6.2. If your business is awarded a new deal that consists of a cybersecurity classification sort not lined in the current valid certificate, then a different certificate should be acquired and submitted. Organizations will have to align their guidelines and procedures with Aramco’s outlined cybersecurity framework, such as access controls, https://fismacomplianceinusa.blogspot.com/2025/02/strengthening-digital-defenses-with-web.html