Comparison Overview

The Public Sector HealthCare Roundtable

VS

CVS Health

The Public Sector HealthCare Roundtable

Alexandria, Virginia, US, 22313
Last Update: 2025-12-03
View Profile
Between 650 and 699
https://www.healthcareroundtable.us/

The Roundtable gives public sector health care purchasers and State and local health plan administrators a voice in the design, development, and implementation of national health care policy. Through in-depth policy analysis and relationships with key decision-makers in Washington, D.C. the Roundtable is able to fuel a robust provider network and health delivery system that benefits all citizens.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 3
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

CVS Health

1 CVS Drive, Woonsocket, RI, 02895, US
Last Update: 2025-12-01
Between 800 and 849
http://CVSHealth.com

CVS Health is the leading health solutions company, delivering care like no one else can. We reach more people and improve the health of communities across America through our local presence, digital channels and over 300,000 dedicated colleagues – including more than 40,000 physicians, pharmacists, nurses and nurse practitioners. Wherever and whenever people need us, we help them with their health – whether that’s managing chronic diseases, staying compliant with their medications or accessing affordable health and wellness services in the most convenient ways. We help people navigate the health care system – and their personal health care – by improving access, lowering costs and being a trusted partner for every meaningful moment of health. And we do it all with heart, each and every day. Follow @CVSHealth on social media.

NAICS: 62
NAICS Definition: Health Care and Social Assistance
Employees: 122,928
Subsidiaries: 11
12-month incidents
0
Known data breaches
4
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/the-public-sector-healthcare-roundtable.jpeg
The Public Sector HealthCare Roundtable
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/cvs-health.jpeg
CVS Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
The Public Sector HealthCare Roundtable
100%
Compliance Rate
0/4 Standards Verified
CVS Health
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for The Public Sector HealthCare Roundtable in 2025.

Incidents vs Hospitals and Health Care Industry Average (This Year)

No incidents recorded for CVS Health in 2025.

Incident History — The Public Sector HealthCare Roundtable (X = Date, Y = Severity)

The Public Sector HealthCare Roundtable cyber incidents detection timeline including parent company and subsidiaries

Incident History — CVS Health (X = Date, Y = Severity)

CVS Health cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/the-public-sector-healthcare-roundtable.jpeg
The Public Sector HealthCare Roundtable
Incidents

Date Detected: 11/2024
Type:Ransomware
Blog: Blog
https://images.rankiteo.com/companyimages/cvs-health.jpeg
CVS Health
Incidents

Date Detected: 11/2023
Type:Breach
Attack Vector: Human Error
Blog: Blog

Date Detected: 5/2023
Type:Breach
Blog: Blog

Date Detected: 1/2023
Type:Breach
Attack Vector: Internal System Breach
Blog: Blog

FAQ

CVS Health company demonstrates a stronger AI Cybersecurity Score compared to The Public Sector HealthCare Roundtable company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

CVS Health company has faced a higher number of disclosed cyber incidents historically compared to The Public Sector HealthCare Roundtable company.

In the current year, CVS Health company and The Public Sector HealthCare Roundtable company have not reported any cyber incidents.

The Public Sector HealthCare Roundtable company has confirmed experiencing a ransomware attack, while CVS Health company has not reported such incidents publicly.

CVS Health company has disclosed at least one data breach, while The Public Sector HealthCare Roundtable company has not reported such incidents publicly.

Neither CVS Health company nor The Public Sector HealthCare Roundtable company has reported experiencing targeted cyberattacks publicly.

Neither The Public Sector HealthCare Roundtable company nor CVS Health company has reported experiencing or disclosing vulnerabilities publicly.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds any compliance certifications.

Neither company holds any compliance certifications.

CVS Health company has more subsidiaries worldwide compared to The Public Sector HealthCare Roundtable company.

CVS Health company employs more people globally than The Public Sector HealthCare Roundtable company, reflecting its scale as a Hospitals and Health Care.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds SOC 2 Type 1 certification.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds SOC 2 Type 2 certification.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds ISO 27001 certification.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds PCI DSS certification.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds HIPAA certification.

Neither The Public Sector HealthCare Roundtable nor CVS Health holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted straight into the DOM. If they contain HTML tags, they will be rendered (after some escaping using quotes and textarea tags).

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss4
Base: 7.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This vulnerability is fixed in 2025.102.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
References
Description

Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and earlier, TaikoInbox._verifyBatches (packages/protocol/contracts/layer1/based/TaikoInbox.sol:627-678) advanced the local tid to whatever transition matched the current blockHash before knowing whether that batch would actually be verified. When the loop later broke (e.g., cooldown window not yet passed or transition invalidated), the function still wrote that newer tid into batches[lastVerifiedBatchId].verifiedTransitionId after decrementing batchId. Result: the last verified batch could end up pointing at a transition index from the next batch (often zeroed), corrupting the verified chain pointer.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss4
Base: 8.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References