1. What exactly is the excellence amongst CCC and CCC+ ? The CCC requires the third party to accomplish a compliance self-evaluation towards the scoped controls specified in SACS-002, also to have the compliance assessment bundle remotely verified by among the list of approved audit firms. Saudi Aramco released two https://www.nathanlabsadvisory.com/aramco-cyber-security-compliance.html