Comparison Overview

BCT Ohio & Michigan

VS

Graphic Media Alliance

BCT Ohio & Michigan

3506 Fortuna Drive, Akron, OH, 44312, US
Last Update: 2025-12-10
View Profile
Between 750 and 799
http://www.bctohio.com

As an organization, BCT is the leading wholesale trade only printer in North America. BCT Ohio & Michigan has the proven ability to offer personalized service and full complement of products and processes related to offset and digital sheet-fed printed products to businesses and people in the graphics trade. Only Wholesale to the Trade Our Products: Postcards, Business Cards, Stationery, Commercial Envelopes, Brochures, Rack Cards, Presentation Folders, Calendars, Advanced Finishing, Booklets, Custom Rubber Stamps, Labels, Specialty Forms, Announcements, Specialty Items, Recycled Paper Free online technologies to help printers and distributors manage corporate identity. With nearly half of all Fortune 1000 companies using BCT’s technologies, we have the necessary experience. We can manage your shell/master inventory, oversee your customer’s graphics libraries, and keep track of all details that are part of managing a large identity program. Integration with purchasing systems such as Ariba® DemandBridge, Four51, Oracle, Quantum® is simple and easy. This integration provides a versatility needed by many corporations. Print Solutions: Full Color Printing, Spot Color Printing (PMS), Offset Printing, Digital Printing, Foil & Embossing, Raised Printing

NAICS: 323
NAICS Definition:
Employees: 8
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Graphic Media Alliance

88 Dorchester Sq N, Westerville, Ohio, 43081, US
Last Update: 2025-12-10
Between 750 and 799
http://www.graphicmedia.org

Graphic Media Alliance offers programs and services to improve profitability like discount programs with partner companies, affordable insurance assistance and valuable business consulting services. The organization provides access to important environmental, energy and sustainability information and services, including assistance with FSC, SFI and SGP certifications and access to valuable energy management programs. The association presents education and training offerings from the annual Leadership and Management Conference to regional breakfast meeting. Webinars are a valuable training tool and are provided as a FREE education resource to association members. Legislative and regulatory lobbying, along with grassroots member participation and legislative alerts to members, is also a key focus of the association. Networking activities, such as the Print Excellence Awards Program on both regional and statewide levels, provide members opportunities to showcase their craft and technical skills. Annual regional meetings, regional Print Week activities, and yearly golf outing are business and social events that help promote the latest and greatest in the industry. The scholarship foundation, Printing Industries Education Funds, Inc. (or PIEF) distributes tens of thousands of dollars a year to graphic communications students. The association’s Employment Exchange provides Graphic Media Alliance members with a complete database of resumes for every position in the industry. Publications like The Communicator magazine and First Impression, a weekly e-newsletter, keep members well informed of important and timely industry issues. Other available publications are the Disaster Management Assistance Plan, the Sample Employee Handbook, job descriptions a Safety Manual, and more.

NAICS: 323
NAICS Definition:
Employees: 12
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bct-ohio-&-michigan.jpeg
BCT Ohio & Michigan
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/pianko.jpeg
Graphic Media Alliance
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
BCT Ohio & Michigan
100%
Compliance Rate
0/4 Standards Verified
Graphic Media Alliance
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Printing Services Industry Average (This Year)

No incidents recorded for BCT Ohio & Michigan in 2025.

Incidents vs Printing Services Industry Average (This Year)

No incidents recorded for Graphic Media Alliance in 2025.

Incident History — BCT Ohio & Michigan (X = Date, Y = Severity)

BCT Ohio & Michigan cyber incidents detection timeline including parent company and subsidiaries

Incident History — Graphic Media Alliance (X = Date, Y = Severity)

Graphic Media Alliance cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bct-ohio-&-michigan.jpeg
BCT Ohio & Michigan
Incidents

No Incident

https://images.rankiteo.com/companyimages/pianko.jpeg
Graphic Media Alliance
Incidents

No Incident

FAQ

BCT Ohio & Michigan company demonstrates a stronger AI Cybersecurity Score compared to Graphic Media Alliance company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Graphic Media Alliance company has disclosed a higher number of cyber incidents compared to BCT Ohio & Michigan company.

In the current year, Graphic Media Alliance company and BCT Ohio & Michigan company have not reported any cyber incidents.

Neither Graphic Media Alliance company nor BCT Ohio & Michigan company has reported experiencing a ransomware attack publicly.

Neither Graphic Media Alliance company nor BCT Ohio & Michigan company has reported experiencing a data breach publicly.

Neither Graphic Media Alliance company nor BCT Ohio & Michigan company has reported experiencing targeted cyberattacks publicly.

Neither BCT Ohio & Michigan company nor Graphic Media Alliance company has reported experiencing or disclosing vulnerabilities publicly.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds any compliance certifications.

Neither company holds any compliance certifications.

Neither BCT Ohio & Michigan company nor Graphic Media Alliance company has publicly disclosed detailed information about the number of their subsidiaries.

Graphic Media Alliance company employs more people globally than BCT Ohio & Michigan company, reflecting its scale as a Printing Services.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds SOC 2 Type 1 certification.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds SOC 2 Type 2 certification.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds ISO 27001 certification.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds PCI DSS certification.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds HIPAA certification.

Neither BCT Ohio & Michigan nor Graphic Media Alliance holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published
Date
2025-12-16
Updated
Date
2025-12-16
References
Description

Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published
Date
2025-12-16
Updated
Date
2025-12-16
References
Description

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References