Six.2. If your business is awarded a whole new contract that will involve a cybersecurity classification form not lined in the current legitimate certificate, then a brand new certificate needs to be received and submitted. The main oil and petrochemical agency Saudi Aramco made and implemented the Aramco cyber security https://iso31000certificationinsaudiarabia.blogspot.com/2025/03/aramco-compliance-meets-strategic.html