Comparison Overview

The Walt Disney Family Museum

VS

Bernstein & Associates NAGPRA Consultants

The Walt Disney Family Museum

104 Montgomery, San Francisco, CA, 94129, US
Last Update: 2026-01-23
View Profile
Between 750 and 799
http://www.waltdisney.org

Visit an amazing place and immerse yourself in the remarkable life story of Walt Disney, who raised animation to an art and transformed the entertainment world! Located in the Presidio of San Francisco, The Walt Disney Family Museum welcomes visitors to an historic building that reveals 40,000 square feet of imagination. Contemporary interactive galleries and state-of-the-art exhibits are narrated in Walt’s own voice, and feature early drawings, cartoons, movies, music, listening stations, more than 200 video screens, and a 14-foot model of Disneyland. If you are interested in a career at The Walt Disney Family Museum, we invite you to review our open positions at waltdisney.org/jobs. Find animation, innovation, inspiration.

NAICS: 712
NAICS Definition:
Employees: 97
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Bernstein & Associates NAGPRA Consultants

1041 N Lafayette Street, Denver, CO, 80218, US
Last Update: 2026-01-22
Between 750 and 799
http://www.nagpra.info

Our clients are museums (including municipalities and institutions of higher learning), federal agencies, Indian tribes (including Alaska Native villages), and Native Hawaiian organizations. Native American Graves Protection and Repatriation Act (NAGPRA) services we provide to our clients include: • Strategic planning • Project planning implementation • Training/capacity building • Consultation facilitation and meeting planning • Grant writing (consultation/documentation and repatriation) • NAGPRA Section 3 (planned excavation & discovery) comprehensive agreement development through government-to-government consultation. • NAGPRA Section 5 Inventory development through government-to-government • NAGPRA Section 6 Summary development and consultation facilitation • Repatriation claim development We believe in exceeding our clients’ expectations as we work together with them to implement the letter and spirit of this landmark human rights law. CLIENT COMMENTS Expert, Reliable, and Produces Results My museum has worked closely with B&A for the last several years, and find the company to be highly reliable, extremely knowledgeable about NAGPRA, and has the ability to produce results. I highly recommend Bernstein & Associates for either museums or tribes needing help with NAGPRA. Fantastic Service The training B&A provided was great value for money. It helped us advance our NAGPRA program, and the follow-up support went beyond the service level we expected. I look forward to future work with this company. Great company to hire! B&A have helped my museum not only through initial consultation procedures but has been a great resource for all questions related to NAGPRA without having to call the office in Washington D.C. Expertise and Service We have come to rely on Bernstein & Associates for accurate and well-considered answers to complex NAGPRA issues. They are always just a phone call away.

NAICS: 712
NAICS Definition:
Employees: 8
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/the-walt-disney-family-museum.jpeg
The Walt Disney Family Museum
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bernstein-&-associates-native-american-graves-protection-and-repatriation-act-compliance-consultants.jpeg
Bernstein & Associates NAGPRA Consultants
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
The Walt Disney Family Museum
100%
Compliance Rate
0/4 Standards Verified
Bernstein & Associates NAGPRA Consultants
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for The Walt Disney Family Museum in 2026.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Bernstein & Associates NAGPRA Consultants in 2026.

Incident History — The Walt Disney Family Museum (X = Date, Y = Severity)

The Walt Disney Family Museum cyber incidents detection timeline including parent company and subsidiaries

Incident History — Bernstein & Associates NAGPRA Consultants (X = Date, Y = Severity)

Bernstein & Associates NAGPRA Consultants cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/the-walt-disney-family-museum.jpeg
The Walt Disney Family Museum
Incidents

No Incident

https://images.rankiteo.com/companyimages/bernstein-&-associates-native-american-graves-protection-and-repatriation-act-compliance-consultants.jpeg
Bernstein & Associates NAGPRA Consultants
Incidents

No Incident

FAQ

The Walt Disney Family Museum company demonstrates a stronger AI Cybersecurity Score compared to Bernstein & Associates NAGPRA Consultants company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Bernstein & Associates NAGPRA Consultants company has disclosed a higher number of cyber incidents compared to The Walt Disney Family Museum company.

In the current year, Bernstein & Associates NAGPRA Consultants company and The Walt Disney Family Museum company have not reported any cyber incidents.

Neither Bernstein & Associates NAGPRA Consultants company nor The Walt Disney Family Museum company has reported experiencing a ransomware attack publicly.

Neither Bernstein & Associates NAGPRA Consultants company nor The Walt Disney Family Museum company has reported experiencing a data breach publicly.

Neither Bernstein & Associates NAGPRA Consultants company nor The Walt Disney Family Museum company has reported experiencing targeted cyberattacks publicly.

Neither The Walt Disney Family Museum company nor Bernstein & Associates NAGPRA Consultants company has reported experiencing or disclosing vulnerabilities publicly.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds any compliance certifications.

Neither company holds any compliance certifications.

Neither The Walt Disney Family Museum company nor Bernstein & Associates NAGPRA Consultants company has publicly disclosed detailed information about the number of their subsidiaries.

The Walt Disney Family Museum company employs more people globally than Bernstein & Associates NAGPRA Consultants company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds SOC 2 Type 1 certification.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds SOC 2 Type 2 certification.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds ISO 27001 certification.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds PCI DSS certification.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds HIPAA certification.

Neither The Walt Disney Family Museum nor Bernstein & Associates NAGPRA Consultants holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
References
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Azure Entra ID Elevation of Privilege Vulnerability

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References