6.two. If your organization is awarded a completely new contract that entails a cybersecurity classification sort not included in The existing valid certificate, then a different certificate really should be received and submitted. There are numerous legislations both domestic and Intercontinental that sellers ought to adjust to, producing the procedure https://iso22301certificationuae.blogspot.com/2025/04/soc-2-compliance-in-usa-amplifying-data.html