Everything You Need to Know About
SirajTech Services

The Cybersecurity Compliance Certification (CCC) is a mandatory requirement for all companies doing business with Saudi Aramco. It verifies that your organization meets the cybersecurity standards defined in SACS-002 and SACS-210, covering 33 controls across 8 domains including access control, endpoint protection, email security, network security, and data backup.

Yes. Saudi Aramco requires all third-party vendors, contractors, and service providers to hold an active CCC certificate. Without it, you cannot execute contracts, be registered as a vendor, or receive payments from Saudi Aramco. Certification must also be renewed annually.

With SirajTech's guided process, most organizations achieve CCC certification in 2–4 weeks. Companies that already have some controls in place (like MFA or antivirus) may certify in as little as 2 weeks. Organizations starting from zero typically take 4 weeks. We provide a clear timeline estimate after your free gap assessment.

SACS-002 is the original Saudi Aramco cybersecurity standard that defines the 33 required controls. SACS-210 is a more recent supplementary standard that expands requirements in areas like identity management, vulnerability management, and incident response. SirajTech supports compliance with both standards.

SirajTech's end-to-end CCC certification package starts at SAR 8,000. This includes the complete gap analysis, all required policy documentation, technical control implementation, evidence collection, and full audit support. Contact us for a free quote based on your organization's size and current security posture.

With SirajTech, we have a 98% first-time pass rate. Before submission, we conduct an internal pre-audit to ensure all 33 controls are met. If any issues are found by the Aramco auditor, we handle all clarifications and remediation at no extra cost until you receive your certificate.

Yes. Aramco CCC certificates require annual renewal. SirajTech offers ongoing maintenance retainers that keep your controls current throughout the year, monitor for new requirements, and handle your renewal submission — so you never risk certificate lapse.

SirajTech is a certified FortiGate partner and recommends Fortinet's Next-Generation Firewalls (NGFW) for most Saudi enterprises. FortiGate provides excellent value with built-in IPS, UTM, SSL inspection, web filtering, and application control. We size, deploy, configure, and manage your FortiGate based on your network requirements.

Unified Threat Management (UTM) combines multiple security features in one appliance — firewall, IPS, antivirus, web filtering, and application control. For most Saudi SMEs and mid-market enterprises, a UTM solution like FortiGate is ideal because it provides comprehensive protection without requiring multiple separate security products.

Yes. Our Professional and Enterprise managed security plans include 24/7 monitoring of your FortiGate firewall with automated alerting. We monitor for unusual traffic patterns, policy violations, and active threat indicators, and we respond immediately to critical alerts — guaranteed within 2 hours.

Yes, we can manage existing FortiGate, Cisco, or compatible firewalls. We will conduct a configuration review, remediate any misconfigurations, optimize rules, and provide ongoing management. Contact us to discuss your existing setup.

Our M365 hardening service covers: Entra ID (Azure AD) configuration, Multi-Factor Authentication (MFA) enforcement, Conditional Access policies for all users and devices, Microsoft Defender for Business deployment, secure email routing, anti-spam and anti-phishing rules, Data Loss Prevention (DLP) policies, and DMARC/DKIM/SPF configuration for your email domains.

MFA is essential but not sufficient on its own. A properly secured M365 tenant also requires Conditional Access policies (to control who accesses what, from where, and on which devices), Defender for Business for threat detection, DLP to prevent data leakage, and secure email configuration. SirajTech implements all of these as part of our M365 hardening.

Yes. Microsoft 365 subscriptions come with many security features that are disabled or misconfigured by default. Most organizations using M365 have significant security gaps even with Business Premium licenses. Our hardening service ensures every security feature is properly configured, reducing your attack surface significantly.

SirajTech uses Acronis Cyber Protect Cloud — one of the most powerful backup and disaster recovery platforms available. It covers physical servers, virtual machines, cloud workloads, and endpoints. Acronis includes built-in anti-ransomware technology that can detect and stop ransomware attacks in real time and automatically recover encrypted files.

With Acronis and our properly configured 3-2-1 backup strategy, most organizations can recover fully within 2–4 hours, depending on data volume. We define Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) specific to your business during setup and test recovery procedures regularly.

We deploy Bitdefender GravityZone — an enterprise-grade endpoint protection platform that includes Advanced Threat Detection, Endpoint Detection & Response (EDR), anti-ransomware, patch management, and centralized management from a single console. It is rated among the top endpoint security solutions by independent testing labs.

The free 30-minute consultation is a no-obligation call with one of our senior security engineers. We will ask about your current environment, any compliance requirements you face (like Aramco CCC), and your key concerns. You will leave with a clear understanding of what you need and a rough cost estimate — at zero cost and zero pressure.

Our Starter Plan starts at SAR 2,500/month (up to 20 users), covering firewall management, endpoint protection, and email security. The Professional Plan is SAR 5,800/month (up to 50 users) and includes CCC certification support, Microsoft 365 hardening, backup, quarterly penetration testing, and a dedicated security manager. Enterprise plans are custom-priced.

Yes. While we are based in Dammam, we serve clients across Saudi Arabia — including Riyadh, Jeddah, Jubail, Khobar, Dhahran, and the rest of the Eastern Province. Most of our services are delivered remotely, and we can provide on-site support when needed across the Kingdom.

We guarantee a 2-hour response time for managed security clients during business hours (Sun–Thu, 9am–5pm). For critical incidents such as active ransomware or system compromise, we provide 24/7 emergency response — call our emergency line and an engineer will respond immediately.