If you’re an automotive supplier or service provider, you likely work on sensitive projects with your partners, requiring a daily exchange of sensitive information. Your partners need to know that you’re handling their sensitive information with care, protecting it from theft, loss, and manipulation.
Many information security regulations recommend the use of classification to ensure that sensitive information is appropriately protected and handled, and TISAX standards are no different.
Classification is one of the technical areas a TISAX assessment covers, alongside encryption and reporting.
Question 1.3.2 in the VDA ISA (the security assessment used in the TISAX process) asks, “To what extent are information assets classified and managed in terms of their protection needs?” Specific requirements include the use of a consistent, policy-based classification scheme and the classification of data based on criteria such as value, confidentiality, and legal requirements.
The Value of Automation
PKWARE offers classification capabilities to help companies determine what to protect and how to handle appropriately. But unlike others, PKWARE’s endpoint manager provides automated, discovery-driven classification. This means that every time a new file is created, the system automatically scans the file for sensitive information, and it applies the appropriate label based on your organization’s definitions.
PKWARE’s unique automated security workflow uses your organization’s security policies to determine what content it should look for. When a file matches the definitions for sensitive data, the appropriate label is applied to the file—with no action required by the user. This takes the burden off of employees to make decisions on how files should be classified, while ensuring that your classification rules are applied consistently and accurately across your entire organization, which, by the way, is precisely what the TISAX security assessment requires.
Classification also underpins the controls that follow it. Once a file carries a label, encryption and access rules follow from that label. They no longer depend on a judgement made at the moment of saving. That is what makes the result consistent enough to demonstrate to an assessor. Meeting TISAX requirements otherwise draws on several departments and several vendors. That coordination is much of the cost.
Simpler Process, Better Results
PKWARE makes it easier to define and implement a classification policy. Instead of having to create paper policies, develop and deliver employee training, and perform regular audits to ensure the accuracy of your organizations’ classification labels, companies can meet TISAX standards for classification by simply creating and publishing policies within the management console of PKWARE’s platform.
Schedule time with one of our TISAX experts today to find out how you can get up in running in a matter of days.