All Posts
Aramco Cybersecurity Compliance 55 Views 4 min read

Mandatory AV Protection: Why TPC-12 is Essential

Last Updated March 7, 2026
Mandatory AV Protection: Why TPC-12 is Essential

In the fight against cyber threats, antivirus (AV) protection is a fundamental defense mechanism. For businesses working with Saudi Aramco, compliance with the Third Party Cybersecurity Standard (SACS-002) is critical. One of its key controls, TPC-12, requires third parties to protect their technology assets with antivirus software and ensure regular updates and scans. But why is AV protection so important, and how can your business ensure compliance? Let’s explore.

What is TPC-12?

TPC-12 is a cybersecurity control that mandates third-party vendors and contractors to install and maintain antivirus software on all technology assets and systems used to access, store, or process Saudi Aramco’s data. This includes:

  • Regular updates to the antivirus software.
  • Full system scans performed at least every two weeks.

The goal is to detect, prevent, and remove malware, ensuring the security of Aramco’s sensitive information.

Why Does TPC-12 Matter?

  1. Protecting Against Malware
    Malware, including viruses, ransomware, and spyware, can cause significant damage to your systems and data. Antivirus software acts as a critical line of defense, detecting and neutralizing these threats before they can cause harm.
  2. Compliance with Aramco Standards
    Non-compliance with TPC-12 can lead to serious consequences, including contract termination or legal action. Adhering to this standard is essential for maintaining a strong partnership with Aramco.
  3. Safeguarding Sensitive Data
    Saudi Aramco’s data is highly confidential. Antivirus protection ensures that your systems are secure, reducing the risk of data breaches or leaks caused by malware.
  4. Maintaining System Integrity
    Malware can disrupt operations, corrupt files, and cause system failures. Regular AV updates and scans help maintain the integrity and performance of your technology assets.

How to Comply with TPC-12

  1. Install Reliable Antivirus Software
    Choose a reputable antivirus solution that offers comprehensive protection against a wide range of threats. Ensure it is installed on all technology assets, including computers, servers, and mobile devices.
  2. Enable Automatic Updates
    Configure your antivirus software to update automatically. This ensures that your systems are protected against the latest threats without requiring manual intervention.
  3. Perform Regular Scans
    Schedule full system scans at least every two weeks, as required by TPC-12. Additionally, conduct quick scans more frequently to detect and address threats in real-time.
  4. Monitor and Report
    Regularly monitor your antivirus software to ensure it is functioning correctly. Generate reports to track scan results, detected threats, and remediation actions.
  5. Train Your Team
    Educate your employees about the importance of antivirus protection and how to recognize potential threats, such as phishing emails or suspicious downloads.

How NHR Can Help

At NHR Alemtithal for IT (NHR), we specialize in helping businesses achieve compliance with Saudi Aramco’s cybersecurity standards, including TPC-12. Our services include:

  • Antivirus Software Implementation
  • Cybersecurity Compliance Certification (CCC)
  • Employee Training Programs

Don’t risk non-compliance or a malware attack. Let NHR guide you through the process and ensure your business meets all Aramco requirements.

Contact Us Today!

For more information or to schedule a consultation, call us at +966 55 653 8840 or email info@nhr.com.sa. Visit our service page to learn more about our services.

Stay compliant, stay secure, and protect your business with NHR!

By adhering to TPC-12 and partnering with NHR, you can ensure your business meets Aramco’s cybersecurity standards while safeguarding sensitive data. Let us help you navigate the complexities of compliance with ease!

Share this article:
Fast-Track Your Compliance

Need help with Aramco CCC Certification?

Get a Free Expert Consultation.

Aramco Kit

Ali Aljubaily

Cybersecurity Consultant

I am Ali Yousef, a certified engineer from Microsoft, holding the Microsoft Certified System Associate certification as well as the CompTIA Network+ certification. I work as the Group IT Manager.

Latest

Explore Our Blog Posts

Discover insightful articles on cybersecurity and more.

Aramco Cybersecurity Compliance - Email Compliance Guide
Aramco Cybersecurity Compliance 15 Views 11 min read

Pass the TPCS Email Audit with Exchange Online and Defender for Office 365

Achieve TPCS email security compliance using Exchange Online and Defender for Office 365. A step-by-step guide for Vendors seeking Aramco...
Read more
Access Control SACS-210 compliance guide for IT Managers TPC1.9 TPC1.12
Aramco Cybersecurity Compliance 31 Views 8 min read

What Is Access Control in SACS-210? An IT Manager’s Guide

Wondering what is access control for SACS-210? Eliminate guesswork and get auditor-ready templates to enforce MFA, RBAC, and secure corporate...
Read more
Aramco Cybersecurity Compliance 45 Views 10 min read

Pass SACS-210 Compliance Using Microsoft Entra ID Plan 1: A Guide for Saudi SMEs

Pass SACS-210 compliance with Microsoft Entra ID Plan 1. A step-by-step identity and access management guide for Saudi SMEs seeking...
Read more

Our Certified Expertise and Technology Partnerships

We are certified partners with the world's leading cybersecurity vendors to deliver best-in-class solutions.

Microsoft
Microsoft
Certified Partner
Bitdefender
Bitdefender
Gold Partner
Fortinet
Fortinet
Authorized Partner
Acronis
Acronis
Certified Partner

Ready to Secure Your Business?

Our cybersecurity experts are here to help you achieve compliance and protect your digital assets with our 100% remote implementation model. Achieving compliance requires zero on-site field visits or internal IT hours. Contact us for a free, no-obligation assessment of your cybersecurity needs. We are committed to a 2-hour response time for all inquiries during business hours.

2-hour response time
Free consultation
Certified experts