Comparison Overview

Bountiful Davis Art Center (BDAC)

VS

WAG-Qaumajuq

Bountiful Davis Art Center (BDAC)

90 N Main St, Bountiful, Utah, 84010, US
Last Update: 2025-12-01
Between 750 and 799

Exhibitions | Classes | Music | Summerfest | Gift Shop Standing in BDAC’s main gallery at 90 North Main Street, it can be hard to fathom how much this art center has developed in 40+ years. By 1974, the growing Davis County community developed a need for a local art center. That need was met as Bountiful City and the University of Utah collaborated to establish the Bountiful Davis Art Center. In 1984 BDAC became its own nonprofit organization. Three location moves later, in 2015, the BDAC found its permanent home on Main Street in Bountiful City, the art center’s largest supporter. BDAC’s Mission statement is to engage the community through quality artistic and cultural programs, provide educational experiences, and encourage the growth and expression of art. The art center achieves its mission via unique programming and events. (i.e. free-to-the-public art exhibitions featuring the finest artists in Utah, professionally taught art and theater classes for children and adults, free Family Art Nights held monthly every 3rd Monday 6:30-8:00 PM, affordable recital space featuring the only dual-piano stage in Davis County, and free musical concerts and events including the area’s largest folk arts festival, Summerfest.) Summerfest International Art & Folk Festival engages the community in a multicultural celebration. This free event is held the first week in August at Bountiful City Park. Hundreds of visitors flock to its evening kickoff party, Street Dance, on Main Street. Here they enjoy sampling tasty international food and meeting traditional folk performers from all over the world. Thousands more head to Bountiful Park to experience live music and dance performances, ethnic food trucks, artist booths, and fun! BDAC’s three galleries boast fine art exhibitions which are switched out every six weeks and draw visitors from throughout the state. BDAC’s exhibitions are free to the public and open Tues-Fri 10-6/Sat 12-5

NAICS: 712
NAICS Definition:
Employees: 14
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

WAG-Qaumajuq

300 Memorial Blvd, Winnipeg, MB, R3C 1V1, CA
Last Update: 2025-12-01

WAG-Qaumajuq has grown into one of the country’s leading visual art museums with an international reputation! Founded in 1912, the WAG is one of Canada’s first civic art galleries, housed in an iconic modernist building in the heart of downtown Winnipeg. Opened in 2021, Qaumajuq is a contemporary architectural landmark that connects to the WAG building on all four levels. Qaumajuq is an innovative new museum, home of the largest public collection of contemporary Inuit art in the world. WAG-Qaumajuq recognizes that land acknowledgements are part of an ongoing dialogue with Indigenous Nations, and we are grateful to live and work on these lands and waters. Institutionally, WAG-Qaumajuq is committed to acknowledging our colonial history and we are actively working to interrogate the Gallery’s colonial ways of being. Read about some of our ongoing projects to interrupt the institution.

NAICS: 712
NAICS Definition:
Employees: 48
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bountiful-davis-art-center.jpeg
Bountiful Davis Art Center (BDAC)
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/winnipeg-art-gallery.jpeg
WAG-Qaumajuq
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Bountiful Davis Art Center (BDAC)
100%
Compliance Rate
0/4 Standards Verified
WAG-Qaumajuq
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Bountiful Davis Art Center (BDAC) in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for WAG-Qaumajuq in 2025.

Incident History — Bountiful Davis Art Center (BDAC) (X = Date, Y = Severity)

Bountiful Davis Art Center (BDAC) cyber incidents detection timeline including parent company and subsidiaries

Incident History — WAG-Qaumajuq (X = Date, Y = Severity)

WAG-Qaumajuq cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bountiful-davis-art-center.jpeg
Bountiful Davis Art Center (BDAC)
Incidents

No Incident

https://images.rankiteo.com/companyimages/winnipeg-art-gallery.jpeg
WAG-Qaumajuq
Incidents

No Incident

FAQ

Bountiful Davis Art Center (BDAC) company demonstrates a stronger AI Cybersecurity Score compared to WAG-Qaumajuq company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, WAG-Qaumajuq company has disclosed a higher number of cyber incidents compared to Bountiful Davis Art Center (BDAC) company.

In the current year, WAG-Qaumajuq company and Bountiful Davis Art Center (BDAC) company have not reported any cyber incidents.

Neither WAG-Qaumajuq company nor Bountiful Davis Art Center (BDAC) company has reported experiencing a ransomware attack publicly.

Neither WAG-Qaumajuq company nor Bountiful Davis Art Center (BDAC) company has reported experiencing a data breach publicly.

Neither WAG-Qaumajuq company nor Bountiful Davis Art Center (BDAC) company has reported experiencing targeted cyberattacks publicly.

Neither Bountiful Davis Art Center (BDAC) company nor WAG-Qaumajuq company has reported experiencing or disclosing vulnerabilities publicly.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Bountiful Davis Art Center (BDAC) company nor WAG-Qaumajuq company has publicly disclosed detailed information about the number of their subsidiaries.

WAG-Qaumajuq company employs more people globally than Bountiful Davis Art Center (BDAC) company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds SOC 2 Type 1 certification.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds SOC 2 Type 2 certification.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds ISO 27001 certification.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds PCI DSS certification.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds HIPAA certification.

Neither Bountiful Davis Art Center (BDAC) nor WAG-Qaumajuq holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.

Risk Information
cvss3
Base: 7.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X