CYMETRIS Achieves TISAX® Assessment, Strengthening Its Position in the Automotive Market

TISAX® (Trusted Information Security Assessment Exchange), administered by the ENX Association on behalf of the German Association of the Automotive Industry (VDA), has become a central mechanism for standardized information security assessments within automotive development ecosystems. The framework was designed to enable secure collaboration between OEMs, suppliers, engineering service providers, and technology partners handling sensitive development and vehicle-related data.

For CYMETRIS, completing the assessment represents more than a formal milestone. Cyber risk analysis and TARA methodology are inherently tied to sensitive development data, supply chain collaboration, and complex engineering workflows, making information security, confidentiality, and controlled data handling foundational requirements for trustworthy platform operation.

Platform-Driven: CYMETRIS Used Its Own Solution to Complete the Required Risk Assessment

The TISAX® assessment process demands a structured information security risk assessment covering asset identification, threat modeling, and the evaluation of organizational and technical controls in line with VDA ISA requirements. CYMETRIS conducted this process using its own platform, including automated tracking of open findings and direct Jira integration for remediation workflows.

This was a deliberate step as part of broader efforts to validate CYMETRIS beyond its established ISO/SAE 21434 TARA use case. The platform is increasingly being adopted for adjacent risk assessment frameworks, including CRA-aligned assessments and engineering environments in sectors such as agriculture and two-wheeled vehicles, where teams find that CYMETRIS maps cleanly to their specific methodological needs. The TISAX® exercise confirmed that the platform provides sufficient flexibility and structure to support these expanding use cases reliably.

Enabling Secure Collaboration at Scale

The TISAX® status strengthens CYMETRIS as a reliable platform partner for regulated automotive environments, particularly in contexts involving co-development, distributed engineering organizations, and safety-critical product data.

“Many are talking about AI, SDVs, and automated workflows right now. At the same time, it is often underestimated that these developments only work if the underlying infrastructure and organization remain protected. With TISAX®, we create exactly that foundation for CYMETRIS as a prerequisite for our continued growth as a partner for integrated cybersecurity engineering.”
— Philipp Veronesi, Founder and Managing Director, CYMETRIS

“The future of cyber risk assessment and TARA lies in dynamic, interconnected engineering processes. That shift significantly raises the bar for traceability, access control, and information protection. TISAX® supports our commitment to building CYMETRIS as a robust platform for safety- and security-critical development environments, in line with what the industry demands.”
— Falk Mayer, Co-Founder and Managing Director, CYMETRIS

The TISAX® assessment confirms that CYMETRIS meets established requirements for information security, controlled data access, and structured governance, reinforcing the foundation for scaling the platform across complex OEM, supplier, and multi-partner environments where secure collaboration and controlled information flows are essential.

TISAX® is a registered trademark of the ENX Association. ENX Association does not take any responsibility for any content shown on this website.