Success Story: Izmar Automotive

One of our company’s most comprehensive success stories is the work carried out alongside Izmar Automotive, with whom we have built a relationship of trust that began with TISAX certification and continues today through projects that keep raising their level of cybersecurity maturity. For this reason, we want to share how the process unfolded from day one.

Izmar Automotive is a company specializing in the development and manufacturing of containers and logistics equipment for the automotive sector, with over 30 years of experience. From its facilities in the Technological and Logistics Park of Vigo, Izmar supports leading players in the automotive industry in optimizing their logistics processes.

The Challenge

The automotive sector is one of the most demanding when it comes to information security: manufacturers increasingly require their supply chain to demonstrate an adequate level of protection, with TISAX (Trusted Information Security Assessment Exchange) serving as the benchmark standard to accredit this capability.

Izmar Automotive faced a threefold challenge:

• Accrediting its level of security to clients by obtaining the TISAX label, an increasingly required prerequisite to operate in the sector.
• Establishing a stable and professionalized security function, which is often difficult to manage internally for a medium-sized industrial company.
• Maintaining and expanding what was built over time, evolving toward a comprehensive cybersecurity model.

Lacking an information security management system means not having effective protection against risks and threats and, consequently, missing the mechanisms to handle incidents with confidence. In Izmar’s case, information security has also become a key factor in meeting the expectations and requirements of automotive clients.

Inprosec’s Solution

The main objective of the project was to prepare Izmar to successfully pass the TISAX assessment within a reasonable timeframe—a goal achieved in 2025. To accomplish this, InprOTech designed and executed a roadmap structured into the following phases:

• Baseline analysis: As a starting point, a comprehensive analysis of Izmar’s level of compliance against the VDA ISA control catalog was conducted, identifying existing gaps and establishing priority action items.
• Asset inventory and risk assessment: Information assets were cataloged, the risk methodology was defined and documented, and a risk treatment plan outlining specific actionable steps was produced.
• Definition, implementation, and improvement of security controls: The full regulatory framework (security policy, regulations, and procedures) was developed, necessary technical and organizational measures were deployed, and staff awareness was addressed—a critical factor in the TISAX maturity model.
• Assessment support: InprOTech accompanied Izmar throughout the audit process with the assessment provider, preparing the required documentation and evidence and addressing observations until the TISAX label was granted in August 2025.

Since then, InprOTech continues to support Izmar Automotive on its path of continuous improvement in cybersecurity, working closely with deep knowledge of their organization and industry.

Results

Thanks to the joint efforts of Izmar Automotive and InprOTech, the following key benefits were achieved:

1. Achievement of TISAX Certification, accrediting Izmar’s high standard of information security in compliance with automotive industry requirements and strengthening its positioning as a trusted supplier within the supply chain.
2. Increased information security maturity level, featuring an implemented, documented, and operational management system that serves as a foundation for continuous improvement.
3. Enhanced incident response capabilities, thanks to the processes, controls, and technical measures implemented during the project.
4. Strengthening of the human factor, with more aware and prepared personnel ready to identify and manage risk situations in their daily operations.
5. Consolidation of Izmar Automotive as an organization that actively promotes information security, turning cybersecurity into a competitive advantage and a driver of trust for its clients.

The case of Izmar Automotive proves that cybersecurity is not a one-time project, but a journey of continuous improvement: moving from market-mandated compliance to a robust, lasting security model that grows alongside the organization.