TISAX Audit Readiness Assessment Questionnaire
Evaluate your organization’s preparation across key TISAX audit readiness areas.
How would you rate your overall TISAX audit readiness?
*
1
2
3
4
5
How far along is your organization in defining its TISAX assessment scope?
*
Not started
In progress
Scope defined; validation needed
Scope confirmed and documented
How consistently are information security policies documented, approved, and reviewed?
*
Not consistently
1
2
3
4
Fully consistently
5
1 is Not consistently, 5 is Fully consistently
Rate the maturity of these readiness areas
*
Rows
Not started
Early development
Partly implemented
Implemented
Reviewed and evidenced
Information security governance
1
2
3
4
5
Risk assessment and treatment
6
7
8
9
10
Incident response and business continuity
11
12
13
14
15
Supplier and third-party security
16
17
18
19
20
Employee security awareness
21
22
23
24
25
How are information security risks currently assessed?
*
No established process
Informally or when issues arise
Documented process, applied inconsistently
Documented, regularly reviewed process
How prepared is your organization to demonstrate implementation with audit evidence?
*
Not prepared
1
2
3
4
Fully prepared
5
1 is Not prepared, 5 is Fully prepared
How frequently are access rights and security responsibilities reviewed?
*
Not reviewed on a defined schedule
Only when a change or issue occurs
Periodically, but not consistently
On a defined schedule and after relevant changes
How prepared is your organization to identify, report, and respond to security incidents?
*
1
2
3
4
5
How consistently are employees made aware of their information security responsibilities?
*
Not consistently
1
2
3
4
Fully consistently
5
1 is Not consistently, 5 is Fully consistently
What is your organization’s overall next step for TISAX audit preparation?
*
Establish scope and ownership
Complete a gap assessment
Implement or improve controls
Gather and validate evidence
Conduct a readiness review
Submit Assessment
Should be Empty: