What is the official website of Corporate Sustainability Assessment (CSA) ?

The official website of Corporate Sustainability Assessment (CSA) is http://www.spglobal.com/esg/csa.

What is Corporate Sustainability Assessment (CSA)'s cybersecurity risk score?

Corporate Sustainability Assessment (CSA) has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Corporate Sustainability Assessment (CSA) experienced?

According to Rankiteo, Corporate Sustainability Assessment (CSA) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Corporate Sustainability Assessment (CSA) been affected by any supply chain cyber incidents ?

According to Rankiteo, Corporate Sustainability Assessment (CSA) has been affected by a supply chain cyber incident involving Checkmarx, with the incident ID LITSPGGUECHE1777407909.

Does Corporate Sustainability Assessment (CSA) have SOC 2 Type 1 certification ?

According to Rankiteo, Corporate Sustainability Assessment (CSA) is not certified under SOC 2 Type 1.

Does Corporate Sustainability Assessment (CSA) have SOC 2 Type 2 certification ?

According to Rankiteo, Corporate Sustainability Assessment (CSA) does not hold a SOC 2 Type 2 certification.

Does Corporate Sustainability Assessment (CSA) comply with GDPR ?

According to Rankiteo, Corporate Sustainability Assessment (CSA) is not listed as GDPR compliant.

Does Corporate Sustainability Assessment (CSA) have PCI DSS certification ?

According to Rankiteo, Corporate Sustainability Assessment (CSA) does not currently maintain PCI DSS compliance.

Does Corporate Sustainability Assessment (CSA) comply with HIPAA ?

According to Rankiteo, Corporate Sustainability Assessment (CSA) is not compliant with HIPAA regulations.

Does Corporate Sustainability Assessment (CSA) have ISO 27001 certification ?

According to Rankiteo,Corporate Sustainability Assessment (CSA) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Corporate Sustainability Assessment (CSA) operate in ?

Corporate Sustainability Assessment (CSA) operates primarily in the Information Services industry.

How many employees does Corporate Sustainability Assessment (CSA) have ?

Corporate Sustainability Assessment (CSA) employs approximately 10 people worldwide.

Does Corporate Sustainability Assessment (CSA) own any subsidiaries ?

Corporate Sustainability Assessment (CSA) presently has no subsidiaries across any sectors.

How many LinkedIn followers does Corporate Sustainability Assessment (CSA) have ?

Corporate Sustainability Assessment (CSA)'s official LinkedIn profile has approximately 45,544 followers.

What is the NAICS classification code for Corporate Sustainability Assessment (CSA) ?

Corporate Sustainability Assessment (CSA) is classified under the NAICS code 519, which corresponds to Other Information Services.

Does Corporate Sustainability Assessment (CSA) have a Crunchbase profile ?

No, Corporate Sustainability Assessment (CSA) does not have a profile on Crunchbase.

Does Corporate Sustainability Assessment (CSA) have a LinkedIn profile ?

Yes, Corporate Sustainability Assessment (CSA) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/corporate-sustainability-benchmarking.

How many cybersecurity incidents has Corporate Sustainability Assessment (CSA) experienced ?

As of June 14, 2026, Rankiteo reports that Corporate Sustainability Assessment (CSA) has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Corporate Sustainability Assessment (CSA) have ?

Corporate Sustainability Assessment (CSA) has an estimated 2,620 peer or competitor companies worldwide.

What types of cybersecurity incidents has Corporate Sustainability Assessment (CSA) faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CSA

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Corporate Sustainability Assessment (CSA) Vendor Cyber Rating & Cyber Score

spglobal.com

Add Your Compliance Badge

The S&P Global Corporate Sustainability Assessment (CSA) is an annual evaluation of companies’ sustainability practices. It covers over 12,000 companies from around the world. The CSA focuses on sustainability criteria that are both industry-specific and financially material and has been doing so since 1999. The results of the S&P Global CSA serve a wide range stakeholders and applications ranging from indices to asset management as well as company benchmarking. The S&P Global Corporate Sustainability Assessment (CSA) is the basis to select companies into different sustainability-focused indices, including the world-famous Dow Jones Best in Class Indices (formerly DJSI) or the family of S&P DJI Scored & Screened sustainability focused

CSA A.I CyberSecurity Scoring

Scoring History

CSA

Corporate Sustainability Assessment (CSA) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

S&P Global

Cyber Attack

100

4/2026

Checkmarx

LITSPGGUECHE177...

Loading…

A.I.

CSA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CSA

Incidents vs Information Services Industry Avg (This Year)

No incidents recorded for Corporate Sustainability Assessment (CSA) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Corporate Sustainability Assessment (CSA) in 2026.

Incident Types CSA vs Information Services Industry Avg (This Year)

No incidents recorded for Corporate Sustainability Assessment (CSA) in 2026.

Incident History - CSA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Corporate Sustainability Assessment (CSA) Subsidiaries

CSA

Information Services

Website: http://www.spglobal.com/esg/csa

Company Size: 10,001+ employees

S&P GlobalFinancial Services

S&P Global Market IntelligenceFinancial Services

S&P Global Commodity InsightsOil and Gas

S&P Dow Jones IndicesFinancial Services

S&P Global Sustainable1Information Services

Oil by S&P Global Commodity InsightsOil and Gas

S&P Global RatingsFinancial Services

CERAWeekOil and Gas

Petrochemicals by S&P Global Commodity InsightsOil and Gas

Energy Transition by S&P Global Commodity InsightsOil and Gas

LNG by S&P Global Commodity InsightsOil and Gas

Natural Gas by S&P Global Commodity InsightsOil and Gas

The Climate Service, now a part of S&P GlobalTechnology, Information and Internet

S&P Global MobilityFinancial Services

Metals by S&P Global Commodity Insights Mining

Agriculture by S&P Global Commodity InsightsOil and Gas

Shipping by S&P Global Commodity InsightsOil and Gas

Upstream by S&P Global Commodity InsightsOil and Gas

Cappitech from S&P Global Market IntelligenceFinancial Services

Coal by S&P Global Commodity InsightsOil and Gas

S&P Global ChemicalsChemical Manufacturing

Electric Power by S&P Global Commodity InsightsOil and Gas

Commodity Insights LIVEFinancial Services

Chemical Week by S&P GlobalInformation Services

Loading…

Corporate Sustainability Assessment (CSA) Similar Companies

CASA

casawealth.org

CASA is an industry leading association that can provide you with the edge you need to be an effective business owner with a substantial property portfolio and gives you the power to confidently manage your business and structures to enable you, the business owner, to later on become a member of our exclusive business and investment consortiums.

Gartner

gtnr.it

We deliver actionable, objective business and technology insights. Our expert guidance and tools enable faster, smarter decisions and stronger performance on an organization’s mission-critical priorities. Our unrivaled combination of business and technology insights steers clients toward the right decisions on the issues that matter most. As a $6.3 Billion company, with 21,000 associates, and a member of the S&P 500, we are an objective partner with 14,000 client enterprises in 90 countries and territories — across every major function, geography, industry and market sector — and boast 45+ years of experience providing insights and expert guidance to client enterprises worldwide. To learn more about how we guide the leaders who shape the world. visit gartner.com. Gartner, Inc. (NYSE: IT) Community guidelines: https://gtnr.it/3tceMrU C-level Insights of the Week LinkedIn Newsletter: https://gtnr.it/4c56S97

Experian

experianplc.com

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, deliver digital marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them to save time and money. We operate across a range of markets, from financial services to healthcare, automotive, agrifinance, insurance, and many more industry segments. We invest in talented people and new advanced technologies to unlock the power of data and innovate. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

GLG

glginsights.com

GLG is the world’s largest insight network. We connect decision makers to the right experts so they can act with the confidence that comes from true clarity and have what it takes to get ahead. Our network of experts is the world’s largest source of first-hand expertise, and we recruit hundreds of new experts every day. We bring the power of insight to every great professional decision. Visit GLGinsights.com. For information regarding GLG’s practices with respect to personal information, please visit our privacy policy at https://glginsights.com/privacy-policy/

Springer Nature

springernature.com

Be Part of Progress - together we bring greater understanding to the world Springer Nature is one of the leading publishers of research in the world. We publish the largest number of journals and books and are a pioneer in open research. Through our leading brands, trusted for more than 180 years, we provide technology-enabled products, platforms and services that help researchers to uncover new ideas and share their discoveries, health professionals to stay at the forefront of medical science, and educators to advance learning. We are proud to be part of progress, working together with the communities we serve to share knowledge and bring greater understanding to the world. Global key facts: Established for over 180 years Nearly 10,000 colleagues 200 offices in 45 countries on all continents World’s largest academic book publisher Publisher of Nature, the world’s most influential journal First company to publish more than 1 million Open Access articles Key brands and imprints: Springer Nature is home to some of the best-known names in research, health, educational and professional publishing. Every day, around the globe, our brands reach millions of people. Nature Springer BMC Palgrave Macmillan Apress Macmillan Education Scientific American Springer Health+ Springer Medizin Research Square J.B. Metzler BSL Adis

NielsenIQ

niq.com

NielsenIQ (NIQ) is the world’s leading consumer intelligence company, delivering the most complete understanding of consumer buying behavior and revealing new pathways to growth. NIQ combined with GfK in 2023, bringing together the two industry leaders with unparalleled global reach. Today NIQ has operations in 95+ countries representing 97% of the world’s GDP. With a holistic retail read and the most comprehensive consumer insights—delivered with advanced analytics through state-of-the-art platforms—NIQ delivers the Full View™.

Loading…

NEWS

Corporate Sustainability Assessment (CSA) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 22, 2026 06:46 PM

Firstsource tops Professional Services sector in S&P Global Sustainable1 FY25

Firstsource Solutions Limited has achieved an ESG and Corporate Sustainability Assessment (CSA) score of 87 each in the S&P Global...

Read Article

January 22, 2026 04:03 AM

Satin Creditcare Network Limited Achieves Score of 59 in First S&P Global Corporate Sustainability Assessment

Satin Creditcare Network Limited achieved a score of 59 in its first S&P Global Corporate Sustainability Assessment on January 22, 2026.

Read Article

January 09, 2026 08:00 AM

Piramal Pharma Achieves Notable Score Increase on 2025 S&P Global Corporate Sustainability Assessment (CSA)

The S&P Global CSA is an annual test that evaluates the sustainability practices of thousands of companies; it is one of the most respected...

Read Article

December 11, 2025 08:00 AM

REC secures top ESG rating among financial institutions in NSE ESG Rankings

REC Limited has achieved the highest ESG rating among financial institutions in the latest NSE ESG Ratings.

Read Article

December 09, 2025 08:00 AM

PLDT’s sustainability rating in S&P CSA 2025 hits new high

PLDT Inc., the country's largest fully integrated telecommunications firm, reported a significant improvement in its environmental, social,...

Read Article

November 13, 2025 08:00 AM

‘Z’ rises to top 5% globally in ESG performance, scores 51 in S&P global CSA 2025

Zee Entertainment Enterprises Ltd. ('Z') has achieved a major milestone in its sustainability journey by garnering a high score of 51 out of...

Read Article

November 13, 2025 08:00 AM

Zee Entertainment Achieves Top 5% Global ESG Ranking in Media Sector

Zee Entertainment Enterprises Ltd. (ZEEL) has secured a position in the top 5% of companies in the global media, movies, and entertainment...

Read Article

November 13, 2025 08:00 AM

Z ranks among the top 5% in media, movies and entertainment globally

The Company garners a high score of 51 out of 100 in ESG as per the S&P Global Corporate Sustainability Assessment 2025.

Read Article

November 06, 2025 08:00 AM

Hindustan Zinc Retains Global No. 1* Ranking in S&P Global Corporate Sustainability Assessment 2025 for 3rd Consecutive Year

Hindustan Zinc Limited (BSE: 500188) (NSE: HINDZINC), India's only and the world's largest integrated zinc producer, and among the top five...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…