Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

American Electric PowerAmerican Electric Power
VS
Xunta de GaliciaXunta de Galicia
American Electric Power

American Electric Power

1 Riverside Plaza, Columbus, OH, US, 43215

Last Update: 07/05/2026

View Profile
Between 800 and 849
http://AEP.com
820/1000Good

Our team at American Electric Power is committed to improving our customers' lives with reliable, affordable power. We are investing $54 billion from 2025 through 2029 to enhance service for customers and support the growing energy needs of our communities. Our nearly 1...

NAICS:22
NAICS Definition:Utilities
Employees:12,650
Subsidiaries:8
12-month incidents
0
Known data breaches
0
Attack type number
0
Xunta de Galicia

Xunta de Galicia

San Caetano, s/n, Santiago de Compostela, 15781, ES

Last Update: 01/04/2026

View Profile
Between 750 and 799
https://www.xunta.gal
770/1000Fair

A Xunta aparece definida no Estatuto de Autonomía, aprobado en 1981, como órgano colexiado do Goberno de Galicia. Na actualidade, a Xunta está composta polo presidente e dez conselleiros. A comunidade exerce as súas funcións administrativas a través da Xunta e dos seus ...

NAICS:22
NAICS Definition:Utilities
Employees:10,790
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
American Electric Power

American Electric Power

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Xunta de Galicia

Xunta de Galicia

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Utilities Industry Avg (This Year)

No incidents recorded for American Electric Power in 2026.

Incidents

Incidents vs Utilities Industry Avg (This Year)

No incidents recorded for Xunta de Galicia in 2026.

Incidents

Incident History - American Electric Power (X = Date, Y = Severity)

American Electric Power cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Xunta de Galicia (X = Date, Y = Severity)

Xunta de Galicia cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
American Electric Power

American Electric Power

Incidents
No explicit notable incidents reported.
Xunta de Galicia

Xunta de Galicia

Incidents
No explicit notable incidents reported.

FAQ

Between American Electric Power company and Xunta de Galicia company, which one has the best AI Cybersecurity Score ?
Between American Electric Power company and Xunta de Galicia company, which one has experienced more cyber incidents in the past ?
Between American Electric Power company and Xunta de Galicia company, which one has experienced more cyber incidents this year ?
Between American Electric Power company and Xunta de Galicia company, which one has experienced at least one ransomware attack ?
Between American Electric Power company and Xunta de Galicia company, which one has experienced at least one data breach ?
Between American Electric Power company and Xunta de Galicia company, which one has experienced at least one targeted cyberattack ?
Between American Electric Power company and Xunta de Galicia company, which one has experienced at least one vulnerability ?
Between American Electric Power company and Xunta de Galicia company, which one holds the most compliance certifications ?
Between American Electric Power company and Xunta de Galicia company, which one holds the fewest compliance certifications ?
Between American Electric Power company and Xunta de Galicia company, which one has the most subsidiaries ?
Between American Electric Power company and Xunta de Galicia company, which one has the largest number of employees ?
Between American Electric Power and Xunta de Galicia, which company holds both SOC 2 Type 1 certifications ?
Between American Electric Power and Xunta de Galicia, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - American Electric Power or Xunta de Galicia ?
Which company is PCI DSS compliant - American Electric Power or Xunta de Galicia ?
Between American Electric Power and Xunta de Galicia, which company complies with HIPAA regulations for healthcare data ?
Between American Electric Power and Xunta de Galicia, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-50044
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 6.8)
CVSS3
Base Score: 6.8
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS4
Base Score: 7.6
Complexity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.2
EXPLOITABILITY
1.6
CVE-2026-44955
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 5.3)
CVSS3
Base Score: 5.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS4
Base Score: 6.9
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
1.4
EXPLOITABILITY
3.9
CVE-2026-42933
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 10)
CVSS3
Base Score: 10.0
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS4
Base Score: 10.0
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
6
EXPLOITABILITY
3.9
CVE-2026-40430
SUMMARY

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 7.5)
CVSS3
Base Score: 7.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS4
Base Score: 8.7
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.6
EXPLOITABILITY
3.9
CVE-2026-28698
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 8.6)
CVSS3
Base Score: 8.6
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS4
Base Score: 9.2
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
4
EXPLOITABILITY
3.9