As part of GS E&C's ongoing efforts to strengthen information protection management and reinforce cybersecurity standards throughout its regional and subsidiary operations, GSCA successfully demonstrated compliance with the company's information security requirements and best practices. The achievement reflects GSCA's proactive role in supporting GS E&C's vision of maintaining a secure and resilient digital environment across all overseas offices.

The Sustainability Report emphasizes GS E&C's activities to enhance information protection capabilities through information security certifications, inspections, employee awareness programs, and cybersecurity compliance initiatives. GSCA's inclusion under this category recognizes its contribution to corporate-wide efforts aimed at safeguarding business information, customer data, and digital assets.

Notably, GSCA obtained a Cybersecurity Compliance Certification (CCC+) from Saudi Aramco in March 2025, further validating the company's commitment to meeting internationally recognized information security standards and supporting the Kingdom's cybersecurity objectives. This accomplishment strengthens GS E&C's overall information protection framework while reinforcing trust among clients, stakeholders, and business partners.

Through continuous improvement of its security governance, compliance programs, and employee awareness initiatives, GSCA remains committed to supporting GS E&C's global information security strategy and ensuring the highest standards of data protection across its operations in the Kingdom of Saudi Arabia.

"The recognition of GSCA in GS E&C's Sustainability Report demonstrates the company's dedication to strengthening information protection capabilities and contributing to a secure digital ecosystem throughout GS E&C's global operations," the report noted.

This achievement further reinforces GSCA's position as a trusted regional subsidiary within the GS E&C global network, actively supporting the group's mission to create sustainable value through responsible governance, cybersecurity excellence, and digital resilience.