What is the official website of CGI ?

The official website of CGI is https://cgi.com.

What is CGI's cybersecurity risk score?

CGI has an AI-generated cybersecurity risk score of 739 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has CGI experienced?

According to Rankiteo, CGI currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CGI been affected by any supply chain cyber incidents ?

According to Rankiteo, CGI has been affected by a supply chain cyber incident involving CGI, with the incident ID CGI1773398582.

Does CGI have SOC 2 Type 1 certification ?

According to Rankiteo, CGI is not certified under SOC 2 Type 1.

Does CGI have SOC 2 Type 2 certification ?

According to Rankiteo, CGI does not hold a SOC 2 Type 2 certification.

Does CGI comply with GDPR ?

According to Rankiteo, CGI is not listed as GDPR compliant.

Does CGI have PCI DSS certification ?

According to Rankiteo, CGI does not currently maintain PCI DSS compliance.

Does CGI comply with HIPAA ?

According to Rankiteo, CGI is not compliant with HIPAA regulations.

Does CGI have ISO 27001 certification ?

According to Rankiteo,CGI is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CGI operate in ?

CGI operates primarily in the IT Services and IT Consulting industry.

How many employees does CGI have ?

CGI employs approximately 70,253 people worldwide.

Does CGI own any subsidiaries ?

CGI presently has no subsidiaries across any sectors.

How many LinkedIn followers does CGI have ?

CGI's official LinkedIn profile has approximately 1,865,028 followers.

What is the NAICS classification code for CGI ?

CGI is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does CGI have a Crunchbase profile ?

No, CGI does not have a profile on Crunchbase.

Does CGI have a LinkedIn profile ?

Yes, CGI maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cgi.

How many cybersecurity incidents has CGI experienced ?

As of August 23, 2026, Rankiteo reports that CGI has experienced 1 cybersecurity incidents.

How many peer or competitor companies does CGI have ?

CGI has an estimated 41,418 peer or competitor companies worldwide.

What types of cybersecurity incidents has CGI faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CGI

Boost Score +25 with badge (5 left)

739

/1000

Moderate

764

/1000

Fair

CGI Vendor Cyber Rating & Cyber Score

cgi.com

Add Your Compliance Badge

Insights you can act on. Founded in 1976, CGI is among the largest IT and business consulting services firms in the world. We are insights-driven and outcomes-focused to help accelerate returns on your investments. Across hundreds of locations worldwide, we provide comprehensive, scalable and sustainable IT and business consulting services that are informed globally and delivered locally. We value your opinions and welcome your comments and questions on our posts here on LinkedIn. Please keep a polite, professional and constructive tone. We remove comments containing objectionable language and derogatory views. We do not allow content that is unrelated to the subject, and we remove discriminatory and racist comments as well as spam and

CGI A.I CyberSecurity Scoring

Scoring History

CGI

CGI CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CGI

Breach

3/2026

CGI

CGI1773398582

Loading…

A.I.

CGI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CGI

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

CGI has 32.89% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

CGI has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types CGI vs IT Services and IT Consulting Industry Avg (This Year)

CGI reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - CGI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CGI Subsidiaries

Parent Company

CGI

IT Services and IT Consulting

Website: https://cgi.com

Company Size: 10,000+ employees

No subsidiary data available for this company.

Loading…

CGI Similar Companies

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

GFT Technologies

gft.com

GFT Technologies is an AI-centric global digital transformation company. We design advanced data and AI transformation solutions, modernize technology architectures and develop next-generation core systems for industry leaders in Banking, Insurance, Manufacturing and Robotics. Partnering closely with our clients, we push boundaries to unlock their full potential. With deep industry expertise, cutting-edge technology, and a strong partner ecosystem, GFT delivers responsible AI-centric solutions that combine engineering excellence, high-performance delivery and cost efficiency. Our team of 12,000+ technology experts operate in 20+ countries worldwide offering career opportunities at the forefront of software innovation. Let’s Go Beyond_ Legal Disclaimer: https://www.gft.com/int/en/legal-disclaimer

Ricoh USA, Inc.

ricoh-usa.com

At Ricoh, we bring people, processes, and technology together to make information work for you. We unlock the power of information so organizations can unlock the full potential of their people. We're a leader in information management and digital services, creating competitive advantage for over 1.4 million businesses across the globe. Our team members serve a vast array of industries, using an innovative mix of people, processes, and technology to free trapped and hidden insights. We believe having access to the right information translates to better business agility, more human experiences, and the ability to thrive in today's age of hybrid and borderless work.

NTT DATA, Inc.

global.ntt

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity.

Orange Business

orange-business.com

At Orange Business, our ambition is to become the leading european Network and Digital Integrator by leveraging our proven expertise in next-generation connectivity solutions, the cloud and cybersecurity. Our 30,000 women and men are present in 65 countries, where every voice counts. Together, we are driven by the same determination and the same team spirit, to build the digital solutions of today and tomorrow and create a positive impact for our customers, for their employees and for the planet. We offer exciting opportunities through innovative projects in data and digital, cloud, AI, cybersecurity, IoT, or digital workspace and big data. Join us and be part of this adventure!

TELUS Digital

telusdigital.com

TELUS Digital crafts unique and enduring experiences for customers and employees, and creates future-focused digital transformations that stand the test of time. We are the brand behind the brands. Our global team members are both passionate ambassadors of our clients’ products and services, and visionary technology experts resolute in our pursuit to elevate their end customer journeys, solve business challenges, mitigate risks, and drive continuous innovation. Our portfolio of end-to-end, integrated capabilities include digital IT services, such as cloud solutions and AI-fueled automation, trust and safety services, AI data solutions, including expertise in computer vision, and front-end digital design and consulting services. Fuel iX™ is TELUS Digital’s proprietary GenAI engine at the heart of our innovation, helping enterprises advance their GenAI pilots to working prototypes and production at scale, quickly, securely and responsibly across multiple environments, applications and clouds. Powered by purpose, TELUS Digital leverages technology, human ingenuity and compassion to fuel remarkable outcomes and create inclusive, thriving communities in the regions where we operate around the world. Guided by our Humanity-in-the-loop principles, we take a responsible approach to the transformational technologies we develop and deploy by proactively considering and addressing the broader impacts of our work.

NCS Group

ncs.co

NCS, a subsidiary of Singtel Group, is a leading technology services firm with presence in Asia Pacific and partners with governments and enterprises to advance communities through technology. Combining the experience and expertise of its 14,000-strong team across 56 specialisations, NCS provides differentiated and end-to-end technology services to clients with its NEXT capabilities in digital, data, cloud and platforms, as well as core offerings in application, infrastructure, engineering and cybersecurity. NCS also believes in building a strong partner ecosystem with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information, visit ncs.co.

Infinite Computer Solutions

infinite.com

Infinite is a global leader in technology modernization, next-gen IT services and solutions, and digital engineering, with over two decades of experience helping clients turn digital transformation into business value. Leveraging an AI-first approach, we combine leading technologies, innovative platforms and accelerators with practical know-how. With the scale of over 23,000 talented professionals across 20+ global locations, we proudly serve hundreds of clients, across all industries including healthcare, financial services, telecom, technology, media, and more. At Infinite, we go beyond technology. We collaborate deeply with our clients to deliver innovative, tailored and client-focused solutions. Infinite is proud to be recognized by ISG, Avasant, Everest Group, HFS, Fosway Group and others for the innovation and leadership we bring to our clients.

Atos

cb atos.net

Atos Group is a global leader in digital transformation with c. 67,000 employees and annual revenue of c. €10 billion, operating in 61 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris. The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

Loading…

NEWS

CGI CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 17, 2026 12:05 PM

News - Hackers claim breach of CGI Sweden, leak allegedly tied to BankID login infrastructure

CGI Inc. confirmed a cybersecurity incident affecting internal systems in its Swedish division after hackers claimed to have stolen data...

Read Article

March 16, 2026 07:00 AM

Sweden’s digital ID provider CGI Sweden confirms data breach

Hackers have claimed a breach of CGI Sweden, leaking source code and credentials tied to systems used by the Swedish Tax Agency and BankID...

Read Article

March 14, 2026 07:00 AM

Sweden Investigates Suspected Hack of E-Government Platform

Hackers are increasingly attacking Europe's public online systems, cybersecurity company says.

Read Article

March 13, 2026 02:14 PM

Sweden probes reported leak of e-government platform source code

A threat actor has claimed to have leaked source code and other sensitive material tied to Sweden's e-government platform, prompting an investigation by...

Read Article

March 13, 2026 07:00 AM

Sweden probes reported leak of e-government platform source code

A threat actor has claimed to have leaked source code and other sensitive material it said came from CGI Sverige, the Swedish subsidiary of...

Read Article

March 11, 2026 07:00 AM

Why CGI Inc (GIB.A) Is Quietly Becoming a US Tech Power Play

You hear about Big Tech all day, but there is a low-key Canadian IT giant quietly scooping billion-dollar US deals, riding AI and government...

Read Article

February 26, 2026 08:00 AM

Why CGI Inc (GIB.A) Just Popped Onto Wall Street’s Radar For 2026

CGI Inc looks boring on paper - but its latest AI and U.S. government wins could quietly reshape how banks, agencies, and brands run their...

Read Article

February 25, 2026 08:00 AM

Brian Baney Interview on AI, Data Growth, Cybersecurity

Brian Baney, CGI Federal SVP for Army and other defense agencies, spoke with ExecutiveBiz about AI, cyber and federal data growth.

Read Article

February 20, 2026 08:00 AM

CGI Inc Stock: Quiet Tech Contractor With Big U.S. Upside?

CGI Inc rarely makes headlines, yet Wall Street is quietly upgrading the stock as U.S. federal IT spend and AI-driven modernization ramp up.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-78122

SUMMARY

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-78049

SUMMARY

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:N/A:P

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-12999

SUMMARY

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet. When whd_network_send_ethernet_data() returns a synchronous failure, the underlying WHD library does not take ownership of the buffer, but the pre-fix driver returned -EIO without releasing it. Each failed transmit therefore permanently leaks one buffer from the pool. airoc_pool is small and fixed (AIROC_WIFI_TX_PACKET_POOL_COUNT + AIROC_WIFI_RX_PACKET_POOL_COUNT, default 20 buffers) and is shared by WHD's whd_host_buffer_get callback for both transmit and receive. Once enough send failures have leaked the pool dry, airoc_wifi_host_buffer_get() returns WHD_BUFFER_ALLOC_FAIL for all subsequent allocations, so both transmit and the WHD-driven receive path fail and Wi-Fi connectivity is lost until the device is rebooted. The leak occurs only on the transmit error path. A Wi-Fi-adjacent attacker can influence the conditions that cause synchronous send failures (for example by deauthenticating/disassociating the station while the local stack continues to attempt transmits), and ordinary transient failures over the device's lifetime accumulate toward the same state. Reliable on-demand triggering is of high complexity and the impact is availability-only, but the resulting denial of service is permanent and non-recoverable without a reboot. The fix releases the buffer with airoc_wifi_buffer_release() on the failure branch, returning it to the pool. The commit also removes a redundant k_sem_give() in airoc_mgmt_disconnect(); because data->sema_common is a binary semaphore (limit 1) the duplicate give merely saturated at 1 and had no security impact.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.6

REFERENCES

CVE-2026-74733

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written. A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-74732

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110_set_avmute Some older DCE timing generators do not implement is_tg_enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference on Southern Islands dGPUs when turning the display off over HDMI. Check that tg and the required ops exist before waiting for frames. (cherry picked from commit 2686a0c0aaa07bec2e24131835cf27b5fd4935a5)

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…