Comparison Overview

Elsevier

VS

VOIS

Elsevier

Radarweg 29, Amsterdam, North Holland, 1043, NL
Last Update: 2025-12-09
View Profile
Between 750 and 799
https://www.elsevier.com

As a global leader in information and analytics, Elsevier helps researchers and healthcare professionals advance science and improve health outcomes for the benefit of society. We do this by facilitating insights and critical decision-making for customers across the global research and health ecosystems. In everything we publish, we uphold the highest standards of quality and integrity. We bring that same rigor to our information analytics solutions for researchers, health professionals, institutions and funders. Elsevier employs 8,700 people worldwide. We have supported the work of our research and health partners for more than 140 years. Growing from our roots in publishing, we offer knowledge and valuable analytics that help our users make breakthroughs and drive societal progress. With the Elsevier Foundation and our external Inclusion & Diversity Advisory Board, we work in partnership with diverse stakeholders to advance inclusion and diversity in science, research and healthcare in developing countries and around the world.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 11,962
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

VOIS

London, GB
Last Update: 2025-12-09
Between 750 and 799
https://www.vodafone.com/what-we-do/services/vois

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. We are pioneering a new Partnership model for the Telco industry, where the sharing of ideas, innovation, platforms and services will unlock opportunities for our people and value for our customers. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We deliver value and results at scale by leveraging technology, data and our talented international team of 30K professionals in the following services: Technology, Business, B2B, Corporate Services, Customer Care. Our commercial model creates clear, benchmarked and competitively-priced services so that we can offer guaranteed outcomes for customers with flexibility and optionality. Bringing together our combined strengths with our strategic partner Accenture our strategy is to: Commercialise: Create cost transparency and foster trust and growth for our customers Re-platform: To simplify, streamline and scale our business Extend beyond our borders: deepening our relationships, growing our services and expanding our customer base across new customers & new geographies We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 19,968
Subsidiaries: 20
12-month incidents
0
Known data breaches
4
Attack type number
4

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/elsevier.jpeg
Elsevier
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/vois.jpeg
VOIS
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Elsevier
100%
Compliance Rate
0/4 Standards Verified
VOIS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Elsevier in 2025.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for VOIS in 2025.

Incident History — Elsevier (X = Date, Y = Severity)

Elsevier cyber incidents detection timeline including parent company and subsidiaries

Incident History — VOIS (X = Date, Y = Severity)

VOIS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/elsevier.jpeg
Elsevier
Incidents

Date Detected: 03/2019
Type:Data Leak
Attack Vector: Open Server
Blog: Blog
https://images.rankiteo.com/companyimages/vois.jpeg
VOIS
Incidents

Date Detected: 06/2023
Type:Breach
Attack Vector: Data Breach
Motivation: Unauthorized Access to Sensitive Data
Blog: Blog

Date Detected: 04/2023
Type:Ransomware
Blog: Blog

Date Detected: 09/2022
Type:Breach
Blog: Blog

FAQ

VOIS company demonstrates a stronger AI Cybersecurity Score compared to Elsevier company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

VOIS company has faced a higher number of disclosed cyber incidents historically compared to Elsevier company.

In the current year, VOIS company and Elsevier company have not reported any cyber incidents.

VOIS company has confirmed experiencing a ransomware attack, while Elsevier company has not reported such incidents publicly.

VOIS company has disclosed at least one data breach, while Elsevier company has not reported such incidents publicly.

VOIS company has reported targeted cyberattacks, while Elsevier company has not reported such incidents publicly.

Neither Elsevier company nor VOIS company has reported experiencing or disclosing vulnerabilities publicly.

Neither Elsevier nor VOIS holds any compliance certifications.

Neither company holds any compliance certifications.

VOIS company has more subsidiaries worldwide compared to Elsevier company.

VOIS company employs more people globally than Elsevier company, reflecting its scale as a IT Services and IT Consulting.

Neither Elsevier nor VOIS holds SOC 2 Type 1 certification.

Neither Elsevier nor VOIS holds SOC 2 Type 2 certification.

Neither Elsevier nor VOIS holds ISO 27001 certification.

Neither Elsevier nor VOIS holds PCI DSS certification.

Neither Elsevier nor VOIS holds HIPAA certification.

Neither Elsevier nor VOIS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
References
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
References
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
References
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
References