Six.two. If your business is awarded a brand new contract that consists of a cybersecurity classification form not included in The present legitimate certificate, then a whole new certificate should be received and submitted. Companies need to align their policies and practices with Aramco’s defined cybersecurity framework, such as accessibility https://soc2certificationinusa.blogspot.com/2025/04/soc-2-compliance-in-saudi-arabia.html