Skip to content
Current language: English
EPS Portal
Current language: English

EPS CYBERSECURITY

Practical cybersecurity. A clear next step for your business.

Secure supported email, accounts and devices, choose Kaspersky business licences, or prepare for an Aramco CCC assessment. Start with the priority that matters to your business.Account and device security. Kaspersky business licences. Aramco CCC preparation.

WHY WORK WITH EPS

A local team. Practical help with your next step.

Discuss your cybersecurity needs with a team you can meet, then agree the reviews, site visits and implementation work your business needs.

  • Registered with the NCA

    EPS’s legal entity is registered through Haseen as a provider of cybersecurity services, solutions and products.

  • Support that can come to your site

    Site visits and on-site cybersecurity work can form part of the agreed engagement, with remote coordination where appropriate.

  • Help beyond the findings

    Turn agreed findings into prioritized actions. Configuration, remediation and verification are available through a separately commissioned implementation scope.

  • Clear outputs and handover

    Know what is included, who owns each action, and which records, evidence and handover materials the engagement will provide.

Aramco CCC preparation

Prepare the work. Keep the audit independent.

Understand the applicable gaps and prepare the agreed readiness and evidence pack. Your selected Aramco-authorized auditor handles formal assessment and CCC issuance.

Make the preparation easier to act on.

  • Priorities grounded in your actual working environment
  • Help organizing readiness evidence for your selected auditor
  • On-site reviews and implementation where separately agreed

EPS PREPARES

Scope, gaps & readiness evidence

YOUR AUTHORIZED AUDITOR

Formal assessment & CCC issuance

  1. Aramco CCC readiness and preparation

    View full scopeClose scope

    For Aramco suppliers and prospective vendors with a confirmed CCC requirement. EPS confirms the customer classification and applicable controls, reviews the current state and gaps, and prepares a readiness plan with named owners. We tailor policies and organize authentic evidence of controls actually in place, coordinate agreed remediation, then review readiness and assemble an evidence pack. With your authorization, we coordinate with your selected Aramco-authorized auditor. You provide accurate information, access and genuine evidence and remain responsible for implementing and operating controls. Preparation, implementation, licences and auditor fees are separately agreed; implementation is separately scoped. The auditor performs the formal assessment and issues CCC. Certification and timing are not guaranteed.

    Confirmed classification and applicable controls · Gap review and named action owners · Authentic evidence and readiness pack · Authorized auditor coordination

  2. SME security review and action plan

    View full scopeClose scope

    A full gap assessment of the applicable controls in the agreed organizational and systems scope. The engagement records the baseline and version, control coverage, required evidence and exclusions. Evidence sampling is recorded separately from control coverage; a selected-check review is not described as a full assessment. Implementation is separately scoped.

    Agreed baseline and coverage · Evidence-linked gaps · Prioritized recommendations and named action owners

Kaspersky for business

Authorized Kaspersky Partner in Saudi Arabia

Business licensing

Product selection, licence sales and renewals for your business.

Separately agreed implementation

Deployment, configuration, testing and handover within the agreed scope.

  1. Kaspersky licensing and implementation

    Kaspersky Registered B2B Partner

    Kaspersky licence sales and renewals, with help selecting suitable products for your business. Implementation is agreed to scope and includes deployment, configuration, testing and handover. After-sales assistance covers renewal assistance, licence queries and support coordination.

    Licence purchase does not automatically include deployment.

    Endpoint protection and device setup
Discuss Kaspersky licensing and setup

Endpoint & account security

Secure the systems your team uses every day.

Bring business email, account access and supported devices into a clearly defined configuration project. Choose the modules you need, with named management ownership and a documented handover.

  • Agreed configuration
  • Verification results
  • Documented handover
  1. Business email and account security

    View full scopeClose scope

    A standalone implementation project for agreed account and access controls, email authentication and sharing settings supported by your platform. Changes are approved, tested and handed over with a configuration and change record. Required licences are agreed separately. Ongoing administration, migrations and incident response are excluded.

    Agreed settings · Test results · Change record and handover

  2. Endpoint protection and device setup

    View full scopeClose scope

    Choose protection deployment, device-security configuration (Foundations), or both for supported business devices. Protection deployment covers the agreed endpoint protection setup; Foundations covers the agreed device settings. Foundations excludes patch deployment and encryption management. Each module records management ownership, verification results, exceptions and handover. Licences are separately agreed. EPS alert monitoring and SOC services are not included.

    Selectable modules · Named management owner · Verified configuration and handover

Enquire about account and device security

Supporting foundations

Make security practical for your team.

Support the technical work with usable policies, staff awareness and agreed backup restore tests. Explore the scope of each engagement below.

  1. Practical security policies and procedures

    View full scopeClose scope

    Tailored access and joiner-leaver procedures, acceptable-use rules, backup procedures and incident-reporting guidance for your organization. Agree named responsibilities, approval and review arrangements, then hand over the documents and working guidance. Documents alone do not demonstrate that controls have been implemented.

    Tailored procedures · Named responsibilities · Approval and review arrangements · Handover

  2. Employee awareness and response planning

    View full scopeClose scope

    Awareness sessions and reporting guidance, an agreed response plan, and a discussion-based tabletop exercise to rehearse roles and escalation. Live incident response and forensic work are excluded. Phishing simulations are a separately authorized add-on.

    Awareness and reporting guidance · Response plan · Discussion-based tabletop

  3. Backup review and restore testing

    View full scopeClose scope

    Review the agreed backup arrangements, then safely test restoration of agreed files or supported workloads under approved test conditions. Record actual results, observed recovery time, failures, limitations and recommended improvements. The service does not include a full disaster-recovery programme, guaranteed recovery or ongoing backup management.

    Arrangements review · Agreed restore tests · Recovery-time observations · Findings and improvements

From review to readiness.

  1. Assess

  2. Prioritize

  3. Remediate

  4. Prepare

  5. Review

Reviews deliver findings and recommendations. Implementation is included only when separately agreed and commissioned. Each engagement records its scope, responsibilities, evidence, exclusions and handover.

YOUR NEXT STEP

Tell us what your business needs to secure or prepare.

Start with a brief enquiry. Agree the service scope, responsibilities and handover before work begins.

Discuss your cybersecurity needs