---
titel: "IT for manufacturing companies: TISAX, CRA, NIS2 · SACOSI"
url: https://sacosi.ch/en/industries/manufacturing
seite: /en/industries/manufacturing
stand: 2026-09-24
beschreibung: "IT strategy for manufacturing companies in Switzerland: TISAX in the automotive supply chain, Cyber Resilience Act, NIS2 via EU customers, ISO 9001 and 27001."
---

> Knowledge version of the page https://sacosi.ch/en/industries/manufacturing. It contains the full text, including what is shortened or collapsible on the page itself. Publisher: SACOSI, Situational Awareness Consulting by Ivo Schönberner, Zürich.

# IT in manufacturing.

**Short answer:** For manufacturing companies, IT obligations often arrive via customers: automotive manufacturers require TISAX from their suppliers, EU customers often pass NIS2 requirements down their supply chain, and anyone selling connected products in the EU is subject to the Cyber Resilience Act, whose reporting obligations have applied since 11 September 2026. I clarify which obligations genuinely affect your business and build them into the processes that ISO 9001 and ISO 27001 require in any case.

## Why is IT critical in manufacturing?

- A production stoppage immediately costs revenue and delivery capability.
- Customers assess suppliers' information security before placing orders.
- Products with embedded software bring their own manufacturer obligations.

## Which rules typically need to be checked?

Whether a given rule applies in an individual case depends on size, markets, customers and products. The situation picture clarifies this.

### [TISAX](https://sacosi.ch/en/regulation#tisax)

**Switzerland:** Contractual, in the automotive supply chain. **EU:** Contractual, in the automotive supply chain.

### [Cyber Resilience Act (CRA)](https://sacosi.ch/en/regulation#cra)

**Switzerland:** Applies to Swiss manufacturers selling products with digital elements in the EU. **EU:** Reporting obligations since 11 September 2026, full application from 11 December 2027.

### [NIS2 Directive](https://sacosi.ch/en/regulation#nis2)

**Switzerland:** Not directly. Indirectly via EU subsidiaries, EU customers in the supply chain and for certain digital services. **EU:** Transposed into national law, in Germany since 6 December 2025.

### [ISO 9001](https://sacosi.ch/en/regulation#iso9001)

**Switzerland:** Voluntary, often required contractually. **EU:** Voluntary, often required contractually.

### [ISO/IEC 27001](https://sacosi.ch/en/regulation#iso27001)

**Switzerland:** Voluntary, often required contractually. **EU:** Voluntary, often required contractually.

### [EU General Data Protection Regulation (GDPR)](https://sacosi.ch/en/regulation#dsgvo)

**Switzerland:** Applies to Swiss companies that offer goods or services to individuals in the EU or monitor their behaviour. **EU:** Applies since 25 May 2018.

## How can I help?

### [Situation picture for investments](https://sacosi.ch/en/investors)

IT due diligence before the investment, or the situation picture in the first weeks afterwards: risks, costs, dependencies and obligations of the investment on a single page, with measures ranked by impact and effort.

### [Fractional CTO for a defined period](https://sacosi.ch/en/fractional-cto)

Technical leadership for a defined period: architecture, team, security, due-diligence readiness. The goal is a handover to a permanent CTO or the company's own team.

### [Compliance roadmap](https://sacosi.ch/en/regulation)

Which standards and laws apply to your business, in what order to address them, and how the evidence is built up in an auditable system, for example for ISO 27001, ISO 9001 or TISAX.

### [Scaling architecture](https://sacosi.ch/en/it-architecture)

A target architecture without legacy baggage that supports the planned growth: identity, workplace, cloud, local AI, costs in proportion to budget.

Back to the [industry overview](https://sacosi.ch/en/industries) or the [overview of all rules](https://sacosi.ch/en/regulation).

## What is the situation in your company?

Thirty minutes, no presentation. You describe the situation, I ask questions. Afterwards, we both know whether a situation picture is worthwhile.

CH +41 78 251 09 69 DE +49 152 27602667 ZRH 47.3769°N · FRA 50.1109°N · German, English