Comparison Overview

International SOS

VS

CHRISTUS Health

International SOS

#17-00 Odeon Towers, Singapore, 188720, SG
Last Update: 2025-12-10

The International SOS Group of Companies has been in the business of saving lives for over 40 years. Protecting global workforces from health and security threats, we deliver customised health, security risk management and wellbeing solutions to fuel our clients’ growth and productivity. In the event of extreme weather, an epidemic or a security incident, we provide an immediate response providing peace of mind. Our innovative technology and medical expertise with a focus on prevention, offers real-time, actionable insights and unparalleled on-the-ground delivery. We help clients meet compliance reporting needs for good governance. By partnering with us organisations can fulfil their Duty of Care responsibilities, while empowering business resilience, continuity and sustainability. Founded in 1985, the International SOS Group, headquartered in London & Singapore, is trusted by 9,000 organisations, including the majority of the Fortune Global 500 as well as mid-size enterprises, governments, educational institutions, and NGOs. 12,000 multi-cultural medical, security and logistics experts stand with you to provide support & assistance from over 1,200 locations in 90 countries, 24/7, 365 days. To protect your workforce, we are at your fingertips: www.internationalsos.com For news and events updates follow us on Twitter - https://twitter.com/IntlSOS

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 12,309
Subsidiaries: 7
12-month incidents
0
Known data breaches
1
Attack type number
1

CHRISTUS Health

919 Hidden Ridge , Irving, TX, US, 75007
Last Update: 2025-12-09

CHRISTUS Health is a Catholic not-for-profit health care system comprising more than 600 centers, including long-term care facilities, community hospitals, walk-in clinics and health ministries. We are a community of 50,000 Associates, with over 15,000 physicians providing personalized care. Our ministries extend to Texas, Louisiana, New Mexico and Arkansas, and throughout the Americas to Chile, Colombia and Mexico. We continue to expand into new communities each year, adding more physicians and more services and bringing care closer to more people. Sponsored by the Sisters of Charity of the Incarnate Word in Houston and San Antonio and the Sisters of the Holy Family of Nazareth, our mission is to extend the healing ministry of Jesus Christ to every individual we serve.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 27,975
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/international-sos.jpeg
International SOS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/christus-health.jpeg
CHRISTUS Health
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
International SOS
100%
Compliance Rate
0/4 Standards Verified
CHRISTUS Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for International SOS in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for CHRISTUS Health in 2025.

Incident History — International SOS (X = Date, Y = Severity)

International SOS cyber incidents detection timeline including parent company and subsidiaries

Incident History — CHRISTUS Health (X = Date, Y = Severity)

CHRISTUS Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/international-sos.jpeg
International SOS
Incidents

Date Detected: 8/2013
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/christus-health.jpeg
CHRISTUS Health
Incidents

No Incident

FAQ

Both International SOS company and CHRISTUS Health company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

International SOS company has historically faced a number of disclosed cyber incidents, whereas CHRISTUS Health company has not reported any.

In the current year, CHRISTUS Health company and International SOS company have not reported any cyber incidents.

Neither CHRISTUS Health company nor International SOS company has reported experiencing a ransomware attack publicly.

International SOS company has disclosed at least one data breach, while the other CHRISTUS Health company has not reported such incidents publicly.

Neither CHRISTUS Health company nor International SOS company has reported experiencing targeted cyberattacks publicly.

Neither International SOS company nor CHRISTUS Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither International SOS nor CHRISTUS Health holds any compliance certifications.

Neither company holds any compliance certifications.

International SOS company has more subsidiaries worldwide compared to CHRISTUS Health company.

CHRISTUS Health company employs more people globally than International SOS company, reflecting its scale as a Hospitals and Health Care.

Neither International SOS nor CHRISTUS Health holds SOC 2 Type 1 certification.

Neither International SOS nor CHRISTUS Health holds SOC 2 Type 2 certification.

Neither International SOS nor CHRISTUS Health holds ISO 27001 certification.

Neither International SOS nor CHRISTUS Health holds PCI DSS certification.

Neither International SOS nor CHRISTUS Health holds HIPAA certification.

Neither International SOS nor CHRISTUS Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json() includes user input in the error message, which gets reflected in responses. User input (including HTML/JavaScript) can be exposed in error responses, creating an XSS risk if Content-Type isn't strictly enforced. This issue does not have a fix at the time of publication.

Risk Information
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.

Risk Information
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.

Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H