FAQs - DAF Trucks N.V.

1. Which TISAX labels are required for DAF Trucks suppliers?

Required TISAX Labels: Click here

2. My organization already has a certification/audit report based on another cybersecurity control framework. Do we still have to acquire the TISAX Labels?

The only valid alternative is an ISO 27001 certificate, which covers the products and services provided to DAF.

In case you have received a request to achieve TISAX and want to use your ISO 27001 certification instead, please direct your request to DAF Trucks Cybersecurity: Cybersecurity@daftrucks.com.

Supplier needs to provide a pdf of the ISO 27001 certificate, expiry date, scope description and the ‘Statement Of Applicability’.

In addition supplier declares that the scope of the ISO 27001 certificate covers the products and services provided to DAF.

3. What if we identify issues during the TISAX Assessment?

The TISAX process includes a mechanism to deal with identified issues in a reasonable time frame for up to 9 months while preliminarily receiving the TISAX Label. Suppliers are obliged to obtain the required TISAX Label before the deadline.

4. What are the costs to obtain the TISAX Label?

The total cost of gaining TISAX Label is a sum of ENX Registration, Auditor fees and potential remediation costs where applicable.

Further information can be found www.enx.com.

5 Who pays the costs involved obtaining TISAX Label?

TISAX is a generic assessment scheme and its use is not limited to DAF Trucks, suppliers are responsible for being TISAX compliant and will pay all associated costs.

6. Which of the suppliers sites should achieve TISAX?

All sites of a supplier that are utilized for manufacturing and/or delivery of parts/products/services to DAF Trucks are in scope for TISAX compliance.

7. How can the TISAX Label be shared to show compliance?

Suppliers must share their TISAX Label with PACCAR/DAF on the ENX platform as described in the TISAX handbook. The audit result in ENX becomes available to PACCAR and DAF Trucks for monitoring. The level of sharing should be at least “A+Labels”.

8. Which resources can I use to learn more about ENX and TISAX?

Via the website: www.enx.com. Also review the TISAX handbook, that can be found on this website.

9. Where can I find professional support to become TISAX compliant?

There are cyber security and TISAX consultancy service providers in Europe, North America and Asia/Pacific. Suppliers can make their own choice to arrange support.

10. What if a cyber incident occurs at one or more of my sites involved in the supply, production of goods and/or services to DAF Trucks?

Reporting a Cyber incident is a part of the DAF Trucks Incident Management process.

Suppliers are expected to report incidents and/or Cyber attacks relevant to DAF Trucks according to the contractual obligations via email: ITD_EU_Security@paccar.com

11. I’ve already provided cybersecurity related information to DAF, do I still need to comply with the request?

Yes, DAF may for example have approached you to provide deliverables in the context of the R155/R156 regulation. These requests and the supply chain cybersecurity related requests run in parallel.

12. My organization has achieved a different TISAX label than required by DAF. Is this accepted?

This deviation is only accepted until the upcoming expiration date of your current label.

13. How do I Share my TISAX Assessment Result with DAF / PACCAR?

Log in to the ENX portal.
Go to the main navigation bar and select “MY TISAX”.
From the dropdown menu, select “SCOPES AND ASSESSMENTS”.
Go to the table find the table row with your assessment scope.
Verify that your assessment scope has the assessment scope status “Active” (column “Scope Status”).
Go to the end of the table row of your assessment scope and click the button with the down arrow.
Select “Scope Information”.
In the new window (“Scope Information”), select the tab “EXCHANGE”.
Go to the section “SHARING” and click the button “Share”.
In the new window (“SHARE THIS SCOPE”), enter your DAF’s Participant ID: PYT3F4 (or select him from the participant list in the neighbouring search box).
Select the desired sharing level (A+ Labels).
Enter your DAF Supplier Number (If you do not know the DAF Supplier Number; it is a 5 digit number and can be found on any Invoice).
Note! In case you are also a PACCAR, Leyland or DAF Brasil supplier, different supplier number formats can be used and can be added by using a ‘,’).
Note! When the wrong format is used, an error message will appear.
Click the button “Next”.
Read and understand the instructions regarding the permanence of the sharing permission.
Mark the two “confirm” check boxes.
Click the button “Submit”.