Six.2. If your organization is awarded a whole new deal that will involve a cybersecurity classification sort not lined in the current valid certificate, then a brand new certificate ought to be received and submitted. Organizations must align their policies and tactics with Aramco’s defined cybersecurity framework, like access controls, https://iso22301businesscertification.blogspot.com/2025/04/soc-2-compliance-in-usa-fostering.html