The official standard for Saudi Aramco CCC certification
Our download provides the complete and official SACS-002 Third Party Cybersecurity Standard. This document outlines the minimum cybersecurity controls required by Saudi Aramco for all contractors and suppliers.
The official standard published by Saudi Aramco, essential for any organization pursuing CCC certification.
Comprehensive coverage of all cybersecurity areas required for Aramco CCC certification.
The 23 mandatory controls for all third parties, covering Governance, Access Control, Data Security, and more.
Additional controls for vendors with network connectivity, those processing critical data, or providing cloud services.
Detailed, step-by-step Cybersecurity Incident Response Instructions that must be followed.
A complete list of all system and security events that must be capable of being audited.
Download the official SACS-002 standard and get expert guidance from our certified compliance professionals.