NIS2July 15, 2026 · Iulian Bozdoghina

NIS2 Supply Chain Requirements: What Suppliers Outside the Scope Still Owe

NIS2 flow-down explained: why customers send the questionnaire, the five standard contract clauses, and how to answer with evidence you already hold.

Read article

Latest articles

Discover our most recent posts across all industries, brands and topics.

NIS2

NIS2 Supply Chain Requirements: What Suppliers Outside the Scope Still Owe

NIS2 flow-down explained: why customers send the questionnaire, the five standard contract clauses, and how to answer with evidence you already hold.

Jul 15, 2026

Glowing amber puzzle piece with automotive and security icons dropping into a blue cybersecurity puzzle with one empty slot, symbolising a TISAX label closing NIS2 requirements.

TISAX®

TISAX NIS2 Compliance: What Your Label Actually Covers, and What It Doesn't

A TISAX label covers all ten NIS2 Article 21 measures, per ENX's own expert opinion. Here is the control mapping and the five gaps it leaves open.

Jul 3, 2026

A glowing blue wheel with "Awareness" at its hub, ringed by information-security domains: information security, risk management, asset protection, incident management, business continuity, access control and supplier security, illustrating security awareness training as the centre of TISAX preparation.

TISAX®

How to Prepare for TISAX Awareness Training

TISAX awareness training is assessed under VDA ISA control 2.1.3 and graded on a 0–5 maturity scale. Here is the scope, the refresh cadence, and the evidence you need to reach level 3.

Jul 1, 2026

TISAX®

The TISAX® Recertification Countdown: When You Actually Have to Start

A TISAX label lasts three years. Miss the recertification window and it lapses on the ENX portal, visible to every OEM. Here is how to plan backwards.

Jul 1, 2026

Blog & Insights

NIS2

NIS2 Supply Chain Requirements: What Suppliers Outside the Scope Still Owe

NIS2 flow-down explained: why customers send the questionnaire, the five standard contract clauses, and how to answer with evidence you already hold.

Jul 15, 2026Iulian Bozdoghina

ISO 27001

ISO 27001 to TISAX®: The Control-by-Control Mapping (VDA ISA 6.0.3)

Moving from ISO 27001 to TISAX®? The control-by-control map to VDA ISA 6.0.3: what carries over, what is partial, and what has no ISO equivalent.

Jun 21, 2026Iulian Bozdoghina

TISAX®

TISAX NIS2 Compliance: What Your Label Actually Covers, and What It Doesn't

A TISAX label covers all ten NIS2 Article 21 measures, per ENX's own expert opinion. Here is the control mapping and the five gaps it leaves open.

Jul 3, 2026Iulian Bozdoghina

Blue jigsaw puzzle missing one piece, filled by a gold automotive-security piece, illustrating the overlap and the gap between ISO 27001 and TISAX.

TISAX®

Does ISO 27001 Cover TISAX®? Where They Overlap, and the Gap That Still Needs Closing

Does ISO 27001 cover TISAX? A certified 2022 ISMS covers roughly 70-80% of the VDA ISA catalogue. Here is exactly where they overlap and where the gap is.

Jun 21, 2026Iulian Bozdoghina

TISAX®

How to Prepare for TISAX Awareness Training

TISAX awareness training is assessed under VDA ISA control 2.1.3 and graded on a 0–5 maturity scale. Here is the scope, the refresh cadence, and the evidence you need to reach level 3.

Jul 1, 2026Iulian Bozdoghina

ISO 27001

The Statement of Applicability: The ISO 27001 Document Auditors Open First

The ISO 27001 Statement of Applicability is the first document auditors open: what it must contain, where it fails, and how to keep it audit-ready.

Jun 17, 2026Iulian Bozdoghina

TISAX®

The TISAX® Recertification Countdown: When You Actually Have to Start

A TISAX label lasts three years. Miss the recertification window and it lapses on the ENX portal, visible to every OEM. Here is how to plan backwards.

Jul 1, 2026Iulian Bozdoghina

NIS2

NIS2 Essential Entity Criteria: How to Classify Your Organisation, and Why Getting It Wrong Cuts Both Ways

NIS2 essential entity criteria: how sector and size decide essential vs important, the size-exempt categories, and what classification really changes.

Jun 15, 2026Iulian Bozdoghina

Explore our topics

Discover stories on key trends that are transforming the business and regulatory landscape.

Certifications

Keep up with the latest compliance frameworks, automotive requirements, and enterprise IT security assessments.

View all articles

NIS2 Supply Chain Requirements: What Suppliers Outside the Scope Still Owe

NIS2 flow-down explained: why customers send the questionnaire, the five standard contract clauses, and how to answer with evidence you already hold.

TISAX NIS2 Compliance: What Your Label Actually Covers, and What It Doesn't

A TISAX label covers all ten NIS2 Article 21 measures, per ENX's own expert opinion. Here is the control mapping and the five gaps it leaves open.

How to Prepare for TISAX Awareness Training

TISAX awareness training is assessed under VDA ISA control 2.1.3 and graded on a 0–5 maturity scale. Here is the scope, the refresh cadence, and the evidence you need to reach level 3.

Ready to get certified?

Book your free gap assessment today. Our experts will map your current posture against your target framework and give you a clear, honest roadmap to certification.

Book Free Gap Assessment

No commitment required • GDPR compliant • Strategy confirmed via secure link