Comparison Overview

Chiltern Open Air Museum

VS

Horniman Museum and Gardens

Chiltern Open Air Museum

Newland Park, Gorelands Lane, Chalfont St Giles, England, HP8 4AB, GB
Last Update: 2025-12-03
Between 750 and 799

Chiltern Open Air Museum was founded in 1976 with the aim of rescuing threatened buildings. More than thirty historic building have now been saved and rebuilt at the site, and there are more in store. The Museum only accepts buildings that would otherwise be demolished. The Museum’s collection focuses on vernacular buildings – the past houses and workplaces of ordinary people that are gradually disappearing from the landscape. In the Chilterns, an Area of Outstanding Natural Beauty on London’s doorstep, the pressures of redevelopment are particularly great. Chiltern Open Air Museum preserves a heritage that would otherwise have been lost. The Museum is a registered charity and receives no regular grants towards its running costs or capital projects. We are grateful for the fantastic support of over 200 volunteers and the Friends of the Museum Association.

NAICS: 712
NAICS Definition:
Employees: 32
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Horniman Museum and Gardens

100 London Road, London, undefined, SE23 3PQ, GB
Last Update: 2025-12-01
Between 750 and 799

We are the Horniman Museum and Gardens, an inspiring, surprising, family-friendly, free attraction in South London’s Forest Hill. We’ve been open since Victorian times, when Frederick John Horniman first opened his house and extraordinary collection of objects to visitors. Since then, our collection has grown tenfold and includes internationally important collections of anthropology and musical instruments, as well as an acclaimed aquarium, butterfly house and natural history collection. Unusually for such an important Museum, you can see our collection up-close and face-to-face. You can even pick up, try on and play with some of our objects. Our visitors come time and again to explore our free Museum, take part in our activities and enjoy our 16-acre Gardens. And they discover something fascinating and mesmerising every time. What to work at the Horniman? Find all of our job listings online: https://www.horniman.ac.uk/about-the-horniman/jobs/ Follow the Horniman on social: https://www.facebook.com/hornimanmuseumandgardens/ https://www.instagram.com/hornimanmuseumgardens/ https://www.tiktok.com/@horniman https://uk.pinterest.com/hornimanmuseum/ And sign up to our newsletter to hear about events and exhibitions coming up: http://www.horniman.ac.uk/newsletter

NAICS: 712
NAICS Definition:
Employees: 148
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/chiltern-open-air-museum.jpeg
Chiltern Open Air Museum
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/horniman-museum-&-gardens.jpeg
Horniman Museum and Gardens
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Chiltern Open Air Museum
100%
Compliance Rate
0/4 Standards Verified
Horniman Museum and Gardens
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Chiltern Open Air Museum in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Horniman Museum and Gardens in 2025.

Incident History — Chiltern Open Air Museum (X = Date, Y = Severity)

Chiltern Open Air Museum cyber incidents detection timeline including parent company and subsidiaries

Incident History — Horniman Museum and Gardens (X = Date, Y = Severity)

Horniman Museum and Gardens cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/chiltern-open-air-museum.jpeg
Chiltern Open Air Museum
Incidents

No Incident

https://images.rankiteo.com/companyimages/horniman-museum-&-gardens.jpeg
Horniman Museum and Gardens
Incidents

No Incident

FAQ

Horniman Museum and Gardens company demonstrates a stronger AI Cybersecurity Score compared to Chiltern Open Air Museum company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Horniman Museum and Gardens company has disclosed a higher number of cyber incidents compared to Chiltern Open Air Museum company.

In the current year, Horniman Museum and Gardens company and Chiltern Open Air Museum company have not reported any cyber incidents.

Neither Horniman Museum and Gardens company nor Chiltern Open Air Museum company has reported experiencing a ransomware attack publicly.

Neither Horniman Museum and Gardens company nor Chiltern Open Air Museum company has reported experiencing a data breach publicly.

Neither Horniman Museum and Gardens company nor Chiltern Open Air Museum company has reported experiencing targeted cyberattacks publicly.

Neither Chiltern Open Air Museum company nor Horniman Museum and Gardens company has reported experiencing or disclosing vulnerabilities publicly.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Chiltern Open Air Museum company nor Horniman Museum and Gardens company has publicly disclosed detailed information about the number of their subsidiaries.

Horniman Museum and Gardens company employs more people globally than Chiltern Open Air Museum company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds SOC 2 Type 1 certification.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds SOC 2 Type 2 certification.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds ISO 27001 certification.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds PCI DSS certification.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds HIPAA certification.

Neither Chiltern Open Air Museum nor Horniman Museum and Gardens holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls RelinquishMagickMemory on _drawInfo->font, freeing the font string but leaving _drawInfo->font pointing to freed memory while _drawInfo->family is set to that (now-invalid) pointer. Any later cleanup or reuse of _drawInfo->font re-frees or dereferences dangling memory. DestroyDrawInfo and other setters (Options::font, Image::font) assume _drawInfo->font remains valid, so destruction or subsequent updates trigger crashes or heap corruption. This vulnerability is fixed in 7.1.2-9 and 6.9.13-34.

Risk Information
cvss3
Base: 4.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Description

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes (or stores in an executable location) without sufficient validation, sanitization, or execution restrictions. An authenticated remote attacker can upload a crafted PHP file and cause the application or web server to execute it, resulting in remote code execution (RCE).

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries.

Risk Information
cvss3
Base: 8.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
cvss4
Base: 7.1
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X