6 Phases of ARAMCO CCC implementation
1. IT
Documentation
IT documentation that outlines the current IT infrastructure, identifies potential threats and risks, and defines the security requirements for the organization. This documentation provides a roadmap for the implementation and helps ensure that all necessary IT infrastructure is properly secured.
2. Cybersecurity
Training
In order to ensure that employees are aware of the importance of cybersecurity and how to identify potential threats, cybersecurity training is provided. This includes training on how to identify potential threats, how to respond to security incidents, and how to maintain a strong cybersecurity posture.
3. Technical
implementation
This phase involves the deployment of the cybersecurity center and associated technologies, processes, and policies. This includes the installation and configuration of hardware and software, implementation of security protocols, and ensuring that all systems and devices are properly secured.
4. Technical Evidence
Collection
During the testing phase, technical evidence is collected to ensure that the security systems and processes are functioning as expected. This evidence may include vulnerability scans, penetration testing, and other technical tests to ensure that the systems and processes are robust and effective.
5. CCC Workpaper &
Submission
Once the technical evidence has been collected, a workpaper is developed that documents the results of the testing and provides recommendations for improvement which need to address. This workpaper is then submitted to the ARAMCO CCC for a final review and approval.
6. Assitance Until
Certificate is Received
Once the workpaper has been submitted, the ARAMCO CCC will review and provide feedback. The implementation team will work with the ARAMCO CCC to address any issues or concerns, and will provide assistance until the organization receives its certificate of compliance.