Comparison Overview

SM Supermalls

VS

Country Garden Group

SM Supermalls

Mall of Asia Complex, Pasay City, Metro Manila, PH, 1300
Last Update: 2025-12-09
View Profile
Between 750 and 799
https://www.smsupermalls.com/careers/

The SM Group of companies stands today as an institution, a store, a mall, a bank, a home, a resort, a hotel, and a place to see and experience with the family. One of the core business areas of the SM Group is the Shopping Center Management Corporation, generally referred to as SM Supermalls. The company is owned by SM Prime Holdings, Inc., a publicly-listed company and one of the largest integrated property developers in Southeast Asia. It operates 87 malls in the Philippines and 8 malls in China. SM Supermalls provides family fun experiences as it partners with the best-loved brands. The company has also become an engine for the country’s economic growth because wherever we go, new jobs are created. Careers are given a jumpstart, small businesses grow, real estate values go up, and we see an immediate acceleration of retail activity in the area. The company continues to expand locally and internationally, creating more experiences and providing opportunities for the people and the community. Visit www.smsupermalls.com for more information. #EverythingsHereAtSM #SMLIFE

NAICS: None
NAICS Definition: Others
Employees: 13,397
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Country Garden Group

345 Nathan Rd, Yau Tsim Mong, Hong Kong, HK
Last Update: 2025-12-09
Between 750 and 799
http://bgy.com.cn/

Forbes 500 500 Projects Globally Top 10 Real Estate Company in China Over the past 20 years, Country Garden has been a practitioner in China's urbanization, bringing modernization to landscape and improving the quality of people's lives. Besides Mainland China, Country Garden has also been actively expanding overseas markets since 2012, including Malaysia, Australia, Indonesia, India, Thailand, Myanmar, Laos, Russia, Vietnam, Britain, US and other countries. Pairing your unique skills with our global resources and expertise, Country Garden will give you the career you desire. For more information: http://www.bgy.com.cn/china/index.aspx

NAICS: None
NAICS Definition: Others
Employees: 15,670
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/smsupermalls.jpeg
SM Supermalls
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/country-garden-holding-co--ltd-.jpeg
Country Garden Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
SM Supermalls
100%
Compliance Rate
0/4 Standards Verified
Country Garden Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for SM Supermalls in 2025.

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for Country Garden Group in 2025.

Incident History — SM Supermalls (X = Date, Y = Severity)

SM Supermalls cyber incidents detection timeline including parent company and subsidiaries

Incident History — Country Garden Group (X = Date, Y = Severity)

Country Garden Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/smsupermalls.jpeg
SM Supermalls
Incidents

No Incident

https://images.rankiteo.com/companyimages/country-garden-holding-co--ltd-.jpeg
Country Garden Group
Incidents

No Incident

FAQ

SM Supermalls company demonstrates a stronger AI Cybersecurity Score compared to Country Garden Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Country Garden Group company has disclosed a higher number of cyber incidents compared to SM Supermalls company.

In the current year, Country Garden Group company and SM Supermalls company have not reported any cyber incidents.

Neither Country Garden Group company nor SM Supermalls company has reported experiencing a ransomware attack publicly.

Neither Country Garden Group company nor SM Supermalls company has reported experiencing a data breach publicly.

Neither Country Garden Group company nor SM Supermalls company has reported experiencing targeted cyberattacks publicly.

Neither SM Supermalls company nor Country Garden Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither SM Supermalls nor Country Garden Group holds any compliance certifications.

Neither company holds any compliance certifications.

Country Garden Group company has more subsidiaries worldwide compared to SM Supermalls company.

Country Garden Group company employs more people globally than SM Supermalls company, reflecting its scale as a Real Estate.

Neither SM Supermalls nor Country Garden Group holds SOC 2 Type 1 certification.

Neither SM Supermalls nor Country Garden Group holds SOC 2 Type 2 certification.

Neither SM Supermalls nor Country Garden Group holds ISO 27001 certification.

Neither SM Supermalls nor Country Garden Group holds PCI DSS certification.

Neither SM Supermalls nor Country Garden Group holds HIPAA certification.

Neither SM Supermalls nor Country Garden Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
References
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
References
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
References
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
References