Compliance
SABIC Cyber Trust Certification for Vendors: Get Audit-Ready with Waves
SABIC cyber trust certification is the cybersecurity certificate SABIC asks suppliers in certain classifications to hold before they work with it. Waves Telecom prepares SABIC vendors for the audit, closes the gaps and keeps them compliant at renewal.
- 150+ companies passed Aramco CCC with Waves
- Typical readiness in 3–5 weeks
- Based in Al Khobar, near Jubail
10 yearsin cybersecurity
150+companies passed Aramco CCC
Gold PartnerSophos & Fortinet
What SABIC cyber trust certification means today
Many SABIC suppliers still search for "SABIC cyber trust certification". The name has changed, but the requirement has not gone away. SABIC's supplier portal says its previous CyberTrust Certificate Program has moved into the Cybersecurity Compliance Certificate (CCC) program. It is mandatory for new and existing suppliers who fall under the relevant cybersecurity classification.
This is the same CCC that Aramco runs. Aramco states that the CCC is accepted by Aramco, SABIC and other Aramco Group companies. In practice, one certificate can open doors across the Group. A gap in your controls can also block you across the Group.
Waves Telecom has 10 years in cybersecurity and certified staff in Al Khobar. We have supported 150+ companies through Aramco CCC, and all of them passed. We are the readiness and remediation partner. The certificate itself is issued by an authorized audit firm.
The rules behind SABIC supplier cybersecurity
SABIC's Group CCC page sets out the basics. Authorized audit firms assess suppliers against the Third Party Cybersecurity Standard and issue the certificate. Certificates are valid for two years from the issue date. If a new engagement falls under a classification your current certificate does not cover, you must obtain and submit an additional certificate.
Aramco's programme page now names SACS-210, the Third Party Cybersecurity Standard, as the governing standard, marked new for 2026. Classifications include General Requirements, Outsourced Infrastructure, Customized Software, Cloud Computing, Operational Technology and Network Connectivity. Critical Data Processor suppliers need CCC+, an on-site assessment. If you fit more than one classification, you must meet the controls of each one.
SABIC questions about the programme go to GroupCCC@sabic.com, as listed on SABIC's supplier portal.
The CCC is accepted by Aramco, SABIC and other Aramco Group companies, and is valid for 2 years from the issue date.
How Waves gets SABIC vendors ready
Confirm your classification
We review your SABIC scope and contract type with you. This tells us which control set the audit firm will check.
Gap assessment
We test your current setup against the Third Party Cybersecurity Standard. You get a clear list of what passes and what needs work.
Policies and evidence
We prepare the cybersecurity policies, procedures and incident response plan the standard expects, written for your company.
Fix the technical gaps
We deploy and configure the controls: firewall, endpoint protection, MFA, backup, patching and access control.
Audit support
We organise your evidence, run a mock review and support you while the authorized audit firm completes its assessment.
Stay compliant
We track your two-year expiry and any new classification, so your renewal starts in good time.
Who needs this and what is included
New SABIC suppliers
Companies registering with SABIC that fall under a cybersecurity classification and need a certificate before contract award.
Existing vendors renewing
Suppliers whose two-year certificate is due, now assessed against the current standard.
Vendors adding scope
Suppliers taking on cloud, software, network or OT work that their current certificate does not cover.
Technical remediation
Supply and setup of Sophos and Fortinet firewalls, endpoint protection, MFA and backup to close audit findings.
Documentation pack
Policies, procedures, asset lists and evidence folders organised the way auditors review them.
IT and OT sites
Support for suppliers in Jubail and the Eastern Province whose work touches plant or operational networks.
Brands and partners
SophosFortinetMicrosoftKnowBe4DellHPECisco
Frequently asked questions
Is SABIC Cyber Trust still a separate certificate?
No. SABIC's supplier portal says the previous CyberTrust Certificate Program has transitioned into the CCC program. Aramco also states that the CCC is accepted by SABIC and other Aramco Group companies.
If we already hold an Aramco CCC, do we need anything else for SABIC?
Aramco states that SABIC accepts the CCC. You may still need an additional certificate if your SABIC work falls under a classification your current certificate does not cover. We can check your scope against your certificate.
Does Waves issue the SABIC certificate?
No. Certificates are issued by authorized audit firms after their assessment. Waves prepares you for that audit, fixes the gaps and supports you until the assessment is complete.
How long does it take to get ready?
For Aramco CCC, our typical timeline is 3–5 weeks. The time depends on your classification and how many gaps we find. A gap assessment gives you a realistic plan at the start.
How long is the certificate valid?
SABIC's portal states certificates are valid for two years from the issue date. We record your expiry date and contact you well before renewal.
What usually causes a supplier to fail?
Common gaps are missing policies, no MFA on remote access, untested backups and weak patching. Missing evidence is another frequent issue, even when the control exists. We check each of these before the audit firm does.
Do you support suppliers outside the Eastern Province?
Yes. We are based in Al Khobar and work on site in Dammam, Dhahran and Jubail. We support suppliers in Riyadh and other cities on site or remotely.
Find out where you stand before the audit
Tell us your SABIC scope and current setup. We will reply with a gap check and a clear plan to get audit-ready.
- 📞 +966 58 236 5619
- 💬 +966 58 236 5619
- ✉️ info@wavestelecom.net
- 📍 3266 Adh Dhahran – Al Aqrabiyah Dist, Al Khobar 34446
