Navigating ENX VCS and TISAX Compliance in Automotive Security

Data protection and information security in the automotive industry are growing concerns among consumers, investors, and other stakeholders. Recently, a vulnerability was exposed in several KIA models that would have allowed attackers to access and control key vehicle functions.

OEMs are mandating that suppliers address information security and data protection. This webinar discusses two programs prevalent among suppliers to European OEMs, TISAX® and VCS, both established and administered by the ENX Association.

Objectives:

The objectives of this webinar are:

• Understand and mitigate cybersecurity risks with automotive suppliers.
• Learn the principles behind TISAX and how it facilitates secure data exchange and information security assessments within the automotive industry.
• Understand the requirements for achieving a TISAX label.
• Understand the new ENX VCS Framework and its importance to the automotive supply chain.
• Discover best practices for protecting sensitive data with ENX VCS and TISAX.

Agenda

• Introduction of ENX VCS and TISAX
• Introduction to TISAX: Role of TISAX in ensuring secure information exchange and data protection within the industry.
• Overview of ENX VCS: Importance of secure vehicle communication across the automotive supply chain.
• Key reasons why compliance is critical for manufacturers and suppliers.
• Best Practices for Achieving a TISAX Label
  • Steps in the TISAX process.
  • Core security requirements and controls.
  • How organizations can prepare for TISAX assessments and align their data protection measures with industry expectations.
• Overcoming Compliance Challenges and Next Steps
  • Address common challenges organizations face with ENX VCS and TISAX.
  • Practical tips for maintaining compliance and continuously improving security practices.

• Q&A

Target Audience:

This webinar is aimed at:

• Automotive manufacturers and OEMs
• Automotive suppliers and partners
• Cybersecurity professionals in the automotive industry
• IT and compliance managers throughout the automotive supply chain
• Third-party service providers and consultants
• Data protection officers (DPOs) and privacy experts
• Auditors and assessors

Language: English

Cost: No Charge

Can't make a live session? Register now and receive a complimentary recording after the live event.

Speakers:

Willy Fabritius

Global Head of Strategy & Business Development Information Security, SGS

For more than 25 years, Willy has held management positions with organizations in the private sector. His experience with management systems dates back to 1994 when he implemented an ISO 9002:1994 QMS at a stamping facility in Germany, which was certified in less than 12 months.

He is a qualified lead auditor for various standards, including ISO 9001, ISO 27001, CSA-STAR, ISO 27701, and ISO 22301, and has audited multiple Fortune 100 organizations to these standards. Willy has worked for several global certification bodies and has delivered thousands of audits in APEC, Africa, Europe, and the Americas.

Willy was the Global Head for Information Security, Privacy, and Business Continuity for one of the largest third-party certification bodies before joining SGS as the Global Head for Strategy and Business Development.

Tyler Drenth

Strategic Business Development Director, SGS

Tyler helps lead strategy and business development efforts across SGS NAM Business Assurance. He focuses on key areas impacting the mobility market, including vehicle cybersecurity. Tyler’s background includes over five years of driving strategic growth in industries such as aerospace and defense, transportation, private equity, and natural resources.

Nicholas DiVito

Director of Operations, Vultara

Nick joined Vultara in March 2024 as Director of Operations, where he is responsible for developing processes and building capabilities across customer success, information security, and marketing. Before Vultara, he worked at Oshkosh Corporation as a Senior Principal Product Cybersecurity Engineer, where he created an internal PKI and KMS system, along with a custom TARA tool.

Nick also works as a private consultant, specializing in CMMC as a Registered Practitioner, and advises on DFARS 252.204-7012 and NIST SP 800-171 Rev. 3 compliance.

For further information, please contact:

Dominic James
Marketing Assistant
t: +1-862-339-6737