Cyber Security compliance
Budget: $30 – $250 USD
We want to complete the cyber security compliance of the following
Requirements:
1. Create a folder for each control (23 folders) and place the evidence in the related folder. (See figure-35)
2. When sharing a document highlight the required statement.
3. If you use Group Policy Object (GPO) to configure TPC-2 requirements, enable both (Enable screen saver & Screen saver timeout) for the screen saver settings.
4. If you don’t use remote access solution (TPC-4) or you don’t have data related to Saudi Aramco (TPC-19), provide an inapplicable letter stating the reason why these controls are not applicable.
5. If a control is not applicable, provide an inapplicable letter justifying why. For example, if you do not hold any data related to Saudi Aramco, mention the nature of business between you and Saudi Aramco in TPC-19 letter.
6. The (trust this device) option must be turned off from the admin page of any cloud, email, or website.
7. If the training sessions (TPC-7) are conducted over online meeting platforms (i.e., MS teams, Zoom, etc.), then the attendance report generated by the platform must be shared. Otherwise, another tracking evidence needs to be shared (e.g., a file with all employees’ signatures next to their names must be shared)
8. Reference the clearance form in the off-boarding procedure. (TPC-18)
9. All screenshots must be full screenshots for the whole screen including the taskbar (timestamp). Cropped screenshots are not accepted.
10. All screenshots must include an open window showing the device information and device name. (You can open this window by clicking on the (This PC) icon on desktop, then right-click in the space next to the drives and choose properties).
Requirements:
1. Create a folder for each control (23 folders) and place the evidence in the related folder. (See figure-35)
2. When sharing a document highlight the required statement.
3. If you use Group Policy Object (GPO) to configure TPC-2 requirements, enable both (Enable screen saver & Screen saver timeout) for the screen saver settings.
4. If you don’t use remote access solution (TPC-4) or you don’t have data related to Saudi Aramco (TPC-19), provide an inapplicable letter stating the reason why these controls are not applicable.
5. If a control is not applicable, provide an inapplicable letter justifying why. For example, if you do not hold any data related to Saudi Aramco, mention the nature of business between you and Saudi Aramco in TPC-19 letter.
6. The (trust this device) option must be turned off from the admin page of any cloud, email, or website.
7. If the training sessions (TPC-7) are conducted over online meeting platforms (i.e., MS teams, Zoom, etc.), then the attendance report generated by the platform must be shared. Otherwise, another tracking evidence needs to be shared (e.g., a file with all employees’ signatures next to their names must be shared)
8. Reference the clearance form in the off-boarding procedure. (TPC-18)
9. All screenshots must be full screenshots for the whole screen including the taskbar (timestamp). Cropped screenshots are not accepted.
10. All screenshots must include an open window showing the device information and device name. (You can open this window by clicking on the (This PC) icon on desktop, then right-click in the space next to the drives and choose properties).