Comparison Overview

Duke Energy Corporation

VS

Southern California Edison (SCE)

Duke Energy Corporation

525 S Tryon St, Charlotte, North Carolina, 28202, US
Last Update: 2025-12-11
View Profile
Between 800 and 849
http://www.duke-energy.com

Duke Energy, a Fortune 150 company headquartered in Charlotte, N.C., is one of America’s largest energy holding companies. The company’s electric utilities serve 8.4 million customers in North Carolina, South Carolina, Florida, Indiana, Ohio and Kentucky, and collectively own 54,800 megawatts of energy capacity. Its natural gas utilities serve 1.7 million customers in North Carolina, South Carolina, Tennessee, Ohio and Kentucky. Duke Energy is executing an ambitious clean energy transition, keeping reliability, affordability and accessibility at the forefront as the company works toward net-zero methane emissions from its natural gas business by 2030 and net-zero carbon emissions from electricity generation by 2050. The company is investing in major electric grid upgrades and cleaner generation, including expanded energy storage, renewables, natural gas and nuclear. Our team is available Monday to Friday from 8 a.m. to 5 p.m. EST. If you suspect an emergency, please call 911.

NAICS: 22
NAICS Definition: Utilities
Employees: 24,627
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

Southern California Edison (SCE)

2244 Walnut Grove Ave., None, Rosemead, CA, US, 91770
Last Update: 2025-12-09
Between 750 and 799
http://www.sce.com/

As one of the nation’s largest electric utilities, we’re bringing more clean and renewable sources of energy to Southern California. From energy storage to transportation electrification, our employees are working on innovative projects that will help cut emissions and greenhouse gases to provide cleaner air for everyone. We have diverse teams, made up of inventors, doers and problem solvers. The people here at SCE don't just keep the lights on. The mission is so much bigger. We are fueling the kind of innovation that is changing an entire industry, and quite possibly the planet. Follow us on LinkedIn and visit www.edisoncareers.com to learn more about who we are and how we’re working together to create a better tomorrow.

NAICS: 22
NAICS Definition: Utilities
Employees: 12,356
Subsidiaries: 2
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/duke-energy-corporation.jpeg
Duke Energy Corporation
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/sce.jpeg
Southern California Edison (SCE)
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Duke Energy Corporation
100%
Compliance Rate
0/4 Standards Verified
Southern California Edison (SCE)
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Duke Energy Corporation in 2025.

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Southern California Edison (SCE) in 2025.

Incident History — Duke Energy Corporation (X = Date, Y = Severity)

Duke Energy Corporation cyber incidents detection timeline including parent company and subsidiaries

Incident History — Southern California Edison (SCE) (X = Date, Y = Severity)

Southern California Edison (SCE) cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/duke-energy-corporation.jpeg
Duke Energy Corporation
Incidents

Date Detected: 10/2024
Type:Cyber Attack
Motivation: Strategic dependencies and potential exploitation
Blog: Blog
https://images.rankiteo.com/companyimages/sce.jpeg
Southern California Edison (SCE)
Incidents

Date Detected: 11/2022
Type:Breach
Attack Vector: Inadvertent Disclosure
Blog: Blog

FAQ

Duke Energy Corporation company demonstrates a stronger AI Cybersecurity Score compared to Southern California Edison (SCE) company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Duke Energy Corporation and Southern California Edison (SCE) have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Southern California Edison (SCE) company and Duke Energy Corporation company have not reported any cyber incidents.

Neither Southern California Edison (SCE) company nor Duke Energy Corporation company has reported experiencing a ransomware attack publicly.

Southern California Edison (SCE) company has disclosed at least one data breach, while Duke Energy Corporation company has not reported such incidents publicly.

Duke Energy Corporation company has reported targeted cyberattacks, while Southern California Edison (SCE) company has not reported such incidents publicly.

Neither Duke Energy Corporation company nor Southern California Edison (SCE) company has reported experiencing or disclosing vulnerabilities publicly.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds any compliance certifications.

Neither company holds any compliance certifications.

Southern California Edison (SCE) company has more subsidiaries worldwide compared to Duke Energy Corporation company.

Duke Energy Corporation company employs more people globally than Southern California Edison (SCE) company, reflecting its scale as a Utilities.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds SOC 2 Type 1 certification.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds SOC 2 Type 2 certification.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds ISO 27001 certification.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds PCI DSS certification.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds HIPAA certification.

Neither Duke Energy Corporation nor Southern California Edison (SCE) holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References