What is DIAN Dirección de Impuestos y Aduanas Nacionales's cybersecurity risk score?

DIAN Dirección de Impuestos y Aduanas Nacionales has an AI-generated cybersecurity risk score of 682 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has DIAN Dirección de Impuestos y Aduanas Nacionales experienced?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has DIAN Dirección de Impuestos y Aduanas Nacionales been affected by any supply chain cyber incidents ?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does DIAN Dirección de Impuestos y Aduanas Nacionales have SOC 2 Type 1 certification ?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales is not certified under SOC 2 Type 1.

Does DIAN Dirección de Impuestos y Aduanas Nacionales have SOC 2 Type 2 certification ?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales does not hold a SOC 2 Type 2 certification.

Does DIAN Dirección de Impuestos y Aduanas Nacionales comply with GDPR ?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales is not listed as GDPR compliant.

Does DIAN Dirección de Impuestos y Aduanas Nacionales have PCI DSS certification ?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales does not currently maintain PCI DSS compliance.

Does DIAN Dirección de Impuestos y Aduanas Nacionales comply with HIPAA ?

According to Rankiteo, DIAN Dirección de Impuestos y Aduanas Nacionales is not compliant with HIPAA regulations.

Does DIAN Dirección de Impuestos y Aduanas Nacionales have ISO 27001 certification ?

According to Rankiteo,DIAN Dirección de Impuestos y Aduanas Nacionales is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does DIAN Dirección de Impuestos y Aduanas Nacionales operate in ?

DIAN Dirección de Impuestos y Aduanas Nacionales operates primarily in the Government Administration industry.

How many employees does DIAN Dirección de Impuestos y Aduanas Nacionales have ?

DIAN Dirección de Impuestos y Aduanas Nacionales employs approximately 4,966 people worldwide.

Does DIAN Dirección de Impuestos y Aduanas Nacionales own any subsidiaries ?

DIAN Dirección de Impuestos y Aduanas Nacionales presently has no subsidiaries across any sectors.

How many LinkedIn followers does DIAN Dirección de Impuestos y Aduanas Nacionales have ?

DIAN Dirección de Impuestos y Aduanas Nacionales's official LinkedIn profile has approximately 233,894 followers.

What is the NAICS classification code for DIAN Dirección de Impuestos y Aduanas Nacionales ?

DIAN Dirección de Impuestos y Aduanas Nacionales is classified under the NAICS code 92, which corresponds to Public Administration.

Does DIAN Dirección de Impuestos y Aduanas Nacionales have a Crunchbase profile ?

No, DIAN Dirección de Impuestos y Aduanas Nacionales does not have a profile on Crunchbase.

Does DIAN Dirección de Impuestos y Aduanas Nacionales have a LinkedIn profile ?

Yes, DIAN Dirección de Impuestos y Aduanas Nacionales maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/diancolombia.

How many peer or competitor companies does DIAN Dirección de Impuestos y Aduanas Nacionales have ?

DIAN Dirección de Impuestos y Aduanas Nacionales has an estimated 13,301 peer or competitor companies worldwide.

What types of cybersecurity incidents has DIAN Dirección de Impuestos y Aduanas Nacionales faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DDDIAN

Boost Score +25 with badge (5 left)

682

/1000

Weak

707

/1000

Moderate

DIAN Dirección de Impuestos y Aduanas Nacionales Vendor Cyber Rating & Cyber Score

dian.gov.co

Add Your Compliance Badge

Somos una entidad adscrita al Ministerio de Hacienda y Crédito Público, y queremos facilitar y garantizar el entendimiento y cumplimiento de los deberes tributarios, aduaneros y cambiarios, para contribuir a la seguridad fiscal del estado y la competitividad del país. Director general (e): Luis Eduardo Llinás

DDDIAN A.I CyberSecurity Scoring

Scoring History

DDDIAN

DIAN Dirección de Impuestos y Aduanas Nacionales CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

DIAN Dirección de I...

Breach

100

3/2026

DIA1772664324

Loading…

A.I.

DDDIAN Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DDDIAN

Incidents vs Government Administration Industry Avg (This Year)

DIAN Dirección de Impuestos y Aduanas Nacionales has 31.51% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

DIAN Dirección de Impuestos y Aduanas Nacionales has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types DDDIAN vs Government Administration Industry Avg (This Year)

DIAN Dirección de Impuestos y Aduanas Nacionales reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - DDDIAN (X = Date, Y = Severity)

Loading…

SUBSIDIARY

DIAN Dirección de Impuestos y Aduanas Nacionales Subsidiaries

Parent Company

DDDIAN

Government Administration

Website: http://www.dian.gov.co

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

DIAN Dirección de Impuestos y Aduanas Nacionales Similar Companies

Västra Götalandsregionen

vgregion.se

Region Västra Götaland is governed by democratically elected politicians and with just over 50,000 employees is one of Sweden’s biggest employers. It is tasked with offering good healthcare and dental care and providing the prerequisites for good public health, a rich cultural life, a good environment, jobs, research, education and good communications. All together, these provide a foundation for sustainable growth in Västra Götaland. Koncernen Västra Götalandsregionen finns till för människorna i Västra Götaland och för allt som ligger invånarna nära: jobb, utbildning, hälso- och sjukvård, kultur och kommunikationer. Västra Götalandsregionen ska bidra till hälsa och trygghet i vardagen och för ett livskraftigt Västra Götaland nu och i framtiden. Vi har ett gemensamt ansvar att se till den enskilda människans behov och till regionmedborgarnas samlade behov för att uppnå visionen Det goda livet. Det gör vi inom våra tre ansvarsområden: Hälso- och sjukvård, tillväxt och utveckling och kollektivtrafik. Koncernen har drygt 50 000 medarbetare som arbetar inom framförallt hälso-och sjukvård men även inom kollektivtrafik, kulturverksamhet, skolor, folktandvård, lokal- och fastighetsförvaltning och folkhälsofrågor. Att arbeta i Västra Götalandsregionen gör avtryck – hos människor, i samhället och för framtiden. Lediga tjänster finns på: www.vgregion.se/jobb

Department of Health (Philippines)

doh.gov.ph

The Philippine Department of Health (abbreviated as DOH; Filipino: Kagawaran ng Kalusugan) is the executive department of the Philippine government responsible for ensuring access to basic public health services by all Filipinos through the provision of quality health care and the regulation of all health services and products. It is the government's over-all technical authority on health. It has its headquarters at the San Lazaro Compound, along Rizal Avenue in Manila. The department is led by the Secretary of Health, nominated by the President of the Philippines and confirmed by the Commission on Appointments. The Secretary is a member of the Cabinet. The current Secretary of Health is Francisco Duque.

I WORK FOR SA

sa.gov.au

The OFFICIAL careers page for the South Australian Government. The South Australian Public Sector is the State's largest workforce. We are an employer of choice that reflects the diverse community we serve. Our people are from a range of backgrounds and vocations, from entry level, mid-career and leadership professionals as well as graduates, apprentices and trainees. As a public sector employee, you can be proud that the work you do supports our community and our State's prosperity. For a career with more opportunity, flexibility and purpose, visit IWORKFOR.SA.gov.au

State of Florida

myflorida.com

Join Florida’s talented workforce to fulfill your professional goals and achieve a meaningful career. Our talented public servants work hard to serve more than 19 million residents across Florida, and you, too, can realize success in the Sunshine State. Working in Florida’s state government means being responsive to the issues impacting the taxpayers of our state. Florida’s state government boasts both fast-paced work environments in which critical thinking and creative problem-solving are a must as well as steady employment opportunities that prize consistent service to our state’s residents. In some positions, state employment means being able to influence policy decisions and help implement change. In others, state employment means being the reliable resource that our taxpayers have come to expect from Florida’s public servants. All positions offer the ability to gain valuable experience quickly, improving your overall skillset. The State of Florida is seeking individuals with leadership skills, creativity and dedication to their fellow Floridians and individuals who recognize the professional development opportunities and achievements possible through state service. Florida boasts the third largest population in the country and is richly diverse in both population and landscape. With an award-winning park system, warm weather and beautiful bodies of water, Florida is the perfect environment for recreational activities and outdoor enthusiasts. Our favorable tax climate means your income goes further and our business-friendly policies foster private sector growth. Joining Florida’s talented, diverse workforce provides the opportunity to achieve your professional goals while living in a state that values quality of life, culture and recreation. For employment opportunities with the State of Florida, visit https://jobs.myflorida.com.

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

Belastingdienst

belastingdienst.nl

De organisatie bestaat uit diverse onderdelen, waaronder de Belastingdienst, Douane, Toeslagen, FIOD en enkele facilitaire organisaties. Met ruim 30.000 medewerkers werken we in kantoren die verspreid zijn over het hele land. Gezamenlijk heffen, innen en controleren we belastingen. Daarnaast zorgen we ook voor het uitbetalen van toeslagen. En zijn we verantwoordelijk voor douanetaken en het opsporen van fraude. De Belastingdienst is een organisatie die 24 uur per dag, 7 dagen per week in dienst staat van de samenleving. Waar jaarlijks miljoenen aangiften worden behandeld, en waar voor honderden miljoenen aan toeslagen worden uitbetaald. En waar de Douane dagelijks zorgt voor de vlotte en veilige in- en uitvoer van tonnen goederen. Ondanks deze grote aantallen streven wij waar mogelijk naar individuele en persoonlijke dienstverlening. En in de vorm van bijvoorbeeld convenanten en partnerships werken wij ook zo goed mogelijk samen met het bedrijfsleven en andere ketenpartners. De Belastingdienst: grootschalig, veelzijdig en altijd maatschappelijk relevant.

State of Minnesota

mn.gov

Minnesota State Government is the third largest employer in the state of Minnesota, employing over 50,000 diverse and talented employees in more than 100 state agencies, boards, commissions, colleges, and universities. Our workplaces can be found across the state in 86 out of 87 Minnesota counties and a small share of employees work in out-of-state locations. When you bring your career to the State of Minnesota, the work you do affects the quality of life of millions of Minnesotans. From those who shape policy, to those who keep us safe, preserve our environment, or take care of our most vulnerable populations, we take our responsibilities to the public seriously. Join us as we continue to serve our great state and build a better Minnesota. To learn more about our career opportunities and comprehensive benefits, visit www.mn.gov/careers. To learn more about our state agencies, boards, commissions, colleges, and universities, visit http://mn.gov/portal/government/state/agencies-boards-commissions.

Nav

nav.no

Nav er en viktig del av sikkerhetsnettet i velferdsstaten. Vi skal bidra til at flere kommer i arbeid og færre går på stønad, og samtidig sørge for at de som trenger det er sikra inntekt og økonomisk trygghet gjennom rett pengestøtte til rett tid. For å løse dette samfunnsoppdraget forvalter Nav om lag en tredel av statsbudsjettet, gjennom ordninger som arbeidsrettede tiltak, dagpenger, arbeidsavklaringspenger, sykepenger, pensjon, økonomisk sosialhjelp, foreldrepenger, barnetrygd og kontantstøtte. Nav tilbyr tjenester, ytelser og stønader til både privatpersoner og arbeidsgivere. For å sikre helhetlige tjenester, samarbeider vi tett med arbeidslivet, kommune-, helse- og utdanningssektoren, andre statlige virksomheter og frivillige aktører.

Department of Education

vic.gov.au

The Department of Education is responsible for delivering the Victorian Government’s commitment to making Victoria the Education State, where all Victorians have the best learning and development experience, regardless of their background, postcode or circumstances. Education remains a cornerstone for ensuring all Victorians have the skills and knowledge they need to actively participate in and contribute to our rapidly-changing economy and society. The Department delivers and regulates statewide learning and development services across the early childhood and school sectors. Previously the Department of Education and Training.

Loading…

NEWS

DIAN Dirección de Impuestos y Aduanas Nacionales CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 22, 2021 07:00 AM

APT-C-36 Hacking Group Uses Wide Range of Trojans (RATs) To Target Organizations

A hacking group from Columbia which is dubbed as "APT-C-36" is running a phishing campaign that represents emails and attempts.

Read Article

May 10, 2018 07:00 AM

Enhancing Office 365 Advanced Threat Protection with detonation-based heuristics and machine learning

Office 365 ATP protects customers from unknown email threats in real-time by using intelligent systems that inspect attachments and links for malicious content.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…