Comparison Overview

Kerzner International

VS

Shangri-La Group

Kerzner International

Dubai, AE
Last Update: 2026-01-18
Between 800 and 849

Kerzner International has built a diverse collection of iconic brands and luxury properties, earning international acclaim for pioneering destination-defining hospitality, delivering unrivalled service, and curating transformative guest experiences. We are renowned for creating hospitality brands that are distinct and disruptive. Through Atlantis, One&Only, SIRO, and Rare Finds, our portfolio provides unforgettable and immersive experiences for guests in search of extraordinary moments. From authentic cultural exploration to innovative luxury concepts, every brand we build challenges convention to create unique journeys of discovery. We are a company that never settles. Because of this, we attract colleagues who share our desire to push until the next level is achieved, and then to keep going. We invest in our colleagues and our communities by working proactively to create jobs, training, education and opportunities that enrich lives. Our colleagues are at the heart of who we are and what we do. International resorts go hand in hand with an international team. In fact, we have more than 16,000 colleagues representing over 120 nationalities. And although we come from all over the world, we are united by the drive to create amazing experiences and everlasting memories for all.

NAICS: 7211
NAICS Definition: Traveler Accommodation
Employees: 16,467
Subsidiaries: 7
12-month incidents
0
Known data breaches
0
Attack type number
0

Shangri-La Group

Kerry Centre, 683 King's Road, Quarry Bay, Hong Kong, HK
Last Update: 2026-01-17

Headquartered in Hong Kong SAR, the Shangri-La Group has grown from a single hotel business to a diverse and integrated global portfolio comprising quality real estate and investment properties, wellness and lifestyle facilities. Today, the Group owns, operates and manages 100+ hotels under our family of five brands: Shangri-La, Shangri-La Signatures, Kerry Hotels, JEN by Shangri-La, and Traders. We are part of the Kuok Group, one of Asia's most dynamic multinational conglomerates and a leader in properties, logistics, agribusiness, maritime and hospitality. From our strong base in Asia, we have expanded into key gateway cities and markets around the world. Our properties sit on some of the world’s most prestigious addresses and exotic destinations. Through the environments we have created, we enable people to come together to live, work, play, eat, and rest well.

NAICS: 7211
NAICS Definition: Traveler Accommodation
Employees: 16,362
Subsidiaries: 10
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/kerzner-international.jpeg
Kerzner International
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/shangri-la-hotels-and-resorts.jpeg
Shangri-La Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Kerzner International
100%
Compliance Rate
0/4 Standards Verified
Shangri-La Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitality Industry Average (This Year)

No incidents recorded for Kerzner International in 2026.

Incidents vs Hospitality Industry Average (This Year)

No incidents recorded for Shangri-La Group in 2026.

Incident History — Kerzner International (X = Date, Y = Severity)

Kerzner International cyber incidents detection timeline including parent company and subsidiaries

Incident History — Shangri-La Group (X = Date, Y = Severity)

Shangri-La Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/kerzner-international.jpeg
Kerzner International
Incidents

No Incident

https://images.rankiteo.com/companyimages/shangri-la-hotels-and-resorts.jpeg
Shangri-La Group
Incidents

Date Detected: 10/2022
Type:Breach
Blog: Blog

FAQ

Kerzner International company demonstrates a stronger AI Cybersecurity Score compared to Shangri-La Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Shangri-La Group company has historically faced a number of disclosed cyber incidents, whereas Kerzner International company has not reported any.

In the current year, Shangri-La Group company and Kerzner International company have not reported any cyber incidents.

Neither Shangri-La Group company nor Kerzner International company has reported experiencing a ransomware attack publicly.

Shangri-La Group company has disclosed at least one data breach, while Kerzner International company has not reported such incidents publicly.

Neither Shangri-La Group company nor Kerzner International company has reported experiencing targeted cyberattacks publicly.

Neither Kerzner International company nor Shangri-La Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Kerzner International nor Shangri-La Group holds any compliance certifications.

Neither company holds any compliance certifications.

Shangri-La Group company has more subsidiaries worldwide compared to Kerzner International company.

Kerzner International company employs more people globally than Shangri-La Group company, reflecting its scale as a Hospitality.

Neither Kerzner International nor Shangri-La Group holds SOC 2 Type 1 certification.

Neither Kerzner International nor Shangri-La Group holds SOC 2 Type 2 certification.

Neither Kerzner International nor Shangri-La Group holds ISO 27001 certification.

Neither Kerzner International nor Shangri-La Group holds PCI DSS certification.

Neither Kerzner International nor Shangri-La Group holds HIPAA certification.

Neither Kerzner International nor Shangri-La Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description

Azure Entra ID Elevation of Privilege Vulnerability

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H