Comparison Overview

Freeport-McMoRan

VS

Kazatomprom

Freeport-McMoRan

333 N. Central Ave., None, Phoenix, AZ, US, 85004
Last Update: 2025-12-11
Between 750 and 799

Freeport-McMoRan Inc. (Freeport) is a leading international metals company with the objective of being foremost in copper. Headquartered in Phoenix, Arizona, Freeport operates large, long-lived, geographically diverse assets with significant proven and probable mineral reserves of copper, gold and molybdenum. Freeport’s portfolio of assets includes the Grasberg minerals district in Indonesia, one of the world’s largest copper and gold deposits; and significant operations in North America and South America, including the large-scale Morenci minerals district in Arizona and the Cerro Verde operation in Peru. Freeport has a strong commitment to safety performance, environmental management and the communities where it operates. As a founding member of the International Council on Mining and Metals (ICMM), Freeport is committed to implementing ICMM’s Mining Principles, which serve as a best practice framework on sustainable development for the global mining and metals industry. Freeport has also achieved the Copper Mark, a comprehensive assurance framework designed to demonstrate the copper industry’s responsible production practices, at all of its copper-producing sites globally. By supplying responsibly produced copper, Freeport is proud to be a positive contributor to the world well beyond its operational boundaries. Additional information is available at fcx.com

NAICS: 212
NAICS Definition: Mining (except Oil and Gas)
Employees: 9,322
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Kazatomprom

17/12, Syganak Street. Z05T1X3 Astana, KZ
Last Update: 2025-12-10
Between 750 and 799

NAC Kazatomprom JSC is the national operator of the Republic of Kazakhstan for the import and export of uranium, rare metals, nuclear fuel for nuclear power plants. Since 2009, Kazakhstan has been the world leader in natural uranium mining, and Kazatomprom has priority rights to the country’s extensive reserves. National atomic company assets include the entire complex of Kazakh enterprises involved in the front-end of the nuclear fuel cycle - from geological exploration, uranium mining, and production of nuclear fuel cycle, through to scientific research and development of patented technologies.

NAICS: 212
NAICS Definition: Mining (except Oil and Gas)
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/freeport-mcmoran-inc.jpeg
Freeport-McMoRan
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/js-nac-kazatomprom-.jpeg
Kazatomprom
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Freeport-McMoRan
100%
Compliance Rate
0/4 Standards Verified
Kazatomprom
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Mining Industry Average (This Year)

No incidents recorded for Freeport-McMoRan in 2025.

Incidents vs Mining Industry Average (This Year)

No incidents recorded for Kazatomprom in 2025.

Incident History — Freeport-McMoRan (X = Date, Y = Severity)

Freeport-McMoRan cyber incidents detection timeline including parent company and subsidiaries

Incident History — Kazatomprom (X = Date, Y = Severity)

Kazatomprom cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/freeport-mcmoran-inc.jpeg
Freeport-McMoRan
Incidents

Date Detected: 8/2023
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/js-nac-kazatomprom-.jpeg
Kazatomprom
Incidents

No Incident

FAQ

Freeport-McMoRan company demonstrates a stronger AI Cybersecurity Score compared to Kazatomprom company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Freeport-McMoRan company has historically faced a number of disclosed cyber incidents, whereas Kazatomprom company has not reported any.

In the current year, Kazatomprom company and Freeport-McMoRan company have not reported any cyber incidents.

Neither Kazatomprom company nor Freeport-McMoRan company has reported experiencing a ransomware attack publicly.

Freeport-McMoRan company has disclosed at least one data breach, while the other Kazatomprom company has not reported such incidents publicly.

Neither Kazatomprom company nor Freeport-McMoRan company has reported experiencing targeted cyberattacks publicly.

Neither Freeport-McMoRan company nor Kazatomprom company has reported experiencing or disclosing vulnerabilities publicly.

Neither Freeport-McMoRan nor Kazatomprom holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Freeport-McMoRan company nor Kazatomprom company has publicly disclosed detailed information about the number of their subsidiaries.

Kazatomprom company employs more people globally than Freeport-McMoRan company, reflecting its scale as a Mining.

Neither Freeport-McMoRan nor Kazatomprom holds SOC 2 Type 1 certification.

Neither Freeport-McMoRan nor Kazatomprom holds SOC 2 Type 2 certification.

Neither Freeport-McMoRan nor Kazatomprom holds ISO 27001 certification.

Neither Freeport-McMoRan nor Kazatomprom holds PCI DSS certification.

Neither Freeport-McMoRan nor Kazatomprom holds HIPAA certification.

Neither Freeport-McMoRan nor Kazatomprom holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X