ISO and GRC standards for automotive and mobility: where to start: video

What automotive customers ask their suppliers for

Automotive business is won and kept with the certificates and labels customers put in their supplier requirements. IATF 16949, applied with ISO 9001 and each customer's specific requirements, is the quality system for the plant. TISAX covers customers' confidential data and prototypes. ISO/SAE 21434 and ISO 26262 provide the cybersecurity and functional safety evidence behind vehicle electronics, with UNECE R155 and R156 shaping type approval. ISO 14001 and ISO 45001 cover environment and plant safety.

The film brings that set together and shows where a supplier should start. The answer depends on what the customer has asked for and when: a sourcing decision, a supplier portal deadline or a scorecard.

The pressures behind the request, and the first step

Vehicle manufacturers and Tier 1 buyers ask for IATF 16949 before they nominate a supplier for a new part; without the certificate, a quotation often does not reach the sourcing decision. TISAX requests arrive in the customer's supplier portal with objectives, a level and a date, and the labels run on a fixed renewal clock. EU type approval rules on protection against cyberattacks have pushed vehicle manufacturers to ask their suppliers for cybersecurity evidence, and scorecards and complaints carry consequences for audit time under the IATF Rules.

For most manufacturing sites the first step is IATF 16949 at each site, recorded in the IATF database before the sourcing decision. Suppliers handling customer prototypes or confidential data add TISAX at the objectives and level the customer asked for, and engineering teams developing electronics build the safety and cybersecurity processes their customers expect. Unsure which comes first? Select the Standard™ lists what your sector is usually asked for.

Automotive quality, information security and engineering consultants from Sterling build these systems under one all-inclusive proposal, with Effivity, Sterling Academy access and internal auditor training as applicable. IATF-recognised certification bodies and TISAX audit providers assess and decide.