SACS-002 Documentation Suites

Simplify Your Saudi Aramco SACS-002 Compliance Journey

The SACS-002 Documentation Suite is a comprehensive, ready-to-use collection of Microsoft Word templates designed specifically to help Saudi Aramco vendors, suppliers, and third parties meet their cybersecurity compliance mandates.

Navigating cybersecurity frameworks can be time-consuming. This suite eliminates the guesswork by providing the exact administrative and policy foundations required to pass the mandatory General Requirements (Controls TPC-1 through TPC-23) of the SACS-002 standard.

What’s Included in the Suite?

You will receive a downloadable ZIP file containing 9 fully editable, professionally formatted Microsoft Word documents:

• Acceptable Usage Policy (AUP): A robust 18-page policy covering passwords, data confidentiality, internet usage, remote access, and incident management.
• Clearance Checklist Form: A standardized employee off-boarding form to ensure the safe return of IT assets and revocation of access.
• Confirmation and Commitment Letter: A formal declaration to the Saudi Aramco Information Security Department affirming your current environmental status.
• Ownership Confirmation Memo: An internal tracking document linking users to their assigned IT equipment.
• Policy and Procedures Email: A pre-written draft to officially communicate the new AUP to your staff.
• Aramco Vendor Portal Access Procedure: A standardized letter detailing the process for granting and managing Aramco extranet credentials.
• Remote Access Inapplicability Letter: A formal waiver template to justify the non-use of VPNs in your environment.
• Third Party Classification Confirmation Letter: A form to officially declare your SACS-002 vendor classification to Aramco.
• Inapplicable Controls Form: A template to formally document and justify any SACS-002 controls that are technically unfeasible for your business.

Key Benefits:

• Save Time & Money: Skip hours of drafting policies from scratch or hiring expensive consultants.
• Fully Customizable: Easily replace placeholders (like [Company Name]) with your own corporate identity and branding.
• Pre-Mapped for Auditors: Documents are written with the specific language and requirements of the SACS-002 framework in mind.

Note: This suite fulfills the "documentation and policy" requirements of the SACS-002 standard. Full compliance requires your IT team to configure the associated technical controls.