stay connected
Assessment of Saudi Aramco Cybersecurity Compliance Certificate (CCC)
The purpose of SAMOON cybersecurity assessment is to confirm that [Third Party] has implemented the general requirement information security controls defined in the Third Party Cybersecurity Standard (SACS-002) in addition to the relevant controls as per the Third Party classification. This assessment capture and document a point-in-time implementation status of the existence of the applicable controls as per the Third Party Cybersecurity Standard (SACS-002).
The Cybersecurity Assessment Report identifies and highlights the areas of concern which must be addressed by the third party to acquire the third party cybersecurity compliance certificate that requires full compliance with the Third Party Cybersecurity Standard (SACS-002). The Information Security controls implementation status in [Third Party] is illustrated in the below chart.
This assessment has been conducted based on the information provided by the third party that indicates their cybersecurity posture at the time of the assessment. Audit firm has not evaluated the adequacy or appropriateness of the Standard compiled by Saud Aramco. Audit Firm evaluation was limited to assessment against Saudi Aramco Third Party Cybersecurity Standard (SACS-002) and should not be relied upon as an assurance beyond the areas covered by this Standard. This assessment does not guarantee protection against cyber threats, loss of critical data or network intrusion.
Saudi Aramco Cybersecurity Controls, Policies, Procedures:
Ø Identity and Access Policy Ø Patch Management Policy & Procedure Ø Password Policy Ø Remote Access Policy Ø Acceptable Usage Policy and Security Awareness | Ø Cybersecurity Training Ø User Acceptance Policy Ø User Access Policy Ø Confidentiality and Data Protection Ø Email Domain Usage Policy Ø Prohibition on Using Personal Email for Company Data |
Samoon is a Leading Technology Provider Headquartered in Saudi Arabia, Riyadh
