TISAX Awareness Training

Done-for-you TISAX training for automotive suppliers

We deliver mandatory TISAX awareness training across your workforce — VDA ISA control catalogue, prototype protection, data protection, and connection to customer assessments. Designed for automotive suppliers in the VW, BMW, Mercedes-Benz, Audi, Stellantis, and Porsche supply chains. Live for your team in under a week.

  • 100,000+ professionals trained
  • Aligned to VDA ISA 6.0
  • Live for your team in 5 business days
admin.compliquest.com / tisax / training
TISAX Programme · Q2 2026
Training completion overview
● LIVE
847
Enrolled
92%
Completed
4.8★
Rating
0
Overdue
All Workforce Members
All Workforce Members
100%
Engineering & R&D
Engineering & R&D
96%
Manufacturing & Production
Manufacturing & Production
88%
Procurement & Supplier Mgmt
Procurement & Supplier Mgmt
74%
RocheCoca-ColaSamsungHuaweiMicrosoftJPMorgan ChaseVolkswagenShellNestléSiemensBMWUnileverAXALufthansaPfizerAdidasRocheCoca-ColaSamsungHuaweiMicrosoftJPMorgan ChaseVolkswagenShellNestléSiemensBMWUnileverAXALufthansaPfizerAdidas
// why teams choose us

Why TISAX awareness training is mandatory — not optional

Trusted Information Security Assessment Exchange (TISAX) is the de-facto information security qualification for the European automotive industry, governed by ENX Association. The VDA ISA control catalogue (currently version 6.0) makes information security awareness, training, and competence explicit assessment objectives at every protection level (AL 1, 2, 3). Auditors review training records during assessments. OEMs (VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis) require positive TISAX assessment results as a precondition for supplier onboarding and ongoing contracts.

01

VDA ISA 6.0 — workforce awareness and training are mandatory assessment objectives at AL 1, 2, and 3

02

ENX-accredited audit providers review training records during AL 2 self-assessment plus AL 3 on-site audit

03

OEM contracts cascade: VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis require TISAX results as a sine qua non

04

Prototype protection (PP), data protection, and connection-to-3rd-parties scopes each require role-specific training

02 — Curriculum

Role-based
by default.

Different roles face different risks. Training tailored to job responsibilities.

  1. 01
    All Workforce Members

    All Workforce Members

  2. 02
    Engineering & R&D

    Engineering & R&D

  3. 03
    Manufacturing & Production

    Manufacturing & Production

  4. 04
    Procurement & Supplier Mgmt

    Procurement & Supplier Mgmt

  5. 05
    IT & Security

    IT & Security

  6. 06
    Senior Management

    Senior Management

03 — Process

From kickoff to fully trained in under four weeks.

4
weeks avg.
92%
completion
  1. Week 1 · Discovery

    Scope your risk

    A 60-min working session with a specialist. We map your obligations, current training gaps, and regulator priorities in your jurisdiction.

    • Compliance scan
    • Regulator review
    • Role-based gap analysis
  2. Week 2–3 · Build

    Tailor & integrate

    Your processes, contacts, and policies go into the modules. We brand the LMS, wire SSO, and connect HRIS so enrolment is automatic.

    • Custom scenarios
    • White-label LMS
    • HRIS / SSO sync
  3. Week 4+ · Operate

    Deploy & evidence

    Roll out to all staff. Automated nudges hit non-completers. Manager dashboards in real time. Audit-ready records when regulators ask.

    • Automated nudges
    • Real-time dashboards
    • Evidence pack

Ready to scope your programme?

Book a 30-min discovery call — no slides, no pitch, just specifics.

// platform & delivery

What every enterprise rollout includes

Managed rollout in 5 business days

Dedicated customer success manager handles enrolment, role mapping, kickoff communications, and reminder cadence.

Audit-ready evidence for ENX assessors

Dated certificates per workforce member, exportable completion logs, and role-mapped curriculum records that satisfy VDA ISA 6.0 audit checks at AL 1, 2, and 3.

Manager dashboard & reporting

Track completion across teams, sites, and TISAX assessment scopes. Export evidence packages for ENX assessors and OEM customer audits.

Single sign-on (SSO) & SCIM

SAML 2.0, OIDC, and SCIM provisioning. New joiners enrolled automatically. Leavers de-provisioned. Zero admin overhead.

Annual refresher cycle built-in

Multi-year licensing rolls workforce members forward each year. Refresher content tracks VDA ISA catalogue updates and ENX audit interpretations.

Custom modules & policy attestations

Your logo on certificates, co-branded learner emails, and the option to attach your information security policy, prototype handling procedure, or supplier security requirements to any module.

// from a customer
We supply Tier 1 to BMW and Mercedes-Benz and needed AL 3 prototype protection across two sites. The training rollout covered engineering, manufacturing, and security teams with the right module overlays. Our ENX assessor signed off Annex A 6.3 evidence on first review.
HO
Head of Information Security, BMW
Automotive — 1,500+ workforce members trained
★★★★★
// by the numbers
Lost
OEM contracts without TISAX
AL 2/3
is the typical OEM requirement
VDA ISA 6.0
is the current control catalogue
// frequently asked

Common questions.

Don't see your question? Send us a note — we usually reply same day.

Ask a question
TISAX is contractually mandatory rather than legally mandatory — but the practical effect is the same. OEMs (VW, BMW, Mercedes-Benz, Audi, Porsche, Stellantis) require positive TISAX assessment results as a precondition for supplier onboarding and ongoing contracts. The VDA ISA 6.0 catalogue makes workforce awareness and training explicit assessment objectives, and ENX-accredited assessors review training records during AL 2 self-assessment and AL 3 on-site audit.
Ready when you are

Ready to brief us on your team rollout?

Tell us your TISAX assessment scope (information security, prototype protection, data protection), your assurance level (AL 1, 2, 3), and your headcount across sites. We'll come back with a curriculum proposal, pricing, and a rollout plan within 1 business day.

// programme summary
Time to deploy
4 weeks
Audience
All staff + role tiers
Languages
12 included
Updates
Quarterly, automatic
Pricing
Contact us for a quote
Browse courses