Cybersecurity Certification for Aramco Vendors

SACS-002 Cybersecurity Certification for Aramco Vendors

Aramco's SACS-002 cybersecurity standard — aligned with Saudi Arabia's National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC) — is a mandatory requirement for any vendor supplying IT, OT, or digital services to Saudi Aramco. Since 2021, all such vendors must pass a third-party cybersecurity assessment before their SACS registration is approved.

What Analytix Does For You

Analytix manages the entire SACS-002 compliance journey: gap analysis against NCA ECC controls, remediation planning and implementation support, preparation of the cybersecurity compliance evidence pack, coordination with an approved third-party assessor, and submission of assessment results to Aramco.

What You Need to Provide

• NCA ECC Gap Analysis Report
• Remediation Plan & Evidence of Implementation
• Information Security Policy Documentation
• Network Architecture & Data Flow Diagrams
• Vulnerability Assessment Results
• Third-Party Assessment Attestation Letter

Get started — free consultation available →