Industry Readiness

Cyber security is relevant in the tendering process

More and more industries and companies are developing their own mandatory cyber security requirements, making cyber security relevant in the tendering process.

Various industries, various certifications

The “TISAX” certification in the automotive industry is certainly one of the best known and most widely used industry certifications. Established in 2017, the German automotive industry has required certified proof of the maturity level of information security of their suppliers and service providers. The certification requirements are enforced through the purchasing process, meaning only those with the relevant certifications can win contracts.

Other industries have seen that “TISAX” is effective and are developing their own mandatory standards. Particularly prominent, with around 300,000 suppliers and service providers worldwide, is certainly the defense industry with its “Cybersecurity Maturity Model Certification” (CMMC), which is to be introduced as mandatory by the US Department of Defense this year.

Overall, it is expected that the number of industry and supplier certifications will continue to increase as companies become more aware of the massive impact cyber security incidents can have on their supply chain.

We guide you through the requirements jungle and provide peace of mind

Especially when you are affected by different cyber security requirements and industry certifications, it can become very challenging to reconcile the different requirements and identify relevant differences. With our requirements matrix, we provide a remedy and present a clear picture of various requirements such as ISO/IEC 27001, “TISAX”, “CMMC” or “SSPA”. We then use a pragmatic gap analysis to identify the most important areas for improvement, and provide support during implementation so that your organization can pass the certification process.