Comparison Overview

Newmont Corporation

VS

ALS – Geochemistry & Metallurgy

Newmont Corporation

6900 E Layton Avenue, Denver, Colorado, 80237, US
Last Update: 2025-11-26
Between 800 and 849

Newmont is the world’s leading gold company and a producer of copper, silver, zinc and lead. The Company’s world-class portfolio of assets, prospects and talent is anchored in favorable mining jurisdictions in North America, South America, Australia and Africa. Newmont is the only gold producer listed in the S&P 500 Index and is widely recognized for its principled environmental, social and governance practices. The Company is an industry leader in value creation, supported by robust safety standards, superior execution and technical proficiency. Newmont was founded in 1921 and has been publicly traded since 1925.

NAICS: 212
NAICS Definition: Mining (except Oil and Gas)
Employees: 9,797
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

ALS – Geochemistry & Metallurgy

None
Last Update: 2025-11-26
Between 750 and 799

Full-service provider of analytical geochemistry services to the global mining industry. An integrated network of 90 laboratories around the world ensures consistent quality and dependable client service. Design, installation & operation of dedicated remote mine site labs. Prep facilities, analytical laboratories, core services & photography, hyperspectral mapping & interpretation. Leader in process development, circuit optimization, mineralogical analysis, bankable metallurgical testing and consulting services for mineral process flowsheet development and optimization. ALS offers mineral processing testing by both bench scale and pilot scale facilities, hydrometallurgical and mineralogical test services, and project management by expert metallurgists.

NAICS: 212
NAICS Definition:
Employees: 10,001
Subsidiaries: 11
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/newmont.jpeg
Newmont Corporation
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/als-minerals.jpeg
ALS – Geochemistry & Metallurgy
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Newmont Corporation
100%
Compliance Rate
0/4 Standards Verified
ALS – Geochemistry & Metallurgy
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Mining Industry Average (This Year)

No incidents recorded for Newmont Corporation in 2025.

Incidents vs Mining Industry Average (This Year)

No incidents recorded for ALS – Geochemistry & Metallurgy in 2025.

Incident History — Newmont Corporation (X = Date, Y = Severity)

Newmont Corporation cyber incidents detection timeline including parent company and subsidiaries

Incident History — ALS – Geochemistry & Metallurgy (X = Date, Y = Severity)

ALS – Geochemistry & Metallurgy cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/newmont.jpeg
Newmont Corporation
Incidents

No Incident

https://images.rankiteo.com/companyimages/als-minerals.jpeg
ALS – Geochemistry & Metallurgy
Incidents

No Incident

FAQ

Newmont Corporation company demonstrates a stronger AI Cybersecurity Score compared to ALS – Geochemistry & Metallurgy company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, ALS – Geochemistry & Metallurgy company has disclosed a higher number of cyber incidents compared to Newmont Corporation company.

In the current year, ALS – Geochemistry & Metallurgy company and Newmont Corporation company have not reported any cyber incidents.

Neither ALS – Geochemistry & Metallurgy company nor Newmont Corporation company has reported experiencing a ransomware attack publicly.

Neither ALS – Geochemistry & Metallurgy company nor Newmont Corporation company has reported experiencing a data breach publicly.

Neither ALS – Geochemistry & Metallurgy company nor Newmont Corporation company has reported experiencing targeted cyberattacks publicly.

Neither Newmont Corporation company nor ALS – Geochemistry & Metallurgy company has reported experiencing or disclosing vulnerabilities publicly.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds any compliance certifications.

Neither company holds any compliance certifications.

ALS – Geochemistry & Metallurgy company has more subsidiaries worldwide compared to Newmont Corporation company.

ALS – Geochemistry & Metallurgy company employs more people globally than Newmont Corporation company, reflecting its scale as a Mining.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds SOC 2 Type 1 certification.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds SOC 2 Type 2 certification.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds ISO 27001 certification.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds PCI DSS certification.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds HIPAA certification.

Neither Newmont Corporation nor ALS – Geochemistry & Metallurgy holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H