Comparison Overview
NatWest

NatWest
undefined, undefined, undefined, undefined, GB
Last Update: 26/03/2026
We believe in taking responsibility, and that we all have a part to play in creating the world we want. That’s why we’re empowering our 14 million personal, small business and SME customers in England and Wales, making it easier to control their money when and how they...

CIC
6, Avenue de Provence, Paris, Île-de-France, FR, 75009
Last Update: 01/04/2026
CIC is the fourth largest banking group in France, consisting of seven regional banks which operate across France through a network of 1,844 branches employing 24,000 staff. CIC's customer base includes 2.7 million retail clients. One in eleven self-employed professiona...
Compliance Ranges Comparison

NatWest







CIC






Benchmark & Cyber Underwriting Signals
Incidents vs Banking Industry Avg (This Year)
No incidents recorded for NatWest in 2026.
Incidents vs Banking Industry Avg (This Year)
No incidents recorded for CIC in 2026.
Incident History - NatWest (X = Date, Y = Severity)
NatWest cyber incidents detection timeline including parent company and subsidiaries.
Incident History - CIC (X = Date, Y = Severity)
CIC cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

NatWest

CIC
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.