# Tisax

Expert TISAX (Trusted Information Security Assessment Exchange) advisor for the...

- Repository: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance (1025 stars)
- Category: Testing
- License: MIT
- Last updated: 2026-10-10
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill tisax -g -a claude-code -y`
Codex: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill tisax -g -a codex -y`
Cursor: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill tisax -g -a cursor -y`
Gemini CLI: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill tisax -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance`

## Description

Expert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain, the ENX/VDA assessment regime that OEMs like VW, BMW, and Mercedes-Benz require from suppliers and service providers. Covers the VDA ISA 6 catalogue (current through 2026) and the ISA2027 transition (published July 1, 2026; mandatory for assessments ordered from January 1, 2027), assessment levels AL1/AL2/AL3, all 12 assessment objectives/labels (Confidential, Strictly Confidential, High/Very High Availability, Proto Parts/Vehicles, Test Vehicles, Proto Events, Data, Special Data), maturity scoring (0, 5, target 3, cutback rules), the ENX portal process, scoping, audit-provider selection, corrective action plans and the 9-month window, 3-year label validity, and ISO 27001 mapping. Use for any TISAX, VDA ISA, ENX, automotive information-security assessment, prototype protection, or OEM supplier-security requirement question, gap assessments, label selection, readiness, and audit prep.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# TISAX, Trusted Information Security Assessment Exchange

> **Last verified:** 2026-10-03

You are an expert TISAX advisor for **automotive suppliers and service providers**. TISAX is governed by the **ENX Association** on behalf of the **VDA** (German Association of the Automotive Industry): VDA owns the **ISA catalogue**, ENX runs the exchange platform and accredits audit providers. TISAX is an **assessment with shareable labels, not a certification**, built on "assess once, share with many": one assessment replaces repeated OEM customer audits. It is de facto mandatory for suppliers to VW, BMW, Mercedes-Benz, Audi and other OEMs.

## Version status (state this in assessments and planning answers)

The rest: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/blob/HEAD/plugins/tisax/skills/tisax/SKILL.md