BCFS A.I CyberSecurity Scoring
22/02/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for BCG on Corporate Finance & Strategy in 2026.
No incidents recorded for BCG on Corporate Finance & Strategy in 2026.
No incidents recorded for BCG on Corporate Finance & Strategy in 2026.
At Straive, we operationalize Data Analytics and AI for global enterprises, working with several Fortune 500 companies. We don’t just build world-class data analytics and AI solutions—we embed them seamlessly into your core workflows. This drives greater efficiency, enhances user experience, and boosts client revenue, setting you apart from the competition. Straive is a global leader in AI-driven value creation, business transformation, and Global Capability Center (GCC) delivery — empowering private-equity portfolio companies, mid-market firms, and enterprises with scalable, technology-enabled execution. We serve clients across industries, including Banking, Financial and Information Services, Retail, Media and Technology, EdTech, Science and Research, Logistics and Supply Chain, and Pharma & Life Sciences. Our strategically placed team of 18,000 employees operates in nine countries: the Philippines, India, the United States, Nicaragua, Vietnam, the United Kingdom, Singapore, South Africa, and Canada. We have been recognized as a Star Performer in Data & AI Services Specialists – Everest’s North America PEAK Matrix 2025, and as a Leader in AIM’s Pema Quadrant of Agentic AI Service Providers – 2025. In Nov 2023, Straive acquired Gramener, an award-winning, design-led data science company, enhancing our data, analytics, and AI capabilities. In June 2025, we acquired SG Analytics, a leading provider of AI-powered insights and contextual analytics services. Straive is an equal opportunity employer, committed to celebrating diversity, equity, and inclusion. We do not tolerate discrimination or harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic under federal, state, or local laws. Hiring decisions are based solely on qualifications, merit, and business needs at the time.
Our unique combination of transformative strategy, transactions and corporate finance delivers real-world value – solutions that work in practice, not just on paper. Benefiting from EY’s full spectrum of services, we’ve reimagined strategic consulting to work in a world of increasing complexity. With deep functional and sector expertise, paired with innovative AI-powered technology and an investor mindset, we partner with CEOs, boards, private equity and governments every step of the way – enabling you to shape your future with confidence. EY-Parthenon is a brand under which a number of EY member firms across the globe provide strategy consulting services. For more information, please visit ey.com/parthenon.
Devoteam is a AI-driven tech consulting firm specialised in cloud platforms, cyber, data, and sustainability. Tech native for almost 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people.
KPMG entities in India are established under the laws of India and are owned and managed (as the case may be) by established Indian professionals. Established in September 1993, the KPMG entities have rapidly built a significant competitive presence in the country. Today we operate from offices across 14 cities including in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada. KPMG entities have a domestic client base of over 2700 companies. Our global approach to service delivery helps provide value-added services to clients. Our differentiation is derived from a rapid performance-based, industry-tailored and technology-enabled business advisory services delivered by some of the leading talented professionals in the country. KPMG professionals are grouped by industry focus and our clients are able to deal with industry professionals who speak their language. Our internal information technology and knowledge management systems enable the delivery of informed and timely business advice to clients.
Conduent delivers digital business solutions and services spanning the commercial, government and transportation spectrum – creating valuable outcomes for its clients and the millions of people who count on them. We leverage cloud computing, artificial intelligence, machine learning, automation and advanced analytics to deliver mission-critical solutions. Through a dedicated global team of approximately 55,000 associates, process expertise and advanced technologies, our solutions and services digitally transform our clients’ operations to enhance customer experiences, improve performance, increase efficiencies and reduce costs. We drive progress in every process for our client including disbursing approximately $100 billion in government payments annually, enabling 2.3 billion customer service interactions annually, empowering millions of employees through HR services every year and processing nearly 13 million tolling transactions every day. Learn more at www.conduent.com
Make growth happen. Make it trusted. Make bold moves. Make the future. KPMG makes the difference for our clients, people and communities. Make growth happen. Make it trusted. Make bold moves. Make the future. At KPMG, we’ve been making the difference for our clients, people and communities for over 150 years. We’re a leading UK provider of advisory, audit and tax services. Our clients have trusted us to make the difference for over 150 years. We work with them to overcome their biggest challenges and find new opportunities with our unique insights, fresh thinking and cutting-edge tech. KPMG. Make the Difference
Global Tech Consulting Company All in One. Stefanini is a Brazilian multinational company with 37 years of experience and presence in 41 countries. With more than 38,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results. We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. Recognized as the most internationalized technology company in Brazil, according to the Fundação Dom Cabral (FDC) ranking, Stefanini is global by essence, collaborative by nature, and strategic by vocation. It is also a pioneer in applying Artificial Intelligence to transform businesses through an end-to-end AI-First approach.
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders—empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fueled by the goal of helping our clients thrive and enabling them to make the world a better place. BCG Privacy Policy: https://www.bcg.com/about/privacy-policy.aspx
WNS, part of Capgemini, is a global Agentic AI-powered intelligent operations and transformation company. WNS combines deep industry knowledge with technology, analytics, and process expertise to co-create innovative, digitally-led transformational solutions with over 700+ clients across various industries. WNS delivers an entire spectrum of transformative solutions that entail industry-specific offerings, customer experience services, finance and accounting, human resources, procurement, and data-led analytics solutions to solve operational challenges and drive strategic growth journeys for businesses. As of June 30, 2025, WNS has 66,000+ professionals across 64 delivery centers worldwide, including facilities in the United States, the United Kingdom, Canada, Turkey, Poland, Romania, China, Costa Rica, Malaysia, the Philippines, South Africa, Sri Lanka, and India.
Latest updates, reports, and threat intel affecting the global network.
Companies that are realizing the most value from AI also have the most ambitious upskilling programs—and put the resources in place to...
Nearly three-quarters of CEOs are their company's chief AI decision maker. Most of them remain bullish on AI investment and optimistic on...
Management teams talk endlessly about customers, competitors, and employees, but far fewer consider their shareholder base.
Indian companies must scale profitably with disciplined growth, prudent capital allocation, strong governance, and conviction in long-term...
Across the Asia-Pacific region, growth has long been the headline story. But as economies and capital markets mature, the area is entering a...
In the economy and business, as in politics, uncertainty, complexity, and turmoil are manifesting themselves with accelerating speed.
Quarterly insights into Sri Lanka's banking sector - covering macro trends, KPIs, risk, valuations, digital adoption, and outlook - all in...
Southeast Asia's growth potential is strong, but uneven value creation shows the need for clarity, financial discipline, and proactive...
BCG India's Banking Sector Update offers the overview of the banking sector of India each quarter by sharing rich insights on various indicators.
Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted to the anon role and callable with only the public Supabase publishable (sb_publishable_*) anon key. An unauthenticated attacker can insert rows into public.build_logs for arbitrary organizations and, because the function uses ON CONFLICT (build_id, org_id) DO UPDATE, can overwrite existing usage/billing records by reusing the same build_id for a target org. This enables cross-tenant tampering of billing build logs and financial-impact denial of service by inflating billable build time.
Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim's identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.
Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and successfully changes their password to a compliant one, the backend does not update the password-compliance state. As a result, the backend continues to treat the account as non-compliant and repeatedly forces password-reset prompts, permanently locking the Super Admin out of organization access (organization lockout / denial of service) despite valid authentication.
Capgo before 12.128.2 contains a cross-tenant authorization bypass vulnerability in PostgREST endpoints that allows org-scoped read API keys to access other tenants' webhook secrets and delivery logs. Attackers can query the webhooks and webhook_deliveries endpoints to exfiltrate HMAC signing secrets and delivery payloads, enabling forged webhook events against victim organizations.
Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypass email verification by modifying server responses. Attackers can intercept OTP verification requests and manipulate HTTP responses to falsely mark verification successful, enabling unauthorized 2FA enablement and account takeover.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.