Comparison Overview

KFA Controls

VS

Cochrane Supply & Engineering

KFA Controls

Narabang Way, Belrose, NSW, 2085, AU
Last Update: 2025-12-10
Between 750 and 799

KFA Controls is an independent programming and control solution company. Our services include consultation, design, programming and supply of control equipment to assist you in providing the complete control solution for your clients technology integration needs. We supply services to and through the following channels: * Commercial audio visual Supplier/Installers * Home Theatre and Smart Home Supplier/Installers * Commercial and Residential Lighting, Supplier/Installers * Home Automation Consultants * Commercial Technology Consultants * Developers, Architects and Builders

NAICS: None
NAICS Definition:
Employees: 3
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Cochrane Supply & Engineering

30303 Stephenson Hwy, Madison Heights, MI, 48071, US
Last Update: 2025-12-10

Cochrane Supply & Engineering was founded in 1967 and has grown into a Leading Smart Building Controls Distributor and has also been proudly recognized as a nationwide Top 50 HVACR Distributor by Distribution Trends Magazine. Cochrane Supply is proud to be your source of building controls products and hardware to connect to the Internet, as well as software and world-class support to enable and successfully implement functional integrations. Representing the industry’s top manufacturers, Cochrane Supply’s diverse product lines blend innovation and solutions for successful facility management and improved building efficiency when it comes to HVAC, security, energy, lighting, gas-detection, and more. The company’s customer-centric staff has been connecting integrated building systems to the internet for more than 15 years, staying at the forefront of smart building controls solutions and leveraging the growing possibilities of the Internet of Things (IoT). Whether it’s a project for a new building, or a retrofit for a current one, Cochrane Supply is your source for information and the building automation controls. Proud distributor of Vykon by Tridium, Honeywell, Johnson Controls, Distech Controls, Acuity Brands, Yaskawa, Belimo, KMC Controls, Schneider Electric, Automation Components, Inc., Fireye, Maxitrol, Siemens, EasyIO, Triatek, Contemporary Controls, Functional Devices, ecobee, Asco, Dwyer Instruments, MaxLine, Honeywell Analytics, Kodaro, Optigo Networks, Phoenix Contact, ANT Technologies, ACTi, Tosibox, Prolon Controls, and many many more! Contact us today to discover the benefits of choosing Cochrane Supply. We're more than just a distributor. We're here to not only support you with a huge inventory of products for comfort, safety, and security, but to also maximize your success through software development, tech support, consultation, and BAS training.

NAICS: None
NAICS Definition:
Employees: 95
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/at-controls-pty-ltd.jpeg
KFA Controls
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/cochrane-supply-&-engineering.jpeg
Cochrane Supply & Engineering
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
KFA Controls
100%
Compliance Rate
0/4 Standards Verified
Cochrane Supply & Engineering
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Industrial Automation Industry Average (This Year)

No incidents recorded for KFA Controls in 2025.

Incidents vs Industrial Automation Industry Average (This Year)

No incidents recorded for Cochrane Supply & Engineering in 2025.

Incident History — KFA Controls (X = Date, Y = Severity)

KFA Controls cyber incidents detection timeline including parent company and subsidiaries

Incident History — Cochrane Supply & Engineering (X = Date, Y = Severity)

Cochrane Supply & Engineering cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/at-controls-pty-ltd.jpeg
KFA Controls
Incidents

No Incident

https://images.rankiteo.com/companyimages/cochrane-supply-&-engineering.jpeg
Cochrane Supply & Engineering
Incidents

No Incident

FAQ

Cochrane Supply & Engineering company demonstrates a stronger AI Cybersecurity Score compared to KFA Controls company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Cochrane Supply & Engineering company has disclosed a higher number of cyber incidents compared to KFA Controls company.

In the current year, Cochrane Supply & Engineering company and KFA Controls company have not reported any cyber incidents.

Neither Cochrane Supply & Engineering company nor KFA Controls company has reported experiencing a ransomware attack publicly.

Neither Cochrane Supply & Engineering company nor KFA Controls company has reported experiencing a data breach publicly.

Neither Cochrane Supply & Engineering company nor KFA Controls company has reported experiencing targeted cyberattacks publicly.

Neither KFA Controls company nor Cochrane Supply & Engineering company has reported experiencing or disclosing vulnerabilities publicly.

Neither KFA Controls nor Cochrane Supply & Engineering holds any compliance certifications.

Neither company holds any compliance certifications.

Neither KFA Controls company nor Cochrane Supply & Engineering company has publicly disclosed detailed information about the number of their subsidiaries.

Cochrane Supply & Engineering company employs more people globally than KFA Controls company, reflecting its scale as a Industrial Automation.

Neither KFA Controls nor Cochrane Supply & Engineering holds SOC 2 Type 1 certification.

Neither KFA Controls nor Cochrane Supply & Engineering holds SOC 2 Type 2 certification.

Neither KFA Controls nor Cochrane Supply & Engineering holds ISO 27001 certification.

Neither KFA Controls nor Cochrane Supply & Engineering holds PCI DSS certification.

Neither KFA Controls nor Cochrane Supply & Engineering holds HIPAA certification.

Neither KFA Controls nor Cochrane Supply & Engineering holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N