Comparison Overview

GREAT EASTERN

VS

Generali

GREAT EASTERN

Last Update: 2025-12-09

Established in 1908, Great Eastern places customers at the heart of everything we do. Our legacy extends beyond our products and services to our culture, which is defined by our core values and how we work. As champions of Integrity, Initiative and Involvement, our core values act as a compass, guiding and inspiring us to embrace the behaviours associated with each value, upholding our promise to our customers - to continue doing our best for them in a sustainable manner. We embrace inclusivity, giving all employees an equal opportunity to shine and play their role in exploring possibilities to deliver innovative insurance solutions. Since 2018, Great Eastern has been a signatory to the United Nations (UN) Principles of Sustainable Insurance. Our sustainability approach around environmental, social, and governance (ESG) considerations play a key role in every business decision we make. We are committed to being a sustainability-driven company to achieve a low-carbon economy by managing the environmental footprint of our operations and incorporating ESG considerations in our investment portfolios; improving people’s lives by actively helping customers live healthier, better and longer; and drive responsible business practices through material ESG risk management. Please note that our career opportunities are only posted on our Career Website (https://gecareers.taleo.net/careersection/ex_singapore/jobsearch.ftl?lang=en&portal=8116760849) and on our authorised job platforms, such as, LinkedIn, JobStreet and eFinancialCareers. We do not initiate any unsolicited calls and all official emails from Great Eastern will be sent from email addresses ending with “@greateasternlife.com or @greateasterngeneral.com”. Should you receive any communications outside from these channels, please do not provide any personal information and do reach out to us at [email protected] for us to assist you and confirm the legitimacy of the content.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 13,454
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Generali

IT
Last Update: 2025-12-09
Between 750 and 799

Generali enables people to shape a safer and more sustainable future by caring for their lives and dreams. The Generali Group is one of the most significant players in the global insurance and financial products market. The Group is leader in Italy and Assicurazioni Generali, founded in 1831 in Trieste, is the Group's Parent and principal operating Company. Characterised from the very outset by a strong international outlook and now present in more than 50 Countries, Generali has consolidated its position among the world's leading insurance operators, with significant market shares in western Europe - its main area of activity - and particularly in Germany, France, Austria, Spain, Switzerland and Central and Eastern Europe. The Group has - over the last decade - set up offices in the main markets of the Far East, among which India and China; in particular, in China, just after few years of operation, it has become the leader among the insurance companies with foreign equity interests. Key figures: - We have more than 190 years of experience - We are present in more than 50 countries - We have over 87,000 employees worldwide - We manage over €863 billion assets - We had a total premium income of € 95.2 billion in 2024 - We are among the 50 smartest companies in the world according to MIT Technology Review - We are ranked 1st in Italy and 9th globally in the Top Companies for Women 2024 by Forbes and Statista

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 40,243
Subsidiaries: 19
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/great-eastern-group.jpeg
GREAT EASTERN
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/generali.jpeg
Generali
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
GREAT EASTERN
100%
Compliance Rate
0/4 Standards Verified
Generali
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for GREAT EASTERN in 2025.

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Generali in 2025.

Incident History — GREAT EASTERN (X = Date, Y = Severity)

GREAT EASTERN cyber incidents detection timeline including parent company and subsidiaries

Incident History — Generali (X = Date, Y = Severity)

Generali cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/great-eastern-group.jpeg
GREAT EASTERN
Incidents

Date Detected: 02/2019
Type:Data Leak
Motivation: Financial and Political
Blog: Blog
https://images.rankiteo.com/companyimages/generali.jpeg
Generali
Incidents

Date Detected: 11/2022
Type:Breach
Blog: Blog

FAQ

Generali company demonstrates a stronger AI Cybersecurity Score compared to GREAT EASTERN company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

GREAT EASTERN and Generali have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Generali company and GREAT EASTERN company have not reported any cyber incidents.

Neither Generali company nor GREAT EASTERN company has reported experiencing a ransomware attack publicly.

Generali company has disclosed at least one data breach, while GREAT EASTERN company has not reported such incidents publicly.

Neither Generali company nor GREAT EASTERN company has reported experiencing targeted cyberattacks publicly.

Neither GREAT EASTERN company nor Generali company has reported experiencing or disclosing vulnerabilities publicly.

Neither GREAT EASTERN nor Generali holds any compliance certifications.

Neither company holds any compliance certifications.

Generali company has more subsidiaries worldwide compared to GREAT EASTERN company.

Generali company employs more people globally than GREAT EASTERN company, reflecting its scale as a Insurance.

Neither GREAT EASTERN nor Generali holds SOC 2 Type 1 certification.

Neither GREAT EASTERN nor Generali holds SOC 2 Type 2 certification.

Neither GREAT EASTERN nor Generali holds ISO 27001 certification.

Neither GREAT EASTERN nor Generali holds PCI DSS certification.

Neither GREAT EASTERN nor Generali holds HIPAA certification.

Neither GREAT EASTERN nor Generali holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N