6.2. If your company is awarded a brand new contract that will involve a cybersecurity classification type not included in the current legitimate certificate, then a new certificate needs to be acquired and submitted. Companies will have to align their procedures and methods with Aramco’s described cybersecurity framework, like accessibility https://cybersecurityinriskmanagement.blogspot.com/2025/04/securing-future-of-digital-enterprises.html