also for the automotive industry we need to follow IATF-regulations which involves TISAX, have you heard of that? https://www.dnv.com/services/tisax-r-automotive-sector-information-security-185873/