TISAX® AT TRICOR

TISAX® (Trusted Information Security Assessment Exchange) is a standard developed by the automotive industry for assessing and exchanging information while maintaining the highest security standards. It is based on the ISO/IEC 27001 standard and allows companies to have their information security assessed by accredited service providers and share the results.

An information security incident refers to events like attacks, system vulnerabilities, or unauthorized access to data. In contrast, a business disruption affects operations without directly impacting information security. For example, a server failure may disrupt operations but doesn’t necessarily mean that data is at risk.

You can find contact information for reporting security incidents at the bottom of our website. You can report the incident directly via a form or send an email to [email protected]. 

TRICOR has set maximum response times to ensure incidents are handled promptly. Our “High Availability and Confidentiality” strategy establishes strict escalation times and processes to guarantee the protection of sensitive data.

In the event of an incident, the Data Protection Officer (DPO), the Information Security Officer (ISO), and all relevant departments involved are immediately notified. TRICOR has a clearly defined communication and escalation strategy to effectively communicate both internally and with customers and authorities. 

Suppliers are also obligated to report security incidents. Contracts specify clear contact points, and any reports received are handled immediately. Suppliers should be aware of where to report incidents and that these will not be ignored.

For suspicious emails, always consider phishing questions: Is the greeting personalized? Is there pressure to act? Are there spelling mistakes or suspicious attachments? Do the sender’s address and links seem legitimate? If an email seems suspicious, delete it immediately and contact IT support or the ISO if you are unsure.

If you clicked on a suspicious link or logged in somewhere, contact IT support immediately. Even if nothing seems to have happened at first, it’s important to report suspicions early to avoid potential damage.