{"id":2209,"date":"2018-11-22T18:55:56","date_gmt":"2018-11-22T16:55:56","guid":{"rendered":"https:\/\/newed.any0.dpdns.org\/de-de\/industry\/blog\/?p=2209"},"modified":"2018-12-04T14:59:54","modified_gmt":"2018-12-04T12:59:54","slug":"it-security-how-trust-works-in-the-automotive-industry","status":"publish","type":"post","link":"https:\/\/newed.any0.dpdns.org\/de-de\/industry\/blog\/automotive\/2018\/11\/22\/it-security-how-trust-works-in-the-automotive-industry\/","title":{"rendered":"IT security: How trust works in the automotive industry"},"content":{"rendered":"

Does my supplier or service provider have IT security under control? This is a justified question in the highly connected automotive industry. It is no longer possible to work without cloud and external access. TISAX (Trusted Information Security Assessment Exchange) creates IT security trust within the industry. TISAX-compliant companies meet the necessary IT security requirements. This also includes secure cloud services for the entire industry such as Microsoft Azure, Office 365 and Dynamics 365.<\/p>\n

<\/p>\n

Connected and autonomous vehicles, cloud-based services and mobile workplaces, digital communication between OEM and supplier: IT systems are indispensable in the automotive industry, and challenges related to autonomous driving can hardly be overcome without cloud support. <\/p>\n

<\/p>\n

In order to secure the constantly increasing connectivity, the VDA (German Association of the Automotive Industry) and the Governance Organization ENX Association<\/a> with TISAX<\/a> developed a standard that evaluates IT security measures across companies. TISAX was derived from ISO 27001 and adapted to the specifics of the industry. For example, TISAX optionally covers the protection of prototypes (physical and digital), the cooperation with third-parties or the handling of security margins.<\/p>\n

<\/p>\n

\"TISAX\"<\/p>\n

Last week, on November 14, 2018, independent testers completed the TISAX Assessment\u00a0for data centres and operations centres handling\u00a0the cloud services Azure, Office 365 and Dynamics 365. The result: Companies in the automotive sector\u00a0can trust these cloud services without additional certifications\u00a0and thus manage their tasks more efficiently. In addition, automobile manufacturers can confidently exchange data with suppliers who offer their employees modern workstations based on Office 365 cloud services. Continental, for example, already relies on Office 365<\/a>.<\/p>\n

For Microsoft, meeting the standard was a given. After all, Microsoft’s cloud services have always met a wide range of international and industry-specific requirements, including the General Data Protection Regulation (GDPR), ISO 27001, HIPAA, FedRAMP, SOC 1 and SOC 2 and country-specific standards such as Australia IRAP, UK G-Cloud and Singapore MTCS. A complete listing can be found in Microsoft Trustcenter<\/a>. <\/p>\n

<\/p>\n

Here is the scope of the TISAX Assessment:<\/p>\n