What is the Gap-to-Certified lifecycle?

It is our proprietary methodology that takes companies from their current security posture to full certification (TISAX, ISO27001) by identifying gaps, implementing controls, and supporting the final audit.

Do you offer outsourced CISO roles?

Yes, we provide outsourced CISO, DPO, and ISMS Manager roles to help organizations maintain compliance without the overhead of full-time executive hires.

How long does TISAX labeling usually take?

The timeline varies based on maturity, but typically ranges from 4 to 9 months including gap analysis, implementation, and the final assessment audit.

Blog & Insights | ITIS-Secure

TISAX assessment level comparison graphic showing two holographic panels in a dark boardroom, an AL2 panel on the left with checklist, shield, team and gauge icons and an AL3 panel on the right with a car and a network of connected security controls, joined by a glowing balance scale in the centre, illustrating how AL2 and AL3 assess the same controls at different verification depths.

TISAX®July 13, 2026 · Iulian Bozdoghina

TISAX® AL2 vs AL3: Which Assessment Level Do You Actually Need?

AL3 is not AL2 with harder rules. It is the same VDA ISA controls checked on-site. Which TISAX level you need is set by your customer, not by you.

Read article

Latest articles

Discover our most recent posts across all industries, brands and topics.

TISAX®

TISAX® AL2 vs AL3: Which Assessment Level Do You Actually Need?

AL3 is not AL2 with harder rules. It is the same VDA ISA controls checked on-site. Which TISAX level you need is set by your customer, not by you.

Jul 13, 2026

Glowing amber puzzle piece with automotive and security icons dropping into a blue cybersecurity puzzle with one empty slot, symbolising a TISAX label closing NIS2 requirements.

TISAX®

TISAX NIS2 Compliance: What Your Label Actually Covers, and What It Doesn't

A TISAX label covers all ten NIS2 Article 21 measures, per ENX's own expert opinion. Here is the control mapping and the five gaps it leaves open.

Jul 3, 2026

A glowing blue wheel with "Awareness" at its hub, ringed by information-security domains: information security, risk management, asset protection, incident management, business continuity, access control and supplier security, illustrating security awareness training as the centre of TISAX preparation.

TISAX®

How to Prepare for TISAX Awareness Training

TISAX awareness training is assessed under VDA ISA control 2.1.3 and graded on a 0–5 maturity scale. Here is the scope, the refresh cadence, and the evidence you need to reach level 3.

Jul 1, 2026

TISAX®

The TISAX® Recertification Countdown: When You Actually Have to Start

A TISAX label lasts three years. Miss the recertification window and it lapses on the ENX portal, visible to every OEM. Here is how to plan backwards.

Jul 1, 2026

Blog & Insights

TISAX®

TISAX® AL2 vs AL3: Which Assessment Level Do You Actually Need?

AL3 is not AL2 with harder rules. It is the same VDA ISA controls checked on-site. Which TISAX level you need is set by your customer, not by you.

Jul 13, 2026Iulian Bozdoghina

ISO 27001

ISO 27001 to VDA ISA 6.0.3 (TISAX): The Control-by-Control Mapping

A control-by-control crosswalk from ISO/IEC 27001:2022 Annex A to the VDA ISA 6.0.3 catalogue behind TISAX: what maps, what is partial, and what has no ISO equivalent.

Jun 21, 2026Iulian Bozdoghina

TISAX®

TISAX NIS2 Compliance: What Your Label Actually Covers, and What It Doesn't

A TISAX label covers all ten NIS2 Article 21 measures, per ENX's own expert opinion. Here is the control mapping and the five gaps it leaves open.

Jul 3, 2026Iulian Bozdoghina

Blue jigsaw puzzle missing one piece, filled by a gold automotive-security piece, illustrating the overlap and the gap between ISO 27001 and TISAX.

TISAX®

Does ISO 27001 Cover TISAX®? Where They Overlap, and the Gap That Still Needs Closing

Does ISO 27001 cover TISAX? A certified ISO 27001:2022 ISMS covers about 70–80% of the VDA ISA Information Security module. Here is exactly where the two meet and where the gap is.

Jun 21, 2026Iulian Bozdoghina

TISAX®

How to Prepare for TISAX Awareness Training

TISAX awareness training is assessed under VDA ISA control 2.1.3 and graded on a 0–5 maturity scale. Here is the scope, the refresh cadence, and the evidence you need to reach level 3.

Jul 1, 2026Iulian Bozdoghina

ISO 27001

The Statement of Applicability: The ISO 27001 Document Auditors Open First

The ISO 27001 Statement of Applicability is the first document auditors open: what it must contain, where it fails, and how to keep it audit-ready.

Jun 17, 2026Iulian Bozdoghina

TISAX®

The TISAX® Recertification Countdown: When You Actually Have to Start

A TISAX label lasts three years. Miss the recertification window and it lapses on the ENX portal, visible to every OEM. Here is how to plan backwards.

Jul 1, 2026Iulian Bozdoghina

NIS2

NIS2 Essential Entity Criteria: How to Classify Your Organisation, and Why Getting It Wrong Cuts Both Ways

NIS2 essential entity criteria: how sector and size decide essential vs important, the size-exempt categories, and what classification really changes.

Jun 15, 2026Iulian Bozdoghina

Explore our topics

Discover stories on key trends that are transforming the business and regulatory landscape.

Certifications

Keep up with the latest compliance frameworks, automotive requirements, and enterprise IT security assessments.

View all articles

TISAX® AL2 vs AL3: Which Assessment Level Do You Actually Need?

AL3 is not AL2 with harder rules. It is the same VDA ISA controls checked on-site. Which TISAX level you need is set by your customer, not by you.

TISAX NIS2 Compliance: What Your Label Actually Covers, and What It Doesn't

A TISAX label covers all ten NIS2 Article 21 measures, per ENX's own expert opinion. Here is the control mapping and the five gaps it leaves open.

How to Prepare for TISAX Awareness Training

TISAX awareness training is assessed under VDA ISA control 2.1.3 and graded on a 0–5 maturity scale. Here is the scope, the refresh cadence, and the evidence you need to reach level 3.

Ready to get certified?

Book your free gap assessment today. Our experts will map your current posture against your target framework and give you a clear, honest roadmap to certification.

Book Free Gap Assessment

No commitment required • GDPR compliant • Strategy confirmed via secure link