Comparison Overview

Bountiful Davis Art Center (BDAC)

VS

Oslo Museum

Bountiful Davis Art Center (BDAC)

90 N Main St, Bountiful, Utah, 84010, US
Last Update: 2025-12-01
Between 750 and 799

Exhibitions | Classes | Music | Summerfest | Gift Shop Standing in BDAC’s main gallery at 90 North Main Street, it can be hard to fathom how much this art center has developed in 40+ years. By 1974, the growing Davis County community developed a need for a local art center. That need was met as Bountiful City and the University of Utah collaborated to establish the Bountiful Davis Art Center. In 1984 BDAC became its own nonprofit organization. Three location moves later, in 2015, the BDAC found its permanent home on Main Street in Bountiful City, the art center’s largest supporter. BDAC’s Mission statement is to engage the community through quality artistic and cultural programs, provide educational experiences, and encourage the growth and expression of art. The art center achieves its mission via unique programming and events. (i.e. free-to-the-public art exhibitions featuring the finest artists in Utah, professionally taught art and theater classes for children and adults, free Family Art Nights held monthly every 3rd Monday 6:30-8:00 PM, affordable recital space featuring the only dual-piano stage in Davis County, and free musical concerts and events including the area’s largest folk arts festival, Summerfest.) Summerfest International Art & Folk Festival engages the community in a multicultural celebration. This free event is held the first week in August at Bountiful City Park. Hundreds of visitors flock to its evening kickoff party, Street Dance, on Main Street. Here they enjoy sampling tasty international food and meeting traditional folk performers from all over the world. Thousands more head to Bountiful Park to experience live music and dance performances, ethnic food trucks, artist booths, and fun! BDAC’s three galleries boast fine art exhibitions which are switched out every six weeks and draw visitors from throughout the state. BDAC’s exhibitions are free to the public and open Tues-Fri 10-6/Sat 12-5

NAICS: 712
NAICS Definition:
Employees: 14
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Oslo Museum

Frognerveien 67, Oslo, 0257, NO
Last Update: 2025-12-01
Between 750 and 799

Stiftelsen Oslo Museum er byens eget museum, og bidrar til kunnskap om og forankring i Oslo-samfunnet. Museet forvalter, formidler og forsker i Oslos historie, teaterhistorie og nyere innvandringshistorie. Museet har en aktiv formidlingsprofil og tilhold på flere steder i Oslo; Bymuseet og Teatermuseet i Frognerparken, Interkulturelt Museum på Grønland og Arbeidermuseet på Sagene. Oslo Museum ble i 2019 kåret til «Årets museum» av Norges Museumsforbund, med begrunnelse i museets mangfoldsprofil og nyskapende formidlings- og utstillingsarbeid. Museet forvalter en av landets største fotosamlinger, har en stor samling av malerier og Oslo-portretter, og en kulturhistorisk samling som også inkluderer intervjumateriale.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 47
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bountiful-davis-art-center.jpeg
Bountiful Davis Art Center (BDAC)
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/oslo-museum.jpeg
Oslo Museum
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Bountiful Davis Art Center (BDAC)
100%
Compliance Rate
0/4 Standards Verified
Oslo Museum
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Bountiful Davis Art Center (BDAC) in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Oslo Museum in 2025.

Incident History — Bountiful Davis Art Center (BDAC) (X = Date, Y = Severity)

Bountiful Davis Art Center (BDAC) cyber incidents detection timeline including parent company and subsidiaries

Incident History — Oslo Museum (X = Date, Y = Severity)

Oslo Museum cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bountiful-davis-art-center.jpeg
Bountiful Davis Art Center (BDAC)
Incidents

No Incident

https://images.rankiteo.com/companyimages/oslo-museum.jpeg
Oslo Museum
Incidents

No Incident

FAQ

Both Bountiful Davis Art Center (BDAC) company and Oslo Museum company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

Historically, Oslo Museum company has disclosed a higher number of cyber incidents compared to Bountiful Davis Art Center (BDAC) company.

In the current year, Oslo Museum company and Bountiful Davis Art Center (BDAC) company have not reported any cyber incidents.

Neither Oslo Museum company nor Bountiful Davis Art Center (BDAC) company has reported experiencing a ransomware attack publicly.

Neither Oslo Museum company nor Bountiful Davis Art Center (BDAC) company has reported experiencing a data breach publicly.

Neither Oslo Museum company nor Bountiful Davis Art Center (BDAC) company has reported experiencing targeted cyberattacks publicly.

Neither Bountiful Davis Art Center (BDAC) company nor Oslo Museum company has reported experiencing or disclosing vulnerabilities publicly.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Bountiful Davis Art Center (BDAC) company nor Oslo Museum company has publicly disclosed detailed information about the number of their subsidiaries.

Oslo Museum company employs more people globally than Bountiful Davis Art Center (BDAC) company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds SOC 2 Type 1 certification.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds SOC 2 Type 2 certification.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds ISO 27001 certification.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds PCI DSS certification.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds HIPAA certification.

Neither Bountiful Davis Art Center (BDAC) nor Oslo Museum holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.

Risk Information
cvss3
Base: 7.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X