Comparison Overview

Independent Book Publishers Association

VS

Penguin Random House India

Independent Book Publishers Association

undefined, undefined, undefined, undefined, US
Last Update: 2025-11-24
Between 750 and 799

IBPA, the Independent Book Publishers Association is a trade association of independent publishers. Founded in 1983, it serves book, audio, and video publishers located in the United States and around the world. Its mission is to advance the professional interests of independent publishers. To this end, IBPA provides cooperative marketing programs, education and advocacy within the publishing industry. IBPA's membership of more than 4,000 publishers continues to grow. It is governed by a voluntary board of directors that meets regularly to discuss and plan the association's business. Board members reflect the varied membership and serve two- to four-year terms. IBPA offers beneficial programs and information to all member publishers, regardless of their size or experience.

NAICS: 511
NAICS Definition:
Employees: 61
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Penguin Random House India

undefined, undefined, undefined, undefined, IN
Last Update: 2025-11-21
Between 750 and 799

Penguin Random House India (PRHI) is a subsidiary of Penguin Random House (PRH), a leading global publishing company. PRH was formed in 2013 after the merger between Penguin & Random House. As part of the global merger, Penguin Books India & Random House India came together to form PRHI. Bertelsmann became the sole owner of PRH in 2020. PRHI publishes in English & Hindi while partnering with regional publishing houses to publish across Indian languages including Marathi, Tamil, Telugu, Malayalam, Bengali, Gujarati & Kannada. PRHI has published books by well-known & emerging authors from India & abroad, such as Amitav Ghosh, Jhumpa Lahiri, Arundhati Roy, Ruskin Bond, Sudha Murty, Durjoy Datta, (Lt.) Khushwant Singh, Former President of India (Lt.) APJ Abdul Kalam, Upmanyu Chatterjee, Hussain Zaidi, Ravinder Singh, Sudeep Nagarkar, Novoneel Chakraborty, PMO Shri. Narendra Modi, Krishna Udayshankar, Saurabh Mukherjea, Prakash Iyer, R. Gopalakrishnan, Harish Bhat, Sadhguru & Gaur Gopal Das, among others. Additionally, PRHI promotes reading & literacy through the sub-continent through literary events, book launches & book fairs. Since its inception in 1985 in India, PRHI has become one of the most recognised names in the industry. We have an active backlist of 3000+ titles and release 300 new ones every year. PRHI's portfolio consists of authors who have won major literary prizes, including the Booker Prize, the International Booker Prize, the Nobel Prize, the Magsaysay Award, the Jnanpith Award, the Sahitya Akademi Award, the Commonwealth Writer's Prize & more. PRHI publishes books across various genres, including literary fiction, romance, thrillers, fantasy, memoirs, biography, self-help, mind, body & spirit, historical non-fiction, politics, creative non-fiction, health, children's literature, YA fiction & non-fiction. We have a rich collection of audiobooks & e-books, & many of our stories have been adapted into films & web series.

NAICS: 511
NAICS Definition:
Employees: 238
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/independent-book-publishers-association.jpeg
Independent Book Publishers Association
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/penguin-random-house-india.jpeg
Penguin Random House India
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Independent Book Publishers Association
100%
Compliance Rate
0/4 Standards Verified
Penguin Random House India
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for Independent Book Publishers Association in 2025.

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for Penguin Random House India in 2025.

Incident History — Independent Book Publishers Association (X = Date, Y = Severity)

Independent Book Publishers Association cyber incidents detection timeline including parent company and subsidiaries

Incident History — Penguin Random House India (X = Date, Y = Severity)

Penguin Random House India cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/independent-book-publishers-association.jpeg
Independent Book Publishers Association
Incidents

No Incident

https://images.rankiteo.com/companyimages/penguin-random-house-india.jpeg
Penguin Random House India
Incidents

No Incident

FAQ

Penguin Random House India company demonstrates a stronger AI Cybersecurity Score compared to Independent Book Publishers Association company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Penguin Random House India company has disclosed a higher number of cyber incidents compared to Independent Book Publishers Association company.

In the current year, Penguin Random House India company and Independent Book Publishers Association company have not reported any cyber incidents.

Neither Penguin Random House India company nor Independent Book Publishers Association company has reported experiencing a ransomware attack publicly.

Neither Penguin Random House India company nor Independent Book Publishers Association company has reported experiencing a data breach publicly.

Neither Penguin Random House India company nor Independent Book Publishers Association company has reported experiencing targeted cyberattacks publicly.

Neither Independent Book Publishers Association company nor Penguin Random House India company has reported experiencing or disclosing vulnerabilities publicly.

Neither Independent Book Publishers Association nor Penguin Random House India holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Independent Book Publishers Association company nor Penguin Random House India company has publicly disclosed detailed information about the number of their subsidiaries.

Penguin Random House India company employs more people globally than Independent Book Publishers Association company, reflecting its scale as a Book and Periodical Publishing.

Neither Independent Book Publishers Association nor Penguin Random House India holds SOC 2 Type 1 certification.

Neither Independent Book Publishers Association nor Penguin Random House India holds SOC 2 Type 2 certification.

Neither Independent Book Publishers Association nor Penguin Random House India holds ISO 27001 certification.

Neither Independent Book Publishers Association nor Penguin Random House India holds PCI DSS certification.

Neither Independent Book Publishers Association nor Penguin Random House India holds HIPAA certification.

Neither Independent Book Publishers Association nor Penguin Random House India holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.