Comparison Overview

Peggy Notebaert Nature Museum

VS

Royal Collection Trust

Peggy Notebaert Nature Museum

2430 N Cannon Drive, Chicago, IL, 60614, US
Last Update: 2025-12-03
Between 750 and 799

The Chicago Academy of Sciences/Peggy Notebaert Nature Museum serves as an urban gateway to the world of nature and science. The mission of the Academy and its Museum is to create a positive relationship between people and nature through collaborations, education, research and collections, exhibits, and public forums that foster urban connections to our region’s nature and science. Our vision is to be the leading voice on urban ecology and sustainability as it relates to the Midwest/Great Lakes region. Established in 1857, the Chicago Academy of Sciences has been educating the public about nature and science for over 159 years, making us Chicago’s oldest Museum. In 1999, the Academy established the Peggy Notebaert Nature Museum to serve as its new permanent home, amidst the abundant urban wildlife of Lincoln Park and the shore of Lake Michigan. Since its opening, the Nature Museum has had more than two million visitors, including over 308,000 in 2015, allowing us to maintain our place as the 6th largest museum in Chicago. The Chicago Academy of Sciences has a rich history of leading science education through outreach, exhibits, and conservation initiatives, and the Nature Museum proudly continues that tradition of leadership. Each year, the Peggy Notebaert Nature Museum provides over 76,000 educational contact hours through K-12 science education programs reaching students, primarily from underserved schools and communities. Through our outreach programs and on-site workshops, the Museum also provides teacher professional development to more than 1,700 teachers annually, as well as teacher training, curriculum, and material support to the schools and communities with the greatest need.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 99
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Royal Collection Trust

Buckingham Palace, London, GB, SW1A 1AA
Last Update: 2025-12-01
Between 750 and 799

Royal Collection Trust is one of the five departments of the Royal Household. We care for the Royal Collection, one of the world's greatest art collections, and manage the public opening of the official residences of His Majesty The King – Buckingham Palace, Windsor Castle and the Palace of Holyroodhouse in Edinburgh. Our work is undertaken without public funding of any kind. Income generated from admissions, our shops and other commercial initiatives funds the conservation of the Royal Collection and projects to increase access to and enjoyment of the Collection, such as exhibitions, publications and educational programmes. We employ over 500 people in a wide range of roles, from conservators and curators to marketers and merchandisers. We also recruit around 350 summer staff each year to help our front-of-house teams create a memorable experience for millions of visitors from all over the world. With Royal Collection Trust, you will be trained, supported and inspired to achieve the highest standards. Collaboration is at the heart of what we do, and whatever your role, you will play a key part in ensuring that the Royal Collection and Palaces are valued and enjoyed by everyone.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 414
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/peggy-notebaert-nature-museum.jpeg
Peggy Notebaert Nature Museum
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/royal-collection-trust.jpeg
Royal Collection Trust
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Peggy Notebaert Nature Museum
100%
Compliance Rate
0/4 Standards Verified
Royal Collection Trust
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Peggy Notebaert Nature Museum in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Royal Collection Trust in 2025.

Incident History — Peggy Notebaert Nature Museum (X = Date, Y = Severity)

Peggy Notebaert Nature Museum cyber incidents detection timeline including parent company and subsidiaries

Incident History — Royal Collection Trust (X = Date, Y = Severity)

Royal Collection Trust cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/peggy-notebaert-nature-museum.jpeg
Peggy Notebaert Nature Museum
Incidents

No Incident

https://images.rankiteo.com/companyimages/royal-collection-trust.jpeg
Royal Collection Trust
Incidents

No Incident

FAQ

Royal Collection Trust company demonstrates a stronger AI Cybersecurity Score compared to Peggy Notebaert Nature Museum company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Royal Collection Trust company has disclosed a higher number of cyber incidents compared to Peggy Notebaert Nature Museum company.

In the current year, Royal Collection Trust company and Peggy Notebaert Nature Museum company have not reported any cyber incidents.

Neither Royal Collection Trust company nor Peggy Notebaert Nature Museum company has reported experiencing a ransomware attack publicly.

Neither Royal Collection Trust company nor Peggy Notebaert Nature Museum company has reported experiencing a data breach publicly.

Neither Royal Collection Trust company nor Peggy Notebaert Nature Museum company has reported experiencing targeted cyberattacks publicly.

Neither Peggy Notebaert Nature Museum company nor Royal Collection Trust company has reported experiencing or disclosing vulnerabilities publicly.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Peggy Notebaert Nature Museum company nor Royal Collection Trust company has publicly disclosed detailed information about the number of their subsidiaries.

Royal Collection Trust company employs more people globally than Peggy Notebaert Nature Museum company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds SOC 2 Type 1 certification.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds SOC 2 Type 2 certification.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds ISO 27001 certification.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds PCI DSS certification.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds HIPAA certification.

Neither Peggy Notebaert Nature Museum nor Royal Collection Trust holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.

Risk Information
cvss3
Base: 7.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X