Comparison Overview

Boston University School of Public Health

VS

University of Waterloo

Boston University School of Public Health

715 Albany Street, Boston, MA, US, 02118
Last Update: 2026-01-17
View Profile
Between 750 and 799
http://www.bu.edu/sph/

Ranked in the top 10 schools and programs of public health in the world by US News and World Report, Boston University School of Public Health provides the opportunity to engage in world-renowned research, scholarship, social justice, and public health practice. Founded in 1976, BUSPH offers master- and doctoral-level education in public health, as well as continuing learning opportunities. The faculty in six departments (biostatistics; community health sciences; environmental health; epidemiology; global health; and health law, policy & management) conduct policy-changing public health research around the world, with the mission of improving the health of populations—especially the disadvantaged, underserved, and vulnerable—locally, nationally, and internationally.

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 16,518
Subsidiaries: 32
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

University of Waterloo

200 University Avenue West, Waterloo, Ontario, CA, N2L 3G1
Last Update: 2026-01-23
Between 800 and 849
https://http://uwaterloo.ca/

University of Waterloo is a leader in innovation that drives economic and social prosperity for Canada and the world. We are home to a renowned talent pipeline, game-changing research and technology, and unmatched entrepreneurial culture, that together create solutions to tackle today’s and tomorrow’s challenges. Our greatest impact happens together. A strategic integration of research and teaching excellence, the world’s largest co-operative education program, entrepreneurship-intensive programs, and creator-owned IP, has resulted in extensive industry collaboration, the generation of thousands of commercial and social enterprises, and a dynamic learning experience for more than 41,000 undergraduate and graduate students.

NAICS: 6113
NAICS Definition: Colleges, Universities, and Professional Schools
Employees: 11,421
Subsidiaries: 21
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/boston-university-school-of-public-health.jpeg
Boston University School of Public Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/uwaterloo.jpeg
University of Waterloo
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Boston University School of Public Health
100%
Compliance Rate
0/4 Standards Verified
University of Waterloo
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for Boston University School of Public Health in 2026.

Incidents vs Higher Education Industry Average (This Year)

No incidents recorded for University of Waterloo in 2026.

Incident History — Boston University School of Public Health (X = Date, Y = Severity)

Boston University School of Public Health cyber incidents detection timeline including parent company and subsidiaries

Incident History — University of Waterloo (X = Date, Y = Severity)

University of Waterloo cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/boston-university-school-of-public-health.jpeg
Boston University School of Public Health
Incidents

No Incident

https://images.rankiteo.com/companyimages/uwaterloo.jpeg
University of Waterloo
Incidents

No Incident

FAQ

University of Waterloo company demonstrates a stronger AI Cybersecurity Score compared to Boston University School of Public Health company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, University of Waterloo company has disclosed a higher number of cyber incidents compared to Boston University School of Public Health company.

In the current year, University of Waterloo company and Boston University School of Public Health company have not reported any cyber incidents.

Neither University of Waterloo company nor Boston University School of Public Health company has reported experiencing a ransomware attack publicly.

Neither University of Waterloo company nor Boston University School of Public Health company has reported experiencing a data breach publicly.

Neither University of Waterloo company nor Boston University School of Public Health company has reported experiencing targeted cyberattacks publicly.

Neither Boston University School of Public Health company nor University of Waterloo company has reported experiencing or disclosing vulnerabilities publicly.

Neither Boston University School of Public Health nor University of Waterloo holds any compliance certifications.

Neither company holds any compliance certifications.

Boston University School of Public Health company has more subsidiaries worldwide compared to University of Waterloo company.

Boston University School of Public Health company employs more people globally than University of Waterloo company, reflecting its scale as a Higher Education.

Neither Boston University School of Public Health nor University of Waterloo holds SOC 2 Type 1 certification.

Neither Boston University School of Public Health nor University of Waterloo holds SOC 2 Type 2 certification.

Neither Boston University School of Public Health nor University of Waterloo holds ISO 27001 certification.

Neither Boston University School of Public Health nor University of Waterloo holds PCI DSS certification.

Neither Boston University School of Public Health nor University of Waterloo holds HIPAA certification.

Neither Boston University School of Public Health nor University of Waterloo holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
References
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Azure Entra ID Elevation of Privilege Vulnerability

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References