current training gaps, and regulator priorities in your jurisdiction.
- Compliance scan
- Regulator review
- Role-based gap analysis
- Week 2–3 · Build
Tailor & integrate
Your processes, contacts, and policies go into the modules. We brand the LMS, wire SSO, and connect HRIS so enrolment is automatic.
- Custom scenarios
- White-label LMS
- HRIS / SSO sync
- Week 4+ · Operate
Deploy & evidence
Roll out to all staff. Automated nudges hit non-completers. Manager dashboards in real time. Audit-ready records when regulators ask.
- Automated nudges
- Real-time dashboards
- Evidence pack
Ready to scope your programme?
Book a 30-min discovery call — no slides, no pitch, just specifics.
What every enterprise rollout includes
Managed rollout in 5 business days
Dedicated customer success manager handles enrolment, role mapping, kickoff communications, and reminder cadence.
Audit-ready evidence for ENX assessors
Dated certificates per workforce member, exportable completion logs, and role-mapped curriculum records that satisfy VDA ISA 6.0 audit checks at AL 1, 2, and 3.
Manager dashboard & reporting
Track completion across teams, sites, and TISAX assessment scopes. Export evidence packages for ENX assessors and OEM customer audits.
Single sign-on (SSO) & SCIM
SAML 2.0, OIDC, and SCIM provisioning. New joiners enrolled automatically. Leavers de-provisioned. Zero admin overhead.
Annual refresher cycle built-in
Multi-year licensing rolls workforce members forward each year. Refresher content tracks VDA ISA catalogue updates and ENX audit interpretations.
Custom modules & policy attestations
Your logo on certificates, co-branded learner emails, and the option to attach your information security policy, prototype handling procedure, or supplier security requirements to any module.
We supply Tier 1 to BMW and Mercedes-Benz and needed AL 3 prototype protection across two sites. The training rollout covered engineering, manufacturing, and security teams with the right module overlays. Our ENX assessor signed off Annex A 6.3 evidence on first review.
Common questions.
Don't see your question? Send us a note — we usually reply same day.
Ask a questionReady to brief us on your team rollout?
Tell us your TISAX assessment scope (information security, prototype protection, data protection), your assurance level (AL 1, 2, 3), and your headcount across sites. We'll come back with a curriculum proposal, pricing, and a rollout plan within 1 business day.