Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

BAE Systems, Inc.BAE Systems, Inc.
VS
Northrop GrummanNorthrop Grumman
BAE Systems, Inc.

BAE Systems, Inc.

2941 Fairview Park Dr, Falls Church, 22042, US

Last Update: 01/04/2026

View Profile
Between 750 and 799
https://jobs.baesystems.com/global/en
766/1000Fair

Improving the future and protecting lives is an ambitious mission, but it’s what we do. BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, security and aerospace company headquartered in Arlington, VA, with locations across the count...

NAICS:336414
NAICS Definition:Guided Missile and Space Vehicle Manufacturing
Employees:16,319
Subsidiaries:0
12-month incidents
0
Known data breaches
1
Attack type number
1
Northrop Grumman

Northrop Grumman

2980 Fairview Park Dr, Falls Church, 22042, US

Last Update: 04/05/2026

View Profile
Between 700 and 749
https://www.northropgrumman.com/
748/1000Moderate

We are a close-knit community of big thinkers collaborating to keep the world safe. Our passion, creativity and expertise bring next-level technology solutions to life in autonomous systems, cyber, C4ISR, strike, space, and logistics and modernization for our customers ...

NAICS:336414
NAICS Definition:Guided Missile and Space Vehicle Manufacturing
Employees:81,287
Subsidiaries:2
12-month incidents
1
Known data breaches
2
Attack type number
1

Compliance Ranges Comparison

Based On Specific Ai Models Category
BAE Systems, Inc.

BAE Systems, Inc.

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Northrop Grumman

Northrop Grumman

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Defense and Space Manufacturing Industry Avg (This Year)

No incidents recorded for BAE Systems, Inc. in 2026.

Incidents

Incidents vs Defense and Space Manufacturing Industry Avg (This Year)

Northrop Grumman has 5.66% fewer incidents than the average of all companies with at least one recorded incident.

Incidents

Incident History - BAE Systems, Inc. (X = Date, Y = Severity)

BAE Systems, Inc. cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Northrop Grumman (X = Date, Y = Severity)

Northrop Grumman cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
BAE Systems, Inc.

BAE Systems, Inc.

Incidents
🔒 Incident : Breach
BAE040090625
Northrop Grumman

Northrop Grumman

Incidents
🔒 Incident : Breach
LOCULANOR1777876145
🔒 Incident : Breach
NOR933072725

FAQ

Between BAE Systems, Inc. company and Northrop Grumman company, which one has the best AI Cybersecurity Score ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has experienced more cyber incidents in the past ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has experienced more cyber incidents this year ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has experienced at least one ransomware attack ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has experienced at least one data breach ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has experienced at least one targeted cyberattack ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has experienced at least one vulnerability ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one holds the most compliance certifications ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one holds the fewest compliance certifications ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has the most subsidiaries ?
Between BAE Systems, Inc. company and Northrop Grumman company, which one has the largest number of employees ?
Between BAE Systems, Inc. and Northrop Grumman, which company holds both SOC 2 Type 1 certifications ?
Between BAE Systems, Inc. and Northrop Grumman, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - BAE Systems, Inc. or Northrop Grumman ?
Which company is PCI DSS compliant - BAE Systems, Inc. or Northrop Grumman ?
Between BAE Systems, Inc. and Northrop Grumman, which company complies with HIPAA regulations for healthcare data ?
Between BAE Systems, Inc. and Northrop Grumman, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-57100
SUMMARY

Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

PUBLISHED
Date2026-07-02
UPDATED
Date2026-07-02
RISK INFORMATION (Score: 9.9)
CVSS3
Base Score: 9.9
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
IMPACT SCORE
6
EXPLOITABILITY
3.1
REFERENCES
CVE-2026-54998
SUMMARY

Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

PUBLISHED
Date2026-07-02
UPDATED
Date2026-07-02
RISK INFORMATION (Score: 8.8)
CVSS3
Base Score: 8.8
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
IMPACT SCORE
5.9
EXPLOITABILITY
2.8
REFERENCES
CVE-2026-45499
SUMMARY

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

PUBLISHED
Date2026-07-02
UPDATED
Date2026-07-02
RISK INFORMATION (Score: 9.9)
CVSS3
Base Score: 9.9
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
IMPACT SCORE
6
EXPLOITABILITY
3.1
REFERENCES
CVE-2026-41106
SUMMARY

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

PUBLISHED
Date2026-07-02
UPDATED
Date2026-07-02
RISK INFORMATION (Score: 9.3)
CVSS3
Base Score: 9.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
IMPACT SCORE
5.8
EXPLOITABILITY
2.8
REFERENCES
CVE-2026-26145
SUMMARY

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.

PUBLISHED
Date2026-07-02
UPDATED
Date2026-07-02
RISK INFORMATION (Score: 4.8)
CVSS3
Base Score: 4.8
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
IMPACT SCORE
3.6
EXPLOITABILITY
1.2
REFERENCES