What does CCC mean?
CCC refers to the cybersecurity compliance certification process applicable to relevant Saudi Aramco suppliers and contractors. The supplier must understand its official scope, implement the applicable controls and maintain evidence that demonstrates operation.
What does readiness involve?
Readiness commonly includes governance, risk management, policies, identity and access, endpoint and network security, email protection, backups, monitoring, incident response, supplier management and awareness. The applicable requirements must be confirmed from the authoritative instructions provided to the supplier.
Certification and consulting roles
A consulting team can assess readiness, support remediation and organize evidence. The certification or assessment decision remains with the authorized assessment party. Review our Aramco CCC support service for the implementation approach.
