The timeframe for the ISO 27001 and TISAX audit processes may vary depending on the size and complexity of the organization and the experience of the auditor. Below are some general guidelines for both standards: ISO 27001: Preparation phase: 1-3 months Implementation phase: 3-12 months Internal audits: 1-3 months External certification audit (Stage 1 & Stage 2): 1-3 months In total, the process from preparation to certification can take 6-18 months. TISAX: Preparation phase: 1-3 months Implementation phase: 3-6 months Internal audits: 1-2 months External TISAX assessment: 1-3 months Overall, the TISAX process can take 6-12 months from preparation to successful assessment, depending on the size, resources and complexity of the organization. Please note that these timescales are indicative only and may vary from company to company. It is advisable to work with an experienced consultant or auditor to get a realistic estimate of the time required for your specific situation.