Reviews 4,2
Reviews 4,5
Information Security Officer / CISO (VDA ISA V6 / TISAX)
Anyone responsible for information security in the automotive industry needs more than technical expertise. VDA ISA V6 and TISAX define clear standards – this training prepares participants systematically.
Key topics
- Duties and responsibilities of the information security officer.
- VDA ISA V6 and TISAX: requirements and implementation in context.
- Governance structures and action planning based on ISMS principles.
- Identifying protection needs and developing effective security concepts.
- Collaboration with management, IT teams, and external auditors.
- Working with new technologies and AI applications in security contexts.
Prerequisite
Participants with a background in digital systems, IT structures, or operational processes can get started right away.
Target group
This training is designed for everyone who shapes or manages information security in the automotive sector – whether from IT, quality assurance, compliance, procurement, or project management.
After completing the training, participants understand the key VDA/TISAX requirements and can build an ISMS, manage risks systematically, and support audits competently.
Course content
VDA ISA V6 in detail
- Understand requirements and apply them systematically in practice.
Building a security organisation
- Develop and implement information protection guidelines.
- Establish a robust security organisation.
Defining the scope
- Clearly delimit and document the ISMS scope.
Risk and asset management
- Build and maintain systems for asset management and risk control.
Audits and security testing
- Know and apply methods for IT security audits and penetration testing.
Managing security incidents
- Detect, document, and respond effectively to security-relevant incidents.
Data protection in HR contexts
- Integrate security requirements into HR structures and onboarding processes.
Physical security and business continuity
- Implement physical security measures effectively.
- Introduce and maintain business continuity management.
Identity and access management
- Introduce identity management and control access rights systematically.
Password protection and cryptography
- Apply current standards for password protection and encryption.
Using network documentation
- Create, read, and use network overviews for security analysis.
Change management and patching
- Implement change and patch management in a structured way.
Identifying and limiting cyber risks
- Systematically identify cyber risks and limit them through protective measures.
Network architecture and services
- Understand and apply the OSI layer model.
- Classify relevant network and communication services.
Legal framework
- Know the key legal requirements and standards for information security.
Protecting confidential development data
- Implement protective measures for confidential design data and prototypes.
Data protection overview
- Learn the core principles of data protection and relevant regulations.
Exam preparation
- Review learning material and prepare for the final exam.
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
What is VDA ISA V6 and what is its significance?
- VDA ISA V6 is the key assessment standard for information security in the automotive sector. It sets the requirements companies must meet to pass a TISAX assessment.
What is behind TISAX?
- TISAX stands for Trusted Information Security Assessment Exchange. It allows companies to demonstrate a recognised level of information security to partners in the automotive industry.
What are the CISO's responsibilities regarding TISAX?
- The CISO is responsible for meeting security requirements, coordinating internal and external audits, and ensuring the correct application of VDA ISA and TISAX.
Who needs to comply with VDA ISA V6 and TISAX?
- VDA ISA V6 and TISAX primarily affect manufacturers, suppliers, and service providers who process confidential information for customers in the automotive sector.
What does aligning with VDA ISA V6 bring?
- Implementing VDA ISA V6 delivers clear security structures, reduces operational risks, and provides recognised proof of information security for business partners.
How does VDA ISA V6 help with TISAX preparation?
- VDA ISA V6 offers structured requirements and audit criteria. This enables companies to assess existing measures, identify weaknesses, and prepare for the assessment in a targeted way.
Why do information security and compliance go together?
- Information security protects data and systems technically and organisationally. Compliance ensures that legal, contractual, and industry-specific requirements such as TISAX are met.
