1
Asset Management
Inventory, owners, device management
Aramco · SACS-210
Download from sourceAramco Third-Party Cybersecurity Standard (SACS-210)
A third-party cybersecurity standard issued by Saudi Aramco defining requirements for suppliers and contracted organizations. It covers systems, data, and the technical and operational environments connected to Aramco work — supporting readiness for supplier qualification and compliance requirements.
Third-party cybersecurity coverage aligned with SACS-210 — from cloud to operational environments.
Issuing AuthoritySaudi AramcoVersionSACS-210Year2026Bound AudienceAramco suppliers
15
Controls covered
24+
Active technologies
11
Security domains
Who are you?
Aramco · SACS-210Coverage map
Aramco Third-Party Cybersecurity Standard (SACS-210) coverage map
The more controls a technology covers, the closer it sits to the strategic tier. Click a technology to explore it.
Covered controls and matching solutions
2
Identity, Authentication & Access
Least privilege, MFA, SSO, remote
3
Data Security & Protection
Encryption, DLP, customer-data separation
4
Email Security
DMARC, scanning, macro blocking
5
Platform & Endpoint Security
Endpoint FW, WAF, IPS, EDR, hardening
Advisory services
Cybersecurity Advisory Services
Local delivery depth that complements the technologies: security architecture design, gap assessment, penetration testing, and incident response — addressing 10 of Aramco · SACS-210's controls that call for advisory expertise, not a product alone.
- Architecture design
- Gap assessment
- Penetration testing
- Incident response
Need something more specific?
Let's design the right path for you
Every organization has its own regulatory context and priorities. If nothing above matches your situation exactly — or you'd prefer an approach built around your reality — talk to Looptech experts to understand your needs and design a path that fits your environment and requirements.