6.2. If Your business is awarded a different agreement that requires a cybersecurity classification type not included in the current legitimate certificate, then a new certificate has to be attained and submitted. The key oil and petrochemical business Saudi Aramco produced and carried out the Aramco cyber security certificate, also https://iso22301certificationus.blogspot.com/2025/04/soc-2-compliance-in-uae-strengthening.html