railway-international.com
11
'25
Written on Modified on
DB Cargo News
DB Cargo Logistics: Focus on information security
By participating in the TISAX assessment, DB Cargo Logistics GmbH is strengthening its focus on the automotive industry's high information security standards.
www.dbcargo.com
The automotive industry expects the comprehensive implementation of information security requirements – from sensitive logistics data to prototype protection. This is precisely where TISAX (Trusted Information Security Assessment Exchange) comes in, a standardised process that ensures extensive security for sensitive company information. Protecting this data from unauthorised access, such as cyber-attacks, is crucial for the survival of companies.
"TISAX calls on companies to evaluate all areas of information security holistically. This ensures an overall view and protection of the entire security architecture," explains Jochen Winterhak, Information Security Manager at DB Cargo Logistics. The assessment procedure is organised by the ENX Association, an alliance of automotive manufacturers, OEMs and organisations in the automotive industry. By participating in TISAX, companies demonstrate that their IT and information security meets the high standards of the industry. "The assessment provides transparency about our level of information security. This means that our partners in the automotive industry do not have to carry out additional security audits at our premises, which significantly reduces time and effort on both sides," adds Christian Brouwer, also Information Security Manager at DB Cargo Logistics.
Concrete actions for information security
TISAX takes a holistic view of the security architecture. At DB Cargo Logistics, the following measures were added to the technical and organisational structure as part of the assessment:
- Security policy/management: New binding guidelines on confidentiality, availability and integrity were defined, written down and implemented, and the role of the Information Security Manager was established.
- Risk management & protective measures: Critical processes were analysed in even greater detail and protective measures were developed, for example, to minimise the risk of failure.
- Other topics: For example, the internal control and management system was expanded to include information security, processes were further developed and the focus on cyber monitoring was strengthened.
"TISAX is a living system that is constantly growing and whose requirements are always evolving. Our ambition is to implement information security at all levels," emphasises Jochen Winterhak. "At all levels" means physical and technical security as well as the general handling of information. After all, no matter how secure IT is, it is useless if confidential documents are openly visible on a train journey or sensitive telephone calls are made in public. It is therefore essential that employees are regularly made aware of how to handle confidential information in order to avoid security gaps caused by human error.
Example: Supply streams
How many lithium-ion batteries of a certain type reach an automotive plant every week? From which suppliers does a car manufacturer source the various components? And how many new cars of a certain model series leave a plant each week? Such information allows conclusions to be drawn about a car manufacturer's strategy and can be of great interest to competitors and other market observers. It is not without reason that this data, which is essential for logistics processes, is subject to a high level of confidentiality. DB Cargo Logistics ensures the security of such information through extensive IT security, combined with clear processes and regular sensitisation of employees.
The benefits for customers and partners
By participating in TISAX, DB Cargo Logistics shows its customers that the high security requirements are taken very seriously. It reduces the inspection effort in the supply chain, minimises risks and increases trust among partners in the automotive industry. The standardised security processes and the associated transparency contribute to a stable, reliable and successful long-term business relationship.
Example: Supply streams
How many lithium-ion batteries of a certain type reach an automotive plant every week? From which suppliers does a car manufacturer source the various components? And how many new cars of a certain model series leave a plant each week? Such information allows conclusions to be drawn about a car manufacturer's strategy and can be of great interest to competitors and other market observers. It is not without reason that this data, which is essential for logistics processes, is subject to a high level of confidentiality. DB Cargo Logistics ensures the security of such information through extensive IT security, combined with clear processes and regular sensitisation of employees.
The benefits for customers and partners
By participating in TISAX, DB Cargo Logistics shows its customers that the high security requirements are taken very seriously. It reduces the inspection effort in the supply chain, minimises risks and increases trust among partners in the automotive industry. The standardised security processes and the associated transparency contribute to a stable, reliable and successful long-term business relationship.
