Engineering Standard
SAES-O-212 10 March 2012
Security Information Protection
Document Responsibility: Safety and Security Standards Committee
Saudi Aramco DeskTop Standards
Table of Contents
1 Introduction.................................................... 2
2 Conflicts and Deviations................................ 2
3 References..................................................... 2
4 General Requirements................................... 3
Previous Issue: New Next Planned Update: 10 March 2017
Page 1 of 3
Primary contact: Abu Alsaud, Ghasan Mahmoud Zaki on 966-3-8763400
Copyright©Saudi Aramco 2012. All rights reserved.
Document Responsibility: Safety and Security Standards Committee SAES-O-212
Issue Date: 10 March 2012
Next Planned Update: 10 March 2017 Security Information Protection
1 Introduction
1.1 This Standard covers mandatory requirements governing information protection
for security systems used at Class 1, 2, 3 & 4 facilities.
1.2 This Standard shall be used in conjunction with Security Directive SEC-12
issued by the High Commission for Industrial Security (HCIS), Ministry of
Interior, Government of Saudi Arabia. The details of the requirements can be
found in SEC-12.
1.3 This Standard shall be used in conjunction with Saudi Aramco Internal Policies,
Data Protection and Retention and applicable Saudi Aramco General
Instructions
2 Conflicts and Deviations
2.1 All conflicts between Standards, Requisitions for Material, related
Specifications, Codes, Forms, Drawings and other documents shall be resolved
as per SAES-O-201, Section 2.
2.2 Any deviations from the provisions of this Standard shall be resolved as per
SAES-O-201, Section 2.
3 References
All referenced Specifications, Standards, Codes, Forms, Drawings and similar material
shall be of the latest issue (including all revisions, addenda and supplements) unless
stated otherwise.
3.1 Saudi Aramco References
Saudi Aramco Engineering Standard
SAES-O-201 Application of Security Directives
Saudi Aramco General Instructions
GI-0299.120 Sanitation and Disposal of Saudi Aramco
Electronic Storage Devices and
Obsolete/Unneeded Software
GI-0299.223 Saudi Aramco Information Protection
Management
GI-0431.001 Protection of intellectual Property
Page 2 of 3
Document Responsibility: Safety and Security Standards Committee SAES-O-212
Issue Date: 10 March 2012
Next Planned Update: 10 March 2017 Security Information Protection
GI-0710.002 Classifications and Handling of Sensitive
Information
GI-0800.006 Review and Approval of Saudi Aramco
Publication and Articles
GI-0850.011 Review and Approval of Saudi Aramco Intranet
Web Content and Web Sites
GI-1603.000 Importation of Communications Equipment
3.2 Other References
Security Directives
SEC-12 Information Protection
4 General Requirements
All security systems deployed for compliance with the Security Directives shall
implement a formal information policy as specified in the Saudi Aramco General
Instructions listed in Section 3 of this standard.
This policy includes data backup, access management, device disposal and business
continuity considerations.
Specific details of the Security Directive requirements can be found in SEC-12.
Revision Summary
10 March 2012 New Saudi Aramco Engineering Standard.
Page 3 of 3
