Saudi Aramco GI 299.220 REMOTE ACCESS TO SAUDI ARAMCO COMPUTER SYSTEMS AND NETWORKS

This General Instruction (GI) document establishes the authoritative framework for secure remote access to Saudi Aramco's extensive computer systems and corporate networks. It meticulously outlines the approved connection methods, including extranet, various VPN configurations (End User to Saudi Aramco VPN, Site-to-Site VPN, IP-VPN), wireless access, and remote meetings, detailing the specific requirements for each.

The document emphasizes the critical importance of robust authentication, encryption, audit logging, and access restriction principles to safeguard sensitive corporate data. It also defines the responsibilities of users, IT departments, and third parties, covering user agreements, monitoring protocols, and violation consequences.

This comprehensive guide ensures that all remote access activities are authorized, protected, and compliant with Saudi Aramco's stringent IT security standards, thereby mitigating risks associated with data breaches and unauthorized system access. Ideal for IT security specialists, network administrators, compliance officers, and information assurance professionals working in the oil and gas industry or similar large enterprises.