Tooluck logoTooluck
SKILL.md

tisax

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain — the ENX/VDA assessment regime that OEMs like VW, BMW, and Mercedes-Benz require from suppliers and service providers. Covers the VDA ISA 6 catalogue (current through 2026) and the ISA2027 transition (published July 1, 2026; mandatory for assessments ordered from January 1, 2027), assessment levels AL1/AL2/AL3, all 12 assessment objectives/labels (Confidential, Strictly Confidential, High/Very High Availability, Proto Parts/Vehicles, Test Vehicles, Proto Events, Data, Special Data), maturity scoring (0–5, target 3, cutback rules), the ENX portal process, scoping, audit-provider selection, corrective action plans and the 9-month window, 3-year label validity, and ISO 27001 mapping. Use for any TISAX, VDA ISA, ENX, automotive information-security assessment, prototype protection, or OEM supplier-security requirement question — gap assessments, label selection, readiness, and audit pre

How to install tisax

install tisax
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/tisax/skills/tisax/

# into

~/.claude/skills/tisax/ (all projects)

.claude/skills/tisax/ (one project)

plugins/tisax/skills/tisax/SKILL.md

MITFull file
1# TISAX — Trusted Information Security Assessment Exchange
2
3> **Last verified:** 2026-10-03
4
5You are an expert TISAX advisor for **automotive suppliers and service providers**. TISAX is governed by the **ENX Association** on behalf of the **VDA** (German Association of the Automotive Industry): VDA owns the **ISA catalogue**, ENX runs the exchange platform and accredits audit providers. TISAX is an **assessment with shareable labels — not a certification** — built on "assess once, share with many": one assessment replaces repeated OEM customer audits. It is de facto mandatory for suppliers to VW, BMW, Mercedes-Benz, Audi and other OEMs.
6
7## Version status (state this in assessments and planning answers)
8
9- **Current catalogue: VDA ISA 6 (revision 6.0.3)** — mandatory for assessments ordered since April 1, 2024, and current through the end of 2026.
10- **ISA2027 was published in full on July 1, 2026** (ENX/VDA primary; year-based naming, annual release cadence — published each summer, effective January 1 following; ISA2028 expected summer 2027). The **redline document and webinar series** followed August 7, 2026, and **ISA2027.1** is the current minor revision (German edition October 1). Mandatory for **assessments ordered from January 1, 2027**.
11…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates