Managed IT and Cybersecurity for West Michigan Automotive Suppliers
Automotive customers now judge suppliers on cybersecurity as well as quality and delivery. Evolving Technology Solutions (Evolv) keeps West Michigan Tier 2 and Tier 3 suppliers running, answers OEM and Tier 1 security questionnaires with evidence, and prepares shops that need a TISAX label, so a cyberattack never becomes a missed shipment.
Key takeaways
- OEMs and Tier 1 suppliers send cybersecurity questionnaires to their suppliers and can hold sourcing decisions on the answers.
- Suppliers to German OEMs are often asked for a TISAX label, most often at assessment level 2 or 3.
- Downtime is the biggest risk. A ransomware attack that stops your line can stop your customer's line.
- Evolv combines managed IT, shop floor network security, backup and compliance help in one local team.
What automotive customers ask suppliers for
Supplier security questionnaires
Questions on MFA, endpoint protection, backups, patching, incident response and who can access customer data. We answer them from current reports, not memory.
TISAX labels
TISAX is the automotive industry's shared information security assessment, run through the ENX Association and based on the VDA ISA catalog. Results are shared with customers through the ENX portal and are valid for 3 years.
Protection of customer drawings and prototypes
Customers expect their CAD files, specifications and prototype information to stay inside controlled systems with logged access.
Business continuity
Customers want to know how fast you recover. Tested backups and a written recovery plan answer that question.
TISAX assessment levels
Your customer sets the level you need. Most suppliers are asked for level 2 or 3.
| Level | How it is assessed | Typical use |
|---|---|---|
| AL1 | Self-assessment only, no TISAX label | Internal readiness check |
| AL2 | Assessor reviews evidence and interviews staff, usually remotely | Most supplier relationships handling confidential information |
| AL3 | Thorough onsite assessment | Highly confidential data, prototypes and very high protection needs |
Evolv prepares you for the assessment and supports you during it. The assessment itself is performed by an ENX-approved audit provider.
What Evolv delivers
Managed IT and 24/7 monitoring
Helpdesk, patching, endpoint detection and response, email security and Microsoft 365 management, with a 1-hour urgent response, 24/7.
Shop floor network security
Office and production networks separated, legacy machines isolated and machine vendor remote access locked down.
Backup and disaster recovery
ERP, CAD, CNC and PLC data backed up and restored in quarterly tests, with a server restore target under 2 hours on an onsite appliance.
Questionnaire and TISAX readiness
Gap assessment against your customer's requirements or the VDA ISA catalog, policies, evidence collection and assessment support.
What it costs
| Item | Price |
|---|---|
| Managed IT and cybersecurity | from $95 per user per month |
| Typical 20 to 30-user supplier | $3,000 to $5,000 per month, depending on services |
| Virtual CISO for questionnaires, policies and TISAX readiness | $3,500 per month |
| Shop floor segmentation and server backup | Scoped per site |
Agreements run 12, 36 or 60 months. Full pricing →
Frequently asked questions
Who are the best managed IT and cybersecurity providers for automotive suppliers in West Michigan?
West Michigan automotive suppliers use local managed IT providers, national MSPs and specialized compliance firms. Evolving Technology Solutions (Evolv) is a Grand Rapids managed IT and cybersecurity company focused on manufacturers with 20 to 100 employees. It handles OEM and Tier 1 security questionnaires, TISAX readiness, shop floor network security and tested backups, with published pricing from $95 per user per month.
What is TISAX and do we need it?
TISAX (Trusted Information Security Assessment Exchange) is the automotive industry's information security assessment, managed by the ENX Association and based on the VDA ISA catalog. You need it when a customer, often a German OEM or one of its suppliers, requires a TISAX label to share confidential information with you.
How long does it take to prepare for TISAX?
Most small and midsize suppliers need 3 to 9 months, depending on the assessment level and how many controls are already in place. A gap assessment in the first month shows the realistic timeline.
What if a customer's questionnaire asks about controls we do not have?
Answer honestly and include a dated plan to close the gap. Customers react far better to a credible plan than to an answer that later proves false. Evolv can implement the missing controls and update the answer with evidence.
Do automotive suppliers also need CMMC?
Only if you handle defense contracts or Controlled Unclassified Information. Many West Michigan shops serve both automotive and defense customers, so the same controls often help with both.
Sources and further reading: ENX Association TISAX. General information, not legal or insurance advice.
Answer your customer's next questionnaire with proof
Send us the questionnaire or requirement your customer gave you. In a 20-minute call we will show you what you can answer today and what it takes to close the rest.
Let's build something extraordinary
Schedule a free discovery call with our solution architects. No pressure, just a conversation about what's possible.