Putting this into practice
Winners Consulting helps organizations turn this concept into workable policies, processes and audit readiness.
Step 1 of 3
You looked up “UNECE Regulation No. 156 - Software Update and Software Update Management System”. Which situation is closest to yours?
Common situations behind “UNECE Regulation No. 156 - Software Update and Software Update Management System” and the first step
- A European OEM or tier-1 supplier asks for a TISAX assessment result：Confirm the assessment objectives and level (AL2 or AL3), then prepare evidence against the VDA ISA
- You are also asked for ISO/SAE 21434 or the CRA：Plan one system so TISAX, 21434 and the CRA share evidence
- You need the assessment without disrupting production：Check the advisor has automotive supply-chain experience and on-site implementation track record
Winners Consulting provides TISAX assessment consulting. Vice-president and director-level consultants lead the work end to end with no outsourcing, and one set of evidence answers several laws and customer requirements.
Before choosing a consultant or budgeting: decision guides
Use these guides as a checklist when comparing consultants and estimating budget and timeline.
- Budgeting for TISAX next year: how to estimate itA TISAX budget consists of the ENX registration fee, the audit provider's assessment fee, consulting and internal effort; assessment objectives, number of sites and information-security maturity determine the amount.
- How long does TISAX take, and which steps cannot be compressed?ENX cannot estimate the overall timeline; what you can control is the order of the three steps: registration, assessment and exchange. Automotive digital products may also be governed by the CRA.
- How to choose a TISAX consultant in Taiwan: eight criteriaWhen choosing a TISAX consultant, first check whether they can define the assessment scope and objectives correctly and make the right call between AL2 and AL3; automotive digital products also need the CRA considered at the same time.
- How to choose an ISO/SAE 21434 consultant in Taiwan: eight criteriaWhen choosing an ISO/SAE 21434 consultant, first check whether they can tell apart the three requirements carmakers raise (UN R155, TISAX and 21434); then whether they can build threat analysis and risk assessment (TARA), cybersecurity requirements and verification into your existing development process so that it stands up to the carmaker's project audit.
Need help with compliance implementation?
Request Free Assessment