A structured readiness service for Aramco suppliers: assess cybersecurity gaps, implement the agreed controls and prepare your evidence for independent audit.
Suppliers preparing for an initial assessment or renewal, and businesses closing cybersecurity control gaps.
See how assessment, control implementation and evidence preparation fit into your Arselor engagement.
Select a branch to explore the service.
Turn the applicable requirements and current environment into a practical action plan.
Coordinate the agreed technical controls and the documentation that supports them.
Organize evidence and support coordination with the authorized independent assessor.
Scope is tailored to your environment and agreed service plan.
Start with the applicable requirements, assets and current controls. Arselor records the gaps, assigns owners and agrees the remediation sequence so your team knows what to prepare and which evidence supports each control.
Put the agreed improvements into practice across access, devices, network security and operating procedures. We coordinate technical changes with your team, document the configuration and track each action back to the readiness plan.
Bring policies, asset records and implementation evidence into a clear, reviewable pack. We help your team prepare the handover to its selected authorized audit firm and organize responses to observations, with owners for keeping the evidence current.
Organize policies, configuration evidence and supporting records into a traceable handover. Arselor coordinates preparation and responses; assessment and certificate issuance remain with the independent Aramco-authorized certification body.
Start with your applicable requirement set, environment and existing evidence. We translate the gap assessment into a practical list of technical and documentation actions.
Coordinate endpoint protection, firewall settings, access management and policy documentation within the agreed scope. Assign owners so evidence remains maintainable.
Organize evidence, track outstanding actions and support the review journey. The formal assessment and certificate decision remain with the authorized independent audit firm.
Build a readiness plan from the systems, people and requirements that apply to your organization.
Discuss this use caseReview changed systems, current evidence and previously assigned actions before the next assessment.
Discuss this use caseTurn assessment observations into owned tasks with evidence and a reviewable completion status.
Discuss this use caseReview your supplier classification, business systems, locations and assessment or renewal timeline. Agree the responsibilities and the evidence already available.
Review the applicable controls against your current environment. Build an action register with an owner, priority and completion evidence for each gap.
Coordinate agreed configuration changes, policies and operating procedures. Collect dated evidence as work is completed and keep it organized by requirement.
Review the evidence pack with your team, coordinate with your selected authorized audit firm and support responses to observations. Keep a clear record for ongoing readiness and renewal.
The programme assesses third-party cybersecurity compliance with Aramco’s applicable requirements. Your supplier classification determines the scope and assessment route.
An agreed readiness engagement: gap assessment, remediation support, policies and procedures, evidence organization and audit coordination. We work with your current environment and the actions required for your scope.
An Aramco-authorized independent audit firm conducts the formal assessment and issues the certificate. Arselor prepares and supports your organization through that process.
Yes. Share your current certificate scope, the changes to your environment and your target date. We review existing evidence and outstanding actions, then agree a preparation plan with your team.
Technology planning, infrastructure reviews, digital governance and practical training aligned with your business priorities.
Clarify requirements and compare alternatives before committing to a platform or supplier.
Ad-hoc assistance and annual maintenance for users, devices, applications, networks, servers and cloud systems.
Create a dependable contact point for staff and a maintenance plan for the systems they rely on.
Protect servers, endpoints, cloud workloads and Microsoft 365 data with monitored backups and planned recovery testing.
Recover the required data from an appropriate restore point, following the agreed retention policy.
A focused conversation with the right Arselor specialist.
