Comparison Overview

The City of Edinburgh Council

VS

City of El Cerrito

The City of Edinburgh Council

Waverley Court, 4 East Market Street, Edinburgh, Midlothian, GB, EH8 8BG
Last Update: 2025-09-02 (UTC)
View Profile
Between 750 and 799
http://www.edinburgh.gov.uk

Based in Scotland's capital city, we provide a range of public services to over 498,800 citizens.

NAICS: 92
NAICS Definition: Public Administration
Employees: 6,312
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

City of El Cerrito

10890 San Pablo Avenue, None, El Cerrito, CA, US, 94530
Last Update: 2025-08-05 (UTC)
Between 700 and 749
http://www.elcerrito.gov

Located near the east shore of the San Francisco Bay, the City of El Cerrito is an ethnically diverse community offering a high quality of life within one of the nation’s most sophisticated and beautiful living areas. With a population of almost 24,000 residents, El Cerrito has the advantage of being centrally located in a major metropolitan area. El Cerrito is an established community with a strong self-identity and a commitment to enhancing the quality of life for its citizens.

NAICS: 92
NAICS Definition: Public Administration
Employees: 192
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/city-of-edinburgh-council.jpeg
The City of Edinburgh Council
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/city-of-el-cerrito.jpeg
City of El Cerrito
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
The City of Edinburgh Council
100%
Compliance Rate
0/4 Standards Verified
City of El Cerrito
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Government Administration Industry Average (This Year)

No incidents recorded for The City of Edinburgh Council in 2025.

Incidents vs Government Administration Industry Average (This Year)

No incidents recorded for City of El Cerrito in 2025.

Incident History — The City of Edinburgh Council (X = Date, Y = Severity)

The City of Edinburgh Council cyber incidents detection timeline including parent company and subsidiaries

Incident History — City of El Cerrito (X = Date, Y = Severity)

City of El Cerrito cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/city-of-edinburgh-council.jpeg
The City of Edinburgh Council
Incidents

Date Detected: 07/2015
Type:Cyber Attack
Attack Vector: Third-party Vendor Compromise
Motivation: Data Theft
Blog: Blog
https://images.rankiteo.com/companyimages/city-of-el-cerrito.jpeg
City of El Cerrito
Incidents

Date Detected: 6/2023
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

The City of Edinburgh Council company demonstrates a stronger AI Cybersecurity Score compared to City of El Cerrito company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

The City of Edinburgh Council and City of El Cerrito have experienced a similar number of publicly disclosed cyber incidents.

In the current year, City of El Cerrito company and The City of Edinburgh Council company have not reported any cyber incidents.

Neither City of El Cerrito company nor The City of Edinburgh Council company has reported experiencing a ransomware attack publicly.

City of El Cerrito company has disclosed at least one data breach, while The City of Edinburgh Council company has not reported such incidents publicly.

The City of Edinburgh Council company has reported targeted cyberattacks, while City of El Cerrito company has not reported such incidents publicly.

Neither The City of Edinburgh Council company nor City of El Cerrito company has reported experiencing or disclosing vulnerabilities publicly.

Neither The City of Edinburgh Council nor City of El Cerrito holds any compliance certifications.

Neither company holds any compliance certifications.

Neither The City of Edinburgh Council company nor City of El Cerrito company has publicly disclosed detailed information about the number of their subsidiaries.

The City of Edinburgh Council company employs more people globally than City of El Cerrito company, reflecting its scale as a Government Administration.

Neither The City of Edinburgh Council nor City of El Cerrito holds SOC 2 Type 1 certification.

Neither The City of Edinburgh Council nor City of El Cerrito holds SOC 2 Type 2 certification.

Neither The City of Edinburgh Council nor City of El Cerrito holds ISO 27001 certification.

Neither The City of Edinburgh Council nor City of El Cerrito holds PCI DSS certification.

Neither The City of Edinburgh Council nor City of El Cerrito holds HIPAA certification.

Neither The City of Edinburgh Council nor City of El Cerrito holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: System Configuration). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References