ISA 6 will be used for all TISAX Assessments ordered after today
ISA 6 significantly enhances incident and crisis management requirements, adds new controls and requirements to further strengthen ransomware and APT resilience, and confirms its applicability to shopfloor IT and OT by mapping and referencing the ISA/IEC 62443-2 standard.
ISA 6 is now mandatory for all new TISAX assessments. Assessments that were started according to the old ISA 5.1 (including corrective action plan assessments, follow-ups and scope extension assessments) can continue to be carried out according to the old standard.