6.two. If Your organization is awarded a fresh contract that involves a cybersecurity classification type not included in The present valid certificate, then a new certificate needs to be received and submitted. Companies need to align their policies and practices with Aramco’s described cybersecurity framework, which include accessibility controls, incident https://soc2certificationinuae.blogspot.com/2025/04/soc-2-compliance-in-saudi-arabia.html