Comparison Overview

Qulliq Energy Corporation

VS

Eskom Holdings SOC Ltd

Qulliq Energy Corporation

P.O Box 420, Baker Lake, Nunavut, CA, X0C 0A0
Last Update: 2025-11-28
Between 700 and 749

Following Nunavut’s division from the Northwest Territories, the Nunavut Power Corporation took up the mandate to supply electricity to communities in the territory of Nunavut on April 1, 2001. Renamed Qulliq Energy Corporation (QEC) in 2003, this territorial corporation is 100 per cent owned by the Government of Nunavut, and operates at arm’s length from the government, reporting to the territorial Minister responsible for QEC. We are the only generator and distributor of electrical energy in Nunavut. QEC is incorporated and operates under the Qulliq Energy Corporation Act and our energy pricing is regulated pursuant to the Utility Rates Review Council Act. We are committed to supplying safe, reliable and efficient energy through responsive and respectful interaction with all stakeholders. We deliver electricity to approximately 15,000 electrical customers across Nunavut. We generate and distribute power to Nunavummiut through the operation of 25 stand-alone diesel power plants in 25 communities, with a total installed capacity of approximately 76,000 kW. At QEC, we also provide mechanical, electrical and line maintenance from three regional centers: Iqaluit, Rankin Inlet and Cambridge Bay. Our business activities are maintained at the head office located in Baker Lake and corporate offices in Iqaluit. QEC has 200 employees across the territory. All electricity needs in Nunavut are met by imported fossil fuel supplies. Each community in Nunavut has its own independent electricity generation and distribution system. There is no back-up grid. QEC is the only energy corporation in Canada without developed local energy resources or regional electricity transmission capability, creating a situation of high dependency on fossil fuel.

NAICS: 22
NAICS Definition: Utilities
Employees: 110
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Eskom Holdings SOC Ltd

Maxwell Drive, Sunninghill , Johannesburg, Gauteng, ZA, 2191
Last Update: 2025-11-23
Between 750 and 799

Company profile Eskom Holdings generates, transports and distributes approximately 95% of South Africa’s electricity – making up 60% of the total electricity consumed on the African continent. Eskom is the world’s eleventh-largest power utility in terms of generating capacity, ranks ninth in terms of sales, and boasts the world's largest dry-cooling power station. Eskom Holdings’ Enterprises Division designs, builds and refurbishes Eskom’s assets, and acts as a catalyst for project development for the group. Eskom Enterprises’ main focus is to support Eskom Holdings and be the custodian of non-regulated businesses and offer strategic and commercial lifecycle services to the line divisions.

NAICS: 22
NAICS Definition: Utilities
Employees: 41,778
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/qulliq-energy-corporation.jpeg
Qulliq Energy Corporation
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/eskom.jpeg
Eskom Holdings SOC Ltd
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Qulliq Energy Corporation
100%
Compliance Rate
0/4 Standards Verified
Eskom Holdings SOC Ltd
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Qulliq Energy Corporation in 2025.

Incidents vs Utilities Industry Average (This Year)

No incidents recorded for Eskom Holdings SOC Ltd in 2025.

Incident History — Qulliq Energy Corporation (X = Date, Y = Severity)

Qulliq Energy Corporation cyber incidents detection timeline including parent company and subsidiaries

Incident History — Eskom Holdings SOC Ltd (X = Date, Y = Severity)

Eskom Holdings SOC Ltd cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/qulliq-energy-corporation.jpeg
Qulliq Energy Corporation
Incidents

Date Detected: 1/2023
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/eskom.jpeg
Eskom Holdings SOC Ltd
Incidents

Date Detected: 03/2020
Type:Cyber Attack
Blog: Blog

FAQ

Eskom Holdings SOC Ltd company demonstrates a stronger AI Cybersecurity Score compared to Qulliq Energy Corporation company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Qulliq Energy Corporation and Eskom Holdings SOC Ltd have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Eskom Holdings SOC Ltd company and Qulliq Energy Corporation company have not reported any cyber incidents.

Neither Eskom Holdings SOC Ltd company nor Qulliq Energy Corporation company has reported experiencing a ransomware attack publicly.

Qulliq Energy Corporation company has disclosed at least one data breach, while the other Eskom Holdings SOC Ltd company has not reported such incidents publicly.

Eskom Holdings SOC Ltd company has reported targeted cyberattacks, while Qulliq Energy Corporation company has not reported such incidents publicly.

Neither Qulliq Energy Corporation company nor Eskom Holdings SOC Ltd company has reported experiencing or disclosing vulnerabilities publicly.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Qulliq Energy Corporation company nor Eskom Holdings SOC Ltd company has publicly disclosed detailed information about the number of their subsidiaries.

Eskom Holdings SOC Ltd company employs more people globally than Qulliq Energy Corporation company, reflecting its scale as a Utilities.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds SOC 2 Type 1 certification.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds SOC 2 Type 2 certification.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds ISO 27001 certification.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds PCI DSS certification.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds HIPAA certification.

Neither Qulliq Energy Corporation nor Eskom Holdings SOC Ltd holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Risk Information
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L