TISAX® certification: What is the problem?
Automobile manufacturers and suppliers exchange valuable data (assets) with each other. The aim is to ensure that trustworthy data is handled securely and carefully. To verify this, companies are asked by their partners to have their information security management audited. Previously, this was done individually for each request.
Due to the increasing effort for suppliers, the wish for a uniform certification arose, which is recognized by all parties. The result is TISAX®, short for "Trusted Information Security Assessment Exchange".
How can Quam® help with TISAX®?
The Quam® creates a digital twin of the organization in which all processes, organizational structures, roles, essential resources and the entire management system of the company are graphically modeled and mapped. This makes it possible to check the requirements of new standards, guidelines or laws on one's own organization much faster, to identify necessary adjustments, to design and implement solutions and finally to document the fulfillment of the requirements, since all existing processes, organizational structures, roles, resources and the implemented compliance system can be used.
TISAX® is one of many standards that can be more easily met with Quam®.
In the integrated management system, system quality, process quality and the productivity of an organization are designed and documented with regard to various aspects such as conformity with quality standards, environmental standards, occupational safety standards or IT security standards, among others. The challenge here is to design and document compliance with various standards, rules, procedures, deadlines and the uniform use of specification documents in a system that is as redundancy-free and easily accessible as possible. Quam® serves to design, document, communicate to all employees on the intranet, encourage feedback, audit and constantly improve the organization the company strives for.
In the adjacent picture you can see how a standard, in this case DIN EN ISO 9001, can be displayed and edited in a Quam®. The clear structure ensures considerable time and cost savings. Especially for companies that have to submit to different certifications, Quam® is very worthwhile.
A more prominent and recent example is the GDPR. Companies using Quam® were able to save up to 75% of their time with regard to the necessary analysis, implementation and documentation of the requirements resulting from the GDPR, as the processes and IT systems relevant to data protection can be easily determined in a complete company model and the creation of the directory of the processing processes is thus greatly facilitated. In the Quam®, which appears in accustomed Microsoft Office environment, it is easy to identify adaptation needs at the organization by new or changed requirements, to sketch solutions and to inform employees about new and/or changed expirations or new roles and their responsibility, like for example the role of a data security officer.
