Comparison Overview

Maternal & Infant Health Consulting

VS

Association of State and Territorial Health Officials

Maternal & Infant Health Consulting

None, None, Salt Lake City, Utah, US, 84015
Last Update: 2025-11-28

M&IHC is a women-owned social impact consulting firm dedicated to advancing global public health through research, facilitation, and communications. We harness the power of digital health to bridge the gap between public health research and program implementation to improve health outcomes, primarily for women of reproductive age and children under five. Our content focus areas are reproductive rights, family planning, nutrition, micronutrients, breastfeeding, donor human milk, immunizations, breastfeeding, and digital health. Let's Connect! Email M&IHC at: [email protected] Follow Us on Twitter @M_I_Health Join our Hub: We are always looking for experienced consultants for short-, medium-, and long-term technical assignments. If you are interested in being considered for a position on our Hub of Independent Contractors, please provide us with your information: https://www.mihealthconsulting.com/connect

NAICS: 92312
NAICS Definition: Administration of Public Health Programs
Employees: 6
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Association of State and Territorial Health Officials

2231 Crystal Dr., Suite #450, Arlington, VA, US, 22202
Last Update: 2025-11-28
Between 750 and 799

ASTHO is the national non-profit organization representing the public health agencies of the United States, the U.S. Territories, and the District of Columbia, as well as the 120,000 public health professionals these agencies employ. ASTHO members, the chief health officials of these jurisdictions, are dedicated to formulating and influencing sound public health policy and to assuring excellence in state-based public health practice.

NAICS: 92312
NAICS Definition: Administration of Public Health Programs
Employees: 283
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/m&ihc.jpeg
Maternal & Infant Health Consulting
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/association-of-state-and-territorial-health-officials.jpeg
Association of State and Territorial Health Officials
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Maternal & Infant Health Consulting
100%
Compliance Rate
0/4 Standards Verified
Association of State and Territorial Health Officials
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Public Health Industry Average (This Year)

No incidents recorded for Maternal & Infant Health Consulting in 2025.

Incidents vs Public Health Industry Average (This Year)

No incidents recorded for Association of State and Territorial Health Officials in 2025.

Incident History — Maternal & Infant Health Consulting (X = Date, Y = Severity)

Maternal & Infant Health Consulting cyber incidents detection timeline including parent company and subsidiaries

Incident History — Association of State and Territorial Health Officials (X = Date, Y = Severity)

Association of State and Territorial Health Officials cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/m&ihc.jpeg
Maternal & Infant Health Consulting
Incidents

No Incident

https://images.rankiteo.com/companyimages/association-of-state-and-territorial-health-officials.jpeg
Association of State and Territorial Health Officials
Incidents

No Incident

FAQ

Association of State and Territorial Health Officials company demonstrates a stronger AI Cybersecurity Score compared to Maternal & Infant Health Consulting company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Association of State and Territorial Health Officials company has disclosed a higher number of cyber incidents compared to Maternal & Infant Health Consulting company.

In the current year, Association of State and Territorial Health Officials company and Maternal & Infant Health Consulting company have not reported any cyber incidents.

Neither Association of State and Territorial Health Officials company nor Maternal & Infant Health Consulting company has reported experiencing a ransomware attack publicly.

Neither Association of State and Territorial Health Officials company nor Maternal & Infant Health Consulting company has reported experiencing a data breach publicly.

Neither Association of State and Territorial Health Officials company nor Maternal & Infant Health Consulting company has reported experiencing targeted cyberattacks publicly.

Neither Maternal & Infant Health Consulting company nor Association of State and Territorial Health Officials company has reported experiencing or disclosing vulnerabilities publicly.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Maternal & Infant Health Consulting company nor Association of State and Territorial Health Officials company has publicly disclosed detailed information about the number of their subsidiaries.

Association of State and Territorial Health Officials company employs more people globally than Maternal & Infant Health Consulting company, reflecting its scale as a Public Health.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds SOC 2 Type 1 certification.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds SOC 2 Type 2 certification.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds ISO 27001 certification.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds PCI DSS certification.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds HIPAA certification.

Neither Maternal & Infant Health Consulting nor Association of State and Territorial Health Officials holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.