01
VDA ISA 6.0 — workforce awareness and training are mandatory assessment objectives at AL 1, 2, and 3
Loading...
We deliver mandatory TISAX awareness training across your workforce — VDA ISA control catalogue, prototype protection, data protection, and connection to customer assessments. Designed for automotive suppliers in the VW, BMW, Mercedes-Benz, Audi, Stellantis, and Porsche supply chains. Live for your team in under a week.
Trusted Information Security Assessment Exchange (TISAX) is the de-facto information security qualification for the European automotive industry, governed by ENX Association. The VDA ISA control catalogue (currently version 6.0) makes information security awareness, training, and competence explicit assessment objectives at every protection level (AL 1, 2, 3). Auditors review training records during assessments. OEMs (VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis) require positive TISAX assessment results as a precondition for supplier onboarding and ongoing contracts.
VDA ISA 6.0 — workforce awareness and training are mandatory assessment objectives at AL 1, 2, and 3
ENX-accredited audit providers review training records during AL 2 self-assessment plus AL 3 on-site audit
OEM contracts cascade: VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis require TISAX results as a sine qua non
Prototype protection (PP), data protection, and connection-to-3rd-parties scopes each require role-specific training
Different roles face different risks. Training tailored to job responsibilities.
A 60-min working session with a specialist. We map your obligations, current training gaps, and regulator priorities in your jurisdiction.
Your processes, contacts, and policies go into the modules. We brand the LMS, wire SSO, and connect HRIS so enrolment is automatic.
Roll out to all staff. Automated nudges hit non-completers. Manager dashboards in real time. Audit-ready records when regulators ask.
Ready to scope your programme?
Book a 30-min discovery call — no slides, no pitch, just specifics.
Dedicated customer success manager handles enrolment, role mapping, kickoff communications, and reminder cadence.
Dated certificates per workforce member, exportable completion logs, and role-mapped curriculum records that satisfy VDA ISA 6.0 audit checks at AL 1, 2, and 3.
Track completion across teams, sites, and TISAX assessment scopes. Export evidence packages for ENX assessors and OEM customer audits.
SAML 2.0, OIDC, and SCIM provisioning. New joiners enrolled automatically. Leavers de-provisioned. Zero admin overhead.
Multi-year licensing rolls workforce members forward each year. Refresher content tracks VDA ISA catalogue updates and ENX audit interpretations.
Your logo on certificates, co-branded learner emails, and the option to attach your information security policy, prototype handling procedure, or supplier security requirements to any module.
We supply Tier 1 to BMW and Mercedes-Benz and needed AL 3 prototype protection across two sites. The training rollout covered engineering, manufacturing, and security teams with the right module overlays. Our ENX assessor signed off Annex A 6.3 evidence on first review.
Don't see your question? Send us a note — we usually reply same day.
Ask a questionTell us your TISAX assessment scope (information security, prototype protection, data protection), your assurance level (AL 1, 2, 3), and your headcount across sites. We'll come back with a curriculum proposal, pricing, and a rollout plan within 1 business day.