{ "meta": { "name": "Agent Index auditors", "version": "0.1.32", "generated": "2026-10-27", "batch": 14, "license": "CC-BY-4.0", "citation": "Agent Index by Heritage Services (https://theagentindex.io). Auditors dataset version 0.1.32.", "note": "Firm-level listings of compliance audit firms in two tiers: Verified (independently checked by Agent Index) and registry-listed (taken from an official registry, not independently verified by Agent Index). 516 Verified · 11 registry-listed (527 total; 185 United States, 55 United Kingdom, 126 India, 31 Germany, 19 Netherlands, 49 Japan, 28 Australia, 9 Canada, 4 Singapore, 4 Ireland, 4 United Arab Emirates, 2 Israel, 8 Brazil, 2 Saudi Arabia, 1 Mexico). Only completely verifiable facts for Verified firms; registry-listed rows cite the official registry only. Not endorsements, rankings or scores. No prices. Batch 14 plus registry-listed ingest. ISMAP and GovRAMP are published auditor frameworks. government_body is true for STQC IT Certification Services, C-DAC, NSAI and the Standards Institution of Israel." }, "firms": [ { "name": "Schellman", "slug": "schellman", "website": "https://www.schellman.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001", "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "HIPAA", "GovRAMP" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Schellman Compliance, LLC - ISO/IEC 27001, 27701, 42001 (and others)", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Schellman Compliance, LLC (recognized Jul 27, 2012)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Schellman", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Schellman Compliance, LLC. (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Schellman & Company, LLC (Tampa, FL)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Schellman", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Tampa-based attestation and certification firm offering ISO certification, FedRAMP, PCI DSS, HITRUST and CMMC assessments.", "sources": [ "https://www.schellman.com", "https://www.schellman.com/contact-us", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Schellman" } ] }, { "name": "A-LIGN", "slug": "a-lign", "website": "https://www.a-lign.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001", "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: A-LIGN Compliance and Security, Inc. dba A-LIGN - ISO 22301, ISO/IEC 27001, 27701, 42001", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: A-LIGN Compliance and Security, Inc. dba A-LIGN (recognized Oct 21, 2013)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: A-LIGN", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: A-LIGN Compliance and Security, Inc., dba A-LIGN (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: A-LIGN Compliance and Security, Inc. dba A-LIGN (Tampa, FL)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: A-LIGN", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Tampa-headquartered cybersecurity compliance firm covering ISO certification, HITRUST, FedRAMP, PCI DSS and CMMC assessments.", "sources": [ "https://www.a-lign.com", "https://www.a-lign.com/contact", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "A-LIGN" } ] }, { "name": "360 Advanced", "slug": "360-advanced", "website": "https://360advanced.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "St. Petersburg" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001", "ISO 27701", "HITRUST", "PCI DSS", "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "CPAverify (NASBA) - FL board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=74&firmName=360%20Advanced", "status_text": "360 ADVANCED, INC - FL license AD67897, Current", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: 360 Advanced Compass Rose - ISO/IEC 27001, 27701", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: 360 Advanced Compass Rose (recognized Aug 21, 2024)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: 360 Advanced", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: 360 Advanced, Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: 360 Advanced", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "St. Petersburg, Florida firm performing SOC examinations, ISO certification, HITRUST, PCI DSS and FedRAMP assessments.", "sources": [ "https://360advanced.com", "https://360advanced.com/contact-us/", "https://360advanced.com/soc-2/", "https://ald.nasba.org/search/firm/results?jurisdictionId=74&firmName=360%20Advanced", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://drata.com/partners/audit-alliance/directory", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "360 Advanced" } ] }, { "name": "Insight Assurance", "slug": "insight-assurance", "website": "https://insightassurance.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Insight Assurance (recognized Sep 16, 2025)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Insight Assurance", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: INSIGHT ASSURANCE LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Insight Assurance LLC (Tampa, FL)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Insight Assurance", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Tampa-based audit firm listed as a PCI QSA, HITRUST External Assessor, FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://insightassurance.com", "https://insightassurance.com/contact-us/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Insight Assurance" } ] }, { "name": "Auditwerx", "slug": "auditwerx", "website": "https://auditwerx.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "PCI DSS", "CMMC" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Auditwerx, LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Auditwerx, LLC (Tampa, FL)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Tampa-based compliance assessment firm, described on its site as a division of Carr, Riggs & Ingram Capital, LLC; listed as a PCI QSA and CMMC C3PAO.", "sources": [ "https://auditwerx.com", "https://auditwerx.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KirkpatrickPrice", "slug": "kirkpatrickprice", "website": "https://kirkpatrickprice.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Nashville" }, { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "MD", "city": "Bethesda" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "CA", "city": "Los Angeles" }, { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "CA", "city": "San Francisco" }, { "country": "US", "state": "WA", "city": "Seattle" }, { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "CPAverify (NASBA) - TN board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=16&firmName=Kirkpatrick", "status_text": "KIRKPATRICK PRICE INC - TN license 4592, Active - Fully Licensed", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: KirkpatrickPrice", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: KirkpatrickPrice, Inc. dba Raven Eye (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Licensed CPA firm with a Nashville corporate office performing SOC, HITRUST and PCI DSS assessments, with locations listed in ten US cities.", "sources": [ "https://kirkpatrickprice.com", "https://kirkpatrickprice.com/about-us/", "https://ald.nasba.org/search/firm/results?jurisdictionId=16&firmName=Kirkpatrick", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Prescient Security", "slug": "prescient-security", "website": "https://prescientsecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Nashville" } ], "frameworks": [ "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Prescient Security, LLC. (recognized Jan 10, 2024)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Prescient Security, LLC", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Prescient Security, LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Prescient Security, LLC (Nashville, TN)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Prescient Security", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Nashville-based security assessment firm listed as a FedRAMP 3PAO, HITRUST External Assessor, PCI QSA and CMMC C3PAO.", "sources": [ "https://prescientsecurity.com", "https://prescientsecurity.com/connect", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Prescient Security" } ] }, { "name": "LBMC", "slug": "lbmc", "website": "https://www.lbmc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Brentwood" }, { "country": "US", "state": "TN", "city": "Chattanooga" }, { "country": "US", "state": "TN", "city": "Knoxville" }, { "country": "US", "state": "TN", "city": "Memphis" }, { "country": "US", "state": "KY", "city": "Louisville" }, { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "PA", "city": "Glen Mills" }, { "country": "UK", "state": "England", "city": "Manchester" } ], "frameworks": [ "ISO 27001", "ISO 27701", "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: LBMC Certification Services, LLC - ISO/IEC 27001, 27701", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: LBMC Security & Risk Services", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: LBMC, PC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Tennessee advisory firm headquartered in Brentwood (Nashville area) offering ISO certification, HITRUST and PCI DSS services.", "sources": [ "https://www.lbmc.com", "https://www.lbmc.com/locations/", "https://anabdirectory.remoteauditor.com/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Linford & Company", "slug": "linford-and-company", "website": "https://linfordco.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CO", "city": "Denver" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001", "ISO 27701", "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "HIPAA", "GovRAMP" ], "accreditations": [ { "registry": "CPAverify (NASBA) - CO board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=112&firmName=Linford", "status_text": "LINFORD & COMPANY LLP - CO license FRM.0013034, Active", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Linford & Company LLP - ISO/IEC 27001, 27701", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Linford & Company (recognized Mar 31, 2017)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Linford & Company", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Linford & Company LLP (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Linford & Company LLP (Denver, CO)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Linford & Company LLP", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Denver-based CPA firm performing SOC examinations, ISO certification, FedRAMP, HITRUST, PCI DSS and CMMC assessments.", "sources": [ "https://linfordco.com", "https://linfordco.com/contact/", "https://ald.nasba.org/search/firm/results?jurisdictionId=112&firmName=Linford", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Linford & Company LLP" } ] }, { "name": "Sensiba", "slug": "sensiba", "website": "https://sensiba.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "San Jose" }, { "country": "US", "state": "CA", "city": "San Mateo" }, { "country": "US", "state": "CA", "city": "San Ramon" }, { "country": "US", "state": "CA", "city": "Fresno" }, { "country": "US", "state": "OR", "city": "Bend" }, { "country": "US", "state": "NY", "city": "New York" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001", "ISO 27701", "ISO 42001", "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "CPAverify (NASBA) - CA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=30&firmName=Sensiba", "status_text": "SENSIBA LLP - CA partnership license PAR 4065, Clear", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Sensiba LLP - ISO/IEC 27001, 27701, 42001", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Sensiba", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "remote_audits": true, "summary": "California accounting and consulting firm whose GRC practice performs SOC, ISO and HITRUST engagements; its Drata directory listing describes its audits as remote-first.", "sources": [ "https://sensiba.com", "https://sensiba.com/contact/", "https://ald.nasba.org/search/firm/results?jurisdictionId=30&firmName=Sensiba", "https://anabdirectory.remoteauditor.com/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Aprio", "slug": "aprio", "website": "https://www.aprio.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" } ], "frameworks": [ "SOC 2", "ISO 27001", "ISO 27701", "ISO 42001", "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "CPAverify (NASBA) - GA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Aprio", "status_text": "APRIO, LLP - GA license ACF000080, Active", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Aprio, LLP - ISO 22301, ISO 9001, ISO/IEC 27001, 27701, 42001", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Aprio, LLP. (recognized Apr 13, 2023)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Aprio, LLP", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Aprio, LLP (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Aprio, LLP (Atlanta, GA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Aprio", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "Atlanta-based CPA and advisory firm listed across SOC, ISO, FedRAMP, HITRUST, PCI DSS and CMMC assessor registries.", "sources": [ "https://www.aprio.com", "https://www.aprio.com/", "https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Aprio", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Aprio" } ] }, { "name": "Wolf & Company", "slug": "wolf-and-company", "website": "https://www.wolfandco.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Boston" }, { "country": "US", "state": "MA", "city": "Springfield" }, { "country": "US", "state": "FL", "city": "Miami" }, { "country": "US", "state": "NJ", "city": "Princeton" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Wolf & Company, P.C", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Wolf & Company, P.C. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Boston-based firm offering HITRUST and PCI DSS assessment services.", "sources": [ "https://www.wolfandco.com", "https://www.wolfandco.com/contact/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kompleye", "slug": "kompleye", "website": "https://kompleye.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Reston" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001", "ISO 27701", "HITRUST", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "CPAverify (NASBA) - VA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=Kompleye", "status_text": "KOMPLEYE ATTESTATION LLC - VA license 134553, Active", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Kompleye Attestation, LLC - ISO 9001, ISO/IEC 27001, 27701", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Kompleye (recognized Aug 3, 2022)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Kompleye Attestation LLC", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Kompleye Attestation LLC (Reston, VA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Kompleye", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Reston, Virginia attestation firm listed for SOC, ISO certification, FedRAMP, HITRUST and CMMC assessments.", "sources": [ "https://kompleye.com", "https://kompleye.com/contact-us/", "https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=Kompleye", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Kompleye" } ] }, { "name": "SC&H Group", "slug": "sch-group", "website": "https://www.schgroup.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Hunt Valley" } ], "frameworks": [ "SOC 2", "ISO 27001" ], "accreditations": [ { "registry": "CPAverify (NASBA) - MD board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=35&firmName=SC%26H", "status_text": "SC&H ATTEST SERVICES PC - MD license 0000496, Active", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: SC&H Group, Inc. - ISO/IEC 27001", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Maryland audit and advisory firm headquartered in Hunt Valley offering SOC examinations and ISO 27001 certification.", "sources": [ "https://www.schgroup.com", "https://www.schgroup.com/press-release/sch-relocates-headquarters-to-hunt-valley/", "https://www.schgroup.com/services/audit/soc-audits/", "https://ald.nasba.org/search/firm/results?jurisdictionId=35&firmName=SC%26H", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ControlCase", "slug": "controlcase", "website": "https://www.controlcase.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Fairfax" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001", "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "CERT-In", "GovRAMP" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ControlCase, LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: ControlCase Assessments LLC - ISO/IEC 27001, 27701, 42001", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: ControlCase (recognized Aug 27, 2020)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: ControlCase", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: ControlCase LLC (Fairfax, VA)", "checked": "2026-10-20" }, { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ControlCase International Pvt. Ltd. (Mumbai)", "checked": "2026-10-20" }, { "registry": "NABCB management-system certification bodies", "registry_url": "https://nabcb.qci.org.in/is005/", "status_text": "Accredited: ControlCase Infosec Pvt. Ltd. (IS 005) — ISO/IEC 27001:2022, valid from 15 March 2018 to 14 March 2029", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Control Case", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "Compliance assessment firm based in Fairfax, Virginia with an Indian entity in Mumbai; listed as PCI QSA, FedRAMP 3PAO, HITRUST assessor, C3PAO and CERT-In empanelled auditor. The Indian entity is NABCB-accredited for ISO/IEC 27001.", "sources": [ "https://www.controlcase.com", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://anabdirectory.remoteauditor.com/", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://nabcb.qci.org.in/is005/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Control Case" } ] }, { "name": "Fortreum", "slug": "fortreum", "website": "https://fortreum.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Lansdowne" } ], "frameworks": [ "ISO 27001", "ISO 27701", "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Fortreum, LLC (recognized Jul 1, 2021)", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Fortreum INTL - ISO/IEC 27001, 27701", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Fortreum, LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Fortreum, LLC (Lansdowne, VA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Fortreum", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Virginia-based assessment firm listed as a FedRAMP 3PAO, PCI QSA and CMMC C3PAO, with an ANAB-accredited ISO certification arm.", "sources": [ "https://fortreum.com", "https://www.fedramp.gov/marketplace/assessors/", "https://anabdirectory.remoteauditor.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Fortreum" } ] }, { "name": "Coalfire", "slug": "coalfire", "website": "https://coalfire.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "GA", "city": "Alpharetta" }, { "country": "US", "state": "WA", "city": "Bellevue" }, { "country": "US", "state": "VA", "city": "Chantilly" }, { "country": "UK", "state": "England", "city": "Manchester" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001", "HITRUST", "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Coalfire Systems, Inc. (recognized Jul 17, 2015)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Coalfire Systems, Inc (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Coalfire", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Coalfire Certification, Inc. - ISO 22301, ISO 9001, ISO/IEC 20000-1, 27001, 27701, 42001", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Veris Group, LLC dba Coalfire Federal (Chantilly, VA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Coalfire", "checked": "2026-10-27" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Cybersecurity advisory and assessment firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST assessor, ISO certification body and (via Coalfire Federal) CMMC C3PAO.", "sources": [ "https://coalfire.com", "https://coalfire.com/about/contact-us", "https://www.fedramp.gov/marketplace/assessors/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://anabdirectory.remoteauditor.com/", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Coalfire" } ] }, { "name": "Tevora", "slug": "tevora", "website": "https://www.tevora.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Irvine" }, { "country": "US", "state": "VA", "city": "Fairfax" }, { "country": "US", "state": "AZ", "city": "Scottsdale" } ], "frameworks": [ "HITRUST", "PCI DSS", "FedRAMP", "CMMC" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Tevora Business Solutions, Inc. (recognized Aug 27, 2020)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Tevora Business Solutions, Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Tevora", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Tevora Business Solutions, Inc (Irvine, CA)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Irvine, California cybersecurity firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://www.tevora.com", "https://www.tevora.com/contact-us/", "https://www.fedramp.gov/marketplace/assessors/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Lazarus Alliance", "slug": "lazarus-alliance", "website": "https://lazarusalliance.com", "hq_country": "US", "offices": [ { "country": "US", "state": "AZ", "city": "Scottsdale" } ], "frameworks": [ "PCI DSS", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Lazarus Alliance, Inc. (recognized Sep 14, 2022)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Lazarus Alliance, Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Lazarus Alliance, Inc. (Scottsdale, AZ)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Lazarus Alliance", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Scottsdale, Arizona cybersecurity audit firm listed as a FedRAMP 3PAO, PCI QSA and CMMC C3PAO.", "sources": [ "https://lazarusalliance.com", "https://lazarusalliance.com/contact-us-now/", "https://www.fedramp.gov/marketplace/assessors/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Lazarus Alliance" } ] }, { "name": "SecurityMetrics", "slug": "securitymetrics", "website": "https://www.securitymetrics.com", "hq_country": "US", "offices": [ { "country": "US", "state": "UT", "city": "Orem" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: SecurityMetrics, Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: SecurityMetrics", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Orem, Utah data security and compliance company listed as a PCI QSA and HITRUST External Assessor.", "sources": [ "https://www.securitymetrics.com", "https://www.securitymetrics.com/terms-of-service", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Ampcus Cyber", "slug": "ampcus-cyber", "website": "https://www.ampcuscyber.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Chantilly" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: AMPCUS CYBER INC. (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Ampcus Cyber", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chantilly, Virginia cybersecurity firm listed as a PCI QSA (places of business include USA, UK and India) and HITRUST External Assessor.", "sources": [ "https://www.ampcuscyber.com", "https://www.ampcuscyber.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Accorian", "slug": "accorian", "website": "https://www.accorian.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NJ", "city": "East Brunswick" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ESHA IT CORP dba ACCORIAN (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Accorian", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity and compliance firm headquartered in East Brunswick, New Jersey with offices in Bengaluru and Pune; listed as a PCI QSA and HITRUST External Assessor.", "sources": [ "https://www.accorian.com", "https://www.accorian.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "I.S. Partners", "slug": "is-partners", "website": "https://www.ispartnersllc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "PA", "city": "Dresher" }, { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001", "HITRUST", "CMMC" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: IS Partners, LLC - ISO/IEC 27001", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: I.S. Partners LLC", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: IS Partners LLC (Dresher, PA)", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Compliance audit firm based in Dresher, Pennsylvania with a London office; listed as an ANAB-accredited ISO 27001 certification body, HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://www.ispartnersllc.com", "https://www.ispartnersllc.com/contact/", "https://anabdirectory.remoteauditor.com/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kratos", "slug": "kratos", "website": "https://www.kratosdefense.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Herndon" } ], "frameworks": [ "HITRUST", "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Kratos (recognized Aug 27, 2012)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Kratos Defense", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Kratos Technology & Training Solutions (Herndon, VA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Kratos Defense", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Defense and technology company listed (as Kratos / Kratos Technology & Training Solutions) as a FedRAMP 3PAO, HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://www.kratosdefense.com", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Kratos Defense" } ] }, { "name": "VISTA InfoSec", "slug": "vista-infosec", "website": "https://vistainfosec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "PCI DSS", "CERT-In" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: VISTA InfoSec Private Limited (not in remediation)", "checked": "2026-10-20" }, { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: VISTA InfoSec (Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "CERT-In empanelled information-security auditor listed with a Mumbai address, also listed as a PCI DSS QSA company.", "sources": [ "https://vistainfosec.com", "https://vistainfosec.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BSI", "slug": "bsi", "website": "https://www.bsigroup.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Milton Keynes" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0003/ManagementSystems", "status_text": "UKAS accredited certification body no. 0003 (BSI Assurance UK Ltd); schedule lists ISO/IEC 27001:2022 and ISO/IEC 42001:2023 (issue 193, 15 Sep 2026)", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: BSI Assurance UK Limited - ISO/IEC 27001, 27701, 42001 (and others)", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "UK national standards body and certification body (UKAS schedule address: Milton Keynes); UKAS- and ANAB-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://www.bsigroup.com", "https://www.ukas.com/download-schedule/0003/ManagementSystems", "https://anabdirectory.remoteauditor.com/", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "LRQA", "slug": "lrqa", "website": "https://www.lrqa.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Birmingham" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0001/ManagementSystems", "status_text": "UKAS accredited certification body no. 0001 (LRQA Limited); schedule lists ISO/IEC 27001:2022 and ISO/IEC 42001 (issue 221, 15 Sep 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Birmingham-based assurance and certification body; UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 management system certification.", "sources": [ "https://www.lrqa.com", "https://www.ukas.com/download-schedule/0001/ManagementSystems" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NQA", "slug": "nqa", "website": "https://www.nqa.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Dunstable" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0015/ManagementSystems", "status_text": "UKAS accredited certification body no. 0015 (NQA Certification Ltd t/a NQA Certification and KIWA); schedule lists ISO/IEC 27001:2022 and ISO/IEC 42001:2023 (issue 196, 28 Aug 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Certification body based in Dunstable, England; UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://www.nqa.com", "https://www.ukas.com/download-schedule/0015/ManagementSystems" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "British Assessment Bureau", "slug": "british-assessment-bureau", "website": "https://amtivo.com/uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "West Malling" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/8289/ManagementSystems", "status_text": "UKAS accredited certification body no. 8289 (British Assessment Bureau Limited t/a Amtivo); schedule lists ISO/IEC 27001:2022 (issue 039, 24 Apr 2026)", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "Kent-based certification body trading as Amtivo; UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://amtivo.com/uk", "https://amtivo.com/uk/contact-us/", "https://www.ukas.com/download-schedule/8289/ManagementSystems", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ISOQAR", "slug": "isoqar", "website": "https://isoqar.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "Wales", "city": "Cardiff" }, { "country": "UK", "state": "England", "city": "Manchester" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0026/ManagementSystems", "status_text": "UKAS accredited certification body no. 0026 (ISOQAR Limited); schedule lists ISO/IEC 27001:2022 and ISO/IEC 42001:2023 (issue 160, 04 Jun 2026); UKAS address Stretford, Manchester", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK certification body with a Cardiff head office (per its site); UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://isoqar.com", "https://isoqar.com/contact-us/", "https://www.ukas.com/download-schedule/0026/ManagementSystems" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intertek", "slug": "intertek", "website": "https://www.intertek.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Derby" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0014/ManagementSystems", "status_text": "UKAS accredited certification body no. 0014 (Intertek Certification Ltd); schedule lists ISO/IEC 27001 (issue 096, 25 Mar 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Assurance, testing and certification group; its UK certification entity (Intertek Certification Ltd, Derby) is UKAS-accredited for ISO/IEC 27001.", "sources": [ "https://www.intertek.com", "https://www.ukas.com/download-schedule/0014/ManagementSystems" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NCC Group", "slug": "ncc-group", "website": "https://www.nccgroup.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Manchester" } ], "frameworks": [ "PCI DSS", "HITRUST", "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: NCC Group Security Services Limited (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: NCC Group", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: NCC Group Security Services, Inc. (recognized Apr 24, 2017)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: NCC Group Security Services, Inc.", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Manchester-headquartered cybersecurity company listed as a PCI QSA, HITRUST External Assessor and (via its US entity) FedRAMP-recognized assessor.", "sources": [ "https://www.nccgroup.com", "https://find-and-update.company-information.service.gov.uk/company/04627044", "https://www.nccgroup.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.fedramp.gov/marketplace/assessors/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "NCC Group Security Services, Inc." } ] }, { "name": "Bridewell", "slug": "bridewell", "website": "https://www.bridewell.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Reading" }, { "country": "UK", "state": "England", "city": "London" }, { "country": "UK", "state": "Wales", "city": "Cardiff" }, { "country": "UK", "state": "England", "city": "Manchester" }, { "country": "UK", "state": "Scotland", "city": "Edinburgh" }, { "country": "US", "state": "TX", "city": "Houston" }, { "country": "US", "state": "NY", "city": "New York" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Bridewell Consulting Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK cybersecurity services firm with offices in Reading, London, Cardiff, Manchester and Edinburgh; listed as a PCI QSA.", "sources": [ "https://www.bridewell.com", "https://www.bridewell.com/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Foregenix", "slug": "foregenix", "website": "https://www.foregenix.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Swindon" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Foregenix Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Payment and cybersecurity firm headquartered near Swindon, England; listed as a PCI QSA.", "sources": [ "https://www.foregenix.com", "https://www.foregenix.com/about-us/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Pen Test Partners", "slug": "pen-test-partners", "website": "https://www.pentestpartners.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Buckingham" }, { "country": "US", "state": "NY", "city": "New York" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Pen Test Partners LLP (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Security testing and consultancy firm based in Buckingham, England with a New York office; listed as a PCI QSA.", "sources": [ "https://www.pentestpartners.com", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Dionach", "slug": "dionach", "website": "https://dionach.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Oxford" }, { "country": "UK", "state": "Scotland", "city": "Glasgow" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Dionach (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity firm with offices in Oxford and Glasgow; listed as a PCI QSA.", "sources": [ "https://dionach.com", "https://dionach.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Xcina Consulting", "slug": "xcina-consulting", "website": "https://xcinaconsulting.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Xcina Consulting Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "London-based consultancy (consulting arm of Brookcourt Solutions Limited per its site); listed as a PCI QSA.", "sources": [ "https://xcinaconsulting.com", "https://xcinaconsulting.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Razorthorn Security", "slug": "razorthorn-security", "website": "https://www.razorthorn.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Tunbridge Wells" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Razor Thorn Security Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity consultancy based in Tunbridge Wells, Kent; listed as a PCI QSA.", "sources": [ "https://www.razorthorn.com", "https://www.razorthorn.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Claranet", "slug": "claranet", "website": "https://www.claranet.com/uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" }, { "country": "UK", "state": "England", "city": "Leeds" }, { "country": "UK", "state": "England", "city": "Gloucester" }, { "country": "UK", "state": "England", "city": "Warrington" }, { "country": "India", "state": "Telangana", "city": "Hyderabad" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Claranet Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Managed IT and cybersecurity services provider with UK offices in London, Leeds, Gloucester and Warrington; listed as a PCI QSA.", "sources": [ "https://www.claranet.com/uk", "https://www.claranet.com/uk/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Securious", "slug": "securious", "website": "https://securious.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Exeter" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Securious Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Exeter-based information security consultancy; listed as a PCI QSA.", "sources": [ "https://securious.co.uk", "https://securious.co.uk/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SISA", "slug": "sisa", "website": "https://www.sisainfosec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "US", "state": "TX", "city": "Irving" } ], "frameworks": [ "CERT-In", "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: SISA Information Security Private Limited (Bengaluru)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: SISA (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: SISA Information Security", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-headquartered information security firm listed as a CERT-In empanelled auditor, PCI QSA and HITRUST External Assessor.", "sources": [ "https://www.sisainfosec.com", "https://sisa.ai/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Network Intelligence", "slug": "network-intelligence", "website": "https://www.networkintelligence.ai", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "US", "state": "TX", "city": "Plano" } ], "frameworks": [ "CERT-In", "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Network Intelligence Pvt. Ltd. (Mumbai)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Network Intelligence Pvt. Ltd. (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Network Intelligence, LLC", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Indian cybersecurity firm with offices in Bengaluru and Plano, Texas; listed as a CERT-In empanelled auditor (Mumbai address), PCI QSA and HITRUST External Assessor.", "sources": [ "https://www.networkintelligence.ai", "https://www.networkintelligence.ai/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Panacea InfoSec", "slug": "panacea-infosec", "website": "https://panaceainfosec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Panacea InfoSec Pvt. Ltd. (New Delhi)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Panacea Infosec (P) Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "New Delhi-based information security audit firm listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://panaceainfosec.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Crossbow Labs", "slug": "crossbow-labs", "website": "https://crossbowsec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Crossbow Labs LLP (Bengaluru)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Crossbow Labs LLP (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity firm with a Chennai office; listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://crossbowsec.com", "https://crossbowsec.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "QRC Assurance and Solutions", "slug": "qrc-assurance", "website": "https://www.qrcsolutionz.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" }, { "country": "US", "state": "DE", "city": "Wilmington" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: QRC Assurance and Solutions Private Limited (Navi Mumbai)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: QRC Assurance And Solutions Private Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Navi Mumbai-based security assurance firm with a US entity in Wilmington, Delaware; listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://www.qrcsolutionz.com", "https://www.qrcsolutionz.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "eSec Forte Technologies", "slug": "esec-forte", "website": "https://www.esecforte.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: eSec Forte Technologies Pvt. Ltd. (Gurugram)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ESEC FORTE TECHNOLOGIES PRIVATE LIMITED (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based CERT-In empanelled auditor, also listed as a PCI DSS QSA company.", "sources": [ "https://www.esecforte.com", "https://www.esecforte.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kratikal", "slug": "kratikal", "website": "https://kratikal.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "US", "state": "CA", "city": "Cupertino" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: KRATIKAL TECH LIMITED (Noida)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-headquartered cybersecurity company with a Cupertino, California office; listed as a CERT-In empanelled information security auditor.", "sources": [ "https://kratikal.com", "https://kratikal.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Security Brigade", "slug": "security-brigade", "website": "https://securitybrigade.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Security Brigade InfoSec Pvt. Ltd. (Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based offensive security and audit firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://securitybrigade.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Payatu", "slug": "payatu", "website": "https://payatu.ai", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Payatu Security Consulting Private Limited (Pune)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pune-based security consulting firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://payatu.ai", "https://payatu.ai/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Indusface", "slug": "indusface", "website": "https://www.indusface.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Vadodara" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" }, { "country": "US", "state": "TX", "city": "Dallas" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Indusface Pvt. Ltd. (Vadodara)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Vadodara-headquartered application security company with offices in Bengaluru, Navi Mumbai and Dallas; listed as a CERT-In empanelled auditor.", "sources": [ "https://www.indusface.com", "https://www.indusface.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyRAAC", "slug": "cyraac", "website": "https://cyraacs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: CyRAAC Services Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cyber risk advisory firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://cyraacs.com", "https://cyraacs.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Briskinfosec", "slug": "briskinfosec", "website": "https://www.briskinfosec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Briskinfosec Technology and Consulting Pvt Ltd (Chennai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chennai-headquartered cybersecurity firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.briskinfosec.com", "https://www.briskinfosec.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Qadit Systems and Solutions", "slug": "qadit", "website": "https://qadit.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "Telangana", "city": "Hyderabad" }, { "country": "India", "state": "Kerala", "city": "Kochi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Qadit Systems and Solutions Pvt Ltd (Chennai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chennai-based IT audit and assurance firm with branches in Hyderabad and Kochi; listed as a CERT-In empanelled auditor.", "sources": [ "https://qadit.com", "https://qadit.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AQM Technologies", "slug": "aqm-technologies", "website": "https://aqmtechnologies.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: AQM Technologies Pvt Ltd. (Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based testing and information security services company listed as a CERT-In empanelled auditor.", "sources": [ "https://aqmtechnologies.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cherry Bekaert", "slug": "cherry-bekaert", "website": "https://www.cbh.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Raleigh" }, { "country": "US", "state": "CA", "city": "Carlsbad" }, { "country": "US", "state": "CA", "city": "Torrance" }, { "country": "US", "state": "CO", "city": "Colorado Springs" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "DE", "city": "Wilmington" }, { "country": "US", "state": "FL", "city": "Fort Lauderdale" }, { "country": "US", "state": "FL", "city": "Coral Gables" }, { "country": "US", "state": "FL", "city": "Orlando" }, { "country": "US", "state": "FL", "city": "Palm Beach Gardens" }, { "country": "US", "state": "FL", "city": "Sarasota" }, { "country": "US", "state": "FL", "city": "Tampa" }, { "country": "US", "state": "GA", "city": "Alpharetta" }, { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "GA", "city": "Augusta" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "IL", "city": "Elgin" }, { "country": "US", "state": "IL", "city": "Orland Park" }, { "country": "US", "state": "IN", "city": "Indianapolis" }, { "country": "US", "state": "IN", "city": "Jeffersonville" }, { "country": "US", "state": "KY", "city": "Lexington" }, { "country": "US", "state": "KY", "city": "Louisville" }, { "country": "US", "state": "LA", "city": "New Orleans" }, { "country": "US", "state": "MA", "city": "Bedford" }, { "country": "US", "state": "MA", "city": "Waltham" }, { "country": "US", "state": "MN", "city": "Chanhassen" }, { "country": "US", "state": "MO", "city": "Kansas City" }, { "country": "US", "state": "NJ", "city": "Marlton" }, { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "NC", "city": "Fayetteville" }, { "country": "US", "state": "NC", "city": "Gastonia" }, { "country": "US", "state": "OH", "city": "Cincinnati" }, { "country": "US", "state": "PA", "city": "Allentown" }, { "country": "US", "state": "PA", "city": "Greensburg" }, { "country": "US", "state": "PA", "city": "Pittsburgh" }, { "country": "US", "state": "PA", "city": "Reading" }, { "country": "US", "state": "PA", "city": "Royersford" }, { "country": "US", "state": "PA", "city": "Lower Gwynedd" }, { "country": "US", "state": "PA", "city": "Warrendale" }, { "country": "US", "state": "RI", "city": "West Warwick" }, { "country": "US", "state": "SC", "city": "Greenville" }, { "country": "US", "state": "TN", "city": "Nashville" }, { "country": "US", "state": "TX", "city": "Austin" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "TX", "city": "Fort Worth" }, { "country": "US", "state": "TX", "city": "Houston" }, { "country": "US", "state": "TX", "city": "Plano" }, { "country": "US", "state": "TX", "city": "San Antonio" }, { "country": "US", "state": "TX", "city": "The Woodlands" }, { "country": "US", "state": "VA", "city": "Richmond" }, { "country": "US", "state": "VA", "city": "Virginia Beach" }, { "country": "US", "state": "VA", "city": "Arlington" }, { "country": "US", "state": "MD", "city": "Rockville" }, { "country": "US", "state": "VA", "city": "Tysons" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "CMMC" ], "accreditations": [ { "registry": "CPAverify (NASBA) - VA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=Cherry%20Bekaert", "status_text": "CHERRY BEKAERT LLP - VA firm license 132400, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Cherry Bekaert", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Cherry Bekaert (Tysons, VA)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "CPA and advisory firm with offices across the US; performs SOC 1 and SOC 2 examinations and is listed as a HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://www.cbh.com", "https://www.cbh.com/locations/", "https://www.cbh.com/services/accounting-assurance/audit-attestation-services/soc-reporting-services/", "https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=Cherry%20Bekaert", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Schneider Downs", "slug": "schneider-downs", "website": "https://schneiderdowns.com", "hq_country": "US", "offices": [ { "country": "US", "state": "PA", "city": "Pittsburgh" }, { "country": "US", "state": "OH", "city": "Columbus" }, { "country": "US", "state": "VA", "city": "McLean" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "PCI DSS", "CMMC" ], "accreditations": [ { "registry": "CPAverify (NASBA) - OH board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=119&firmName=Schneider%20Downs", "status_text": "SCHNEIDER DOWNS & CO INC - OH firm license 43215141.PR, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: SCHNEIDER, DOWNS & CO., INC. (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Schneider Downs", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Schneider Downs & Co., Inc. (Pittsburgh, PA)", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Pittsburgh-based CPA and advisory firm with offices in Columbus and McLean; performs SOC examinations and is listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://schneiderdowns.com", "https://schneiderdowns.com/locations/", "https://schneiderdowns.com/report-soc-pres/", "https://ald.nasba.org/search/firm/results?jurisdictionId=119&firmName=Schneider%20Downs", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Forvis Mazars", "slug": "forvis-mazars", "website": "https://www.forvismazars.us", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "WI", "city": "Appleton" }, { "country": "US", "state": "NC", "city": "Asheville" }, { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "TX", "city": "Austin" }, { "country": "US", "state": "AL", "city": "Birmingham" }, { "country": "US", "state": "FL", "city": "Boca Raton" }, { "country": "US", "state": "MA", "city": "Brewster" }, { "country": "US", "state": "MA", "city": "Boston" }, { "country": "US", "state": "KY", "city": "Bowling Green" }, { "country": "US", "state": "MO", "city": "Branson" }, { "country": "US", "state": "SC", "city": "Charleston" }, { "country": "US", "state": "WV", "city": "Charleston" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "OH", "city": "Cincinnati" }, { "country": "US", "state": "CO", "city": "Colorado Springs" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "IL", "city": "Decatur" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "IA", "city": "West Des Moines" }, { "country": "US", "state": "OK", "city": "Enid" }, { "country": "US", "state": "IN", "city": "Evansville" }, { "country": "US", "state": "FL", "city": "Fort Lauderdale" }, { "country": "US", "state": "AR", "city": "Fort Smith" }, { "country": "US", "state": "IN", "city": "Fort Wayne" }, { "country": "US", "state": "TX", "city": "Fort Worth" }, { "country": "US", "state": "NC", "city": "Greensboro" }, { "country": "US", "state": "NC", "city": "Greenville" }, { "country": "US", "state": "SC", "city": "Greenville" }, { "country": "US", "state": "NC", "city": "Hendersonville" }, { "country": "US", "state": "TX", "city": "Houston" }, { "country": "US", "state": "IN", "city": "Indianapolis" }, { "country": "US", "state": "CA", "city": "Irvine" }, { "country": "US", "state": "NJ", "city": "Iselin" }, { "country": "US", "state": "MS", "city": "Jackson" }, { "country": "US", "state": "FL", "city": "Jacksonville" }, { "country": "US", "state": "MO", "city": "Joplin" }, { "country": "US", "state": "MO", "city": "Kansas City" }, { "country": "US", "state": "TN", "city": "Knoxville" }, { "country": "US", "state": "NE", "city": "Lincoln" }, { "country": "US", "state": "AR", "city": "Little Rock" }, { "country": "US", "state": "NY", "city": "Woodbury" }, { "country": "US", "state": "CA", "city": "Los Angeles" }, { "country": "US", "state": "KY", "city": "Louisville" }, { "country": "US", "state": "WI", "city": "Madison" }, { "country": "US", "state": "TN", "city": "Memphis" }, { "country": "US", "state": "MN", "city": "Minneapolis" }, { "country": "US", "state": "TN", "city": "Nashville" }, { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "VA", "city": "Norfolk" }, { "country": "US", "state": "OK", "city": "Oklahoma City" }, { "country": "US", "state": "NE", "city": "Omaha" }, { "country": "US", "state": "FL", "city": "Orlando" }, { "country": "US", "state": "PA", "city": "Fort Washington" }, { "country": "US", "state": "AZ", "city": "Tempe" }, { "country": "US", "state": "PA", "city": "Pittsburgh" }, { "country": "US", "state": "NC", "city": "Raleigh" }, { "country": "US", "state": "VA", "city": "Richmond" }, { "country": "US", "state": "AR", "city": "Rogers" }, { "country": "US", "state": "CA", "city": "Sacramento" }, { "country": "US", "state": "UT", "city": "Salt Lake City" }, { "country": "US", "state": "TX", "city": "San Antonio" }, { "country": "US", "state": "CA", "city": "San Francisco" }, { "country": "US", "state": "WA", "city": "Seattle" }, { "country": "US", "state": "MO", "city": "Springfield" }, { "country": "US", "state": "MO", "city": "St. Louis" }, { "country": "US", "state": "SC", "city": "Summerville" }, { "country": "US", "state": "FL", "city": "Tallahassee" }, { "country": "US", "state": "FL", "city": "Tampa" }, { "country": "US", "state": "OH", "city": "Toledo" }, { "country": "US", "state": "AZ", "city": "Tucson" }, { "country": "US", "state": "OK", "city": "Tulsa" }, { "country": "US", "state": "TX", "city": "Waco" }, { "country": "US", "state": "VA", "city": "Tysons" }, { "country": "US", "state": "KS", "city": "Wichita" } ], "frameworks": [ "HITRUST", "PCI DSS", "CMMC" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Forvis Mazars, LLP (not in remediation)", "checked": "2026-10-24" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Forvis Mazars, LLP", "checked": "2026-10-24" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Forvis Mazars (Charlotte, NC)", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "US accounting and advisory firm with offices in many states; listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://www.forvismazars.us", "https://www.forvismazars.us/about-us/locations", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Plante Moran", "slug": "plante-moran", "website": "https://www.plantemoran.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MI", "city": "Southfield" }, { "country": "US", "state": "CO", "city": "Broomfield" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "CO", "city": "Fort Collins" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "IL", "city": "Schaumburg" }, { "country": "US", "state": "MA", "city": "Wakefield" }, { "country": "US", "state": "MI", "city": "Ann Arbor" }, { "country": "US", "state": "MI", "city": "Auburn Hills" }, { "country": "US", "state": "MI", "city": "Detroit" }, { "country": "US", "state": "MI", "city": "East Lansing" }, { "country": "US", "state": "MI", "city": "Flint" }, { "country": "US", "state": "MI", "city": "Grand Rapids" }, { "country": "US", "state": "MI", "city": "Portage" }, { "country": "US", "state": "MI", "city": "Clinton Township" }, { "country": "US", "state": "MI", "city": "Traverse City" }, { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "OH", "city": "Cincinnati" }, { "country": "US", "state": "OH", "city": "Cleveland" }, { "country": "US", "state": "OH", "city": "Grandview Heights" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "CPAverify (NASBA) - MI board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=117&firmName=Plante", "status_text": "PLANTE & MORAN PLLC - MI firm license 1102002948, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Plante & Moran, PLLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Plante Moran", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Accounting and advisory firm with offices in Michigan, Illinois, Colorado, Ohio and other states; its cybersecurity practice covers SOC 1 and SOC 2 reporting, PCI DSS and HITRUST.", "sources": [ "https://www.plantemoran.com", "https://www.plantemoran.com/get-to-know/offices", "https://www.plantemoran.com/services/consulting/cybersecurity", "https://ald.nasba.org/search/firm/results?jurisdictionId=117&firmName=Plante", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sikich", "slug": "sikich", "website": "https://www.sikich.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "VA", "city": "Alexandria" }, { "country": "US", "state": "MA", "city": "Marlborough" }, { "country": "US", "state": "TN", "city": "Chattanooga" }, { "country": "US", "state": "OH", "city": "Richfield" }, { "country": "US", "state": "IL", "city": "Decatur" }, { "country": "US", "state": "IN", "city": "Indianapolis" }, { "country": "US", "state": "WI", "city": "Brookfield" }, { "country": "US", "state": "MN", "city": "Plymouth" }, { "country": "US", "state": "IL", "city": "Naperville" }, { "country": "US", "state": "IL", "city": "East Peoria" }, { "country": "US", "state": "MD", "city": "Rockville" }, { "country": "US", "state": "IL", "city": "Springfield" }, { "country": "US", "state": "MO", "city": "St. Louis" }, { "country": "India", "state": "Gujarat", "city": "Ahmedabad" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "SOC 1", "SOC 2", "PCI DSS" ], "accreditations": [ { "registry": "CPAverify (NASBA) - IL board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=37&firmName=Sikich", "status_text": "SIKICH CPA LLC - IL firm license 066.005528, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Sikich LLC (previous name Sikich LLP; not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Accounting, technology and advisory firm with US offices in the Midwest, Mid-Atlantic and New England and offices in India; its services include SOC reporting and PCI DSS assessments.", "sources": [ "https://www.sikich.com", "https://www.sikich.com/about/locations/", "https://www.sikich.com/technology/cybersecurity/", "https://www.sikich.com/technology/cybersecurity/pci-dss-compliance/", "https://ald.nasba.org/search/firm/results?jurisdictionId=37&firmName=Sikich", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Boulay", "slug": "boulay", "website": "https://boulaygroup.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MN", "city": "Eden Prairie" }, { "country": "US", "state": "MN", "city": "Mankato" }, { "country": "US", "state": "MN", "city": "Minneapolis" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001" ], "accreditations": [ { "registry": "CPAverify (NASBA) - MN board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=40&firmName=Boulay", "status_text": "BOULAY PLLP - MN firm license 01091, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Boulay Certifications, LLC (Minnesota) - ISO/IEC 27001", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Minnesota CPA and advisory firm offering SOC 1 and SOC 2 reporting, with an ANAB-accredited affiliate for ISO 27001 certification.", "sources": [ "https://boulaygroup.com", "https://boulaygroup.com/contact/", "https://boulaygroup.com/services/soc-reporting/", "https://ald.nasba.org/search/firm/results?jurisdictionId=40&firmName=Boulay", "https://anabdirectory.remoteauditor.com/", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Consilium Labs", "slug": "consilium-labs", "website": "https://consilium-labs.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "El Dorado Hills" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Consilium Labs Inc. (California) - ISO/IEC 27001, ISO/IEC 27701", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Certification body with a North America office in El Dorado Hills, California; ANAB-accredited for ISO 27001 and ISO 27701 certification audits.", "sources": [ "https://consilium-labs.com", "https://consilium-labs.com/", "https://anabdirectory.remoteauditor.com/", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "McKonly & Asbury", "slug": "mckonly-and-asbury", "website": "https://macpas.com", "hq_country": "US", "offices": [ { "country": "US", "state": "PA", "city": "Camp Hill" }, { "country": "US", "state": "PA", "city": "Lancaster" }, { "country": "US", "state": "PA", "city": "Bloomsburg" }, { "country": "US", "state": "PA", "city": "Philadelphia" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "CMMC" ], "accreditations": [ { "registry": "CPAverify (NASBA) - MD board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=35&firmName=McKonly", "status_text": "MCKONLY & ASBURY LLP - MD firm license 0037905, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: McKonly & Asbury", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: McKonly & Asbury, LLP (Camp Hill, PA)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pennsylvania CPA firm based in Camp Hill offering SOC 1 and SOC 2 examinations and HITRUST assessments; listed as a CMMC C3PAO.", "sources": [ "https://macpas.com", "https://macpas.com/contact/", "https://macpas.com/services/soc-reports/", "https://macpas.com/services/hitrust/", "https://ald.nasba.org/search/firm/results?jurisdictionId=35&firmName=McKonly", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sentar", "slug": "sentar", "website": "https://www.sentar.com", "hq_country": "US", "offices": [ { "country": "US", "state": "AL", "city": "Huntsville" }, { "country": "US", "state": "SC", "city": "North Charleston" }, { "country": "US", "state": "MD", "city": "Columbia" }, { "country": "US", "state": "TX", "city": "San Antonio" }, { "country": "US", "state": "CA", "city": "San Diego" } ], "frameworks": [ "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Sentar, Inc. (recognized Oct 30, 2020)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Sentar, Inc. (Huntsville, AL)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Sentar", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Huntsville, Alabama cybersecurity firm listed as a FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://www.sentar.com", "https://www.sentar.com/contact", "https://www.sentar.com/fedramp-govramp", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Sentar" } ] }, { "name": "Lunarline", "slug": "lunarline", "website": "https://lunarline.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Ashburn" } ], "frameworks": [ "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Lunarline, Inc. (recognized May 15, 2012)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Lunarline, Inc. (Ashburn, VA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Lunarline, Inc.", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Ashburn, Virginia cybersecurity firm listed as a FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://lunarline.com", "https://lunarline.com/contact/", "https://lunarline.com/services/assessment/fedramp/", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Lunarline, Inc." } ] }, { "name": "Vaultes", "slug": "vaultes", "website": "https://www.vaultes.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "McLean" } ], "frameworks": [ "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Vaultes (recognized Nov 16, 2020)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Vaultes (registry address Reston, VA)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Vaultes", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Northern Virginia cybersecurity assessment firm listed as a FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://www.vaultes.com", "https://www.vaultes.com/contact/", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Vaultes" } ] }, { "name": "Emagine IT", "slug": "emagine-it", "website": "https://www.eit2.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "North Bethesda" } ], "frameworks": [ "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Emagine IT (recognized May 26, 2015)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO, active and in good standing: Emagine IT (North Bethesda, MD)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Emagine IT", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "North Bethesda, Maryland technology and cybersecurity firm listed as a FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://www.eit2.com", "https://www.eit2.com/contact", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Emagine IT" } ] }, { "name": "Clearwater", "slug": "clearwater", "website": "https://clearwatersecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Nashville" } ], "frameworks": [ "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Clearwater", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Nashville-based healthcare cybersecurity and compliance firm listed as a HITRUST External Assessor; its services include HIPAA risk analysis.", "sources": [ "https://clearwatersecurity.com", "https://clearwatersecurity.com/contact/", "https://clearwatersecurity.com/compliance-services/hitrust/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MegaplanIT", "slug": "megaplanit", "website": "https://www.megaplanit.com", "hq_country": "US", "offices": [ { "country": "US", "state": "AZ", "city": "Scottsdale" } ], "frameworks": [ "HITRUST", "PCI DSS", "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: MegaplanIT Holdings, LLC (recognized Feb 17, 2021)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: MegaPlanIT Holdings, LLC", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: MegaplanIT Holdings LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: MegaPlanIT", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Scottsdale, Arizona security and compliance firm listed as a PCI QSA, HITRUST External Assessor and FedRAMP 3PAO.", "sources": [ "https://www.megaplanit.com", "https://www.megaplanit.com/contact", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "MegaPlanIT" } ] }, { "name": "Securisea", "slug": "securisea", "website": "https://www.securisea.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Annapolis" } ], "frameworks": [ "ISO 27001", "ISO 42001", "HITRUST", "PCI DSS", "FedRAMP", "HIPAA", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Securisea, Inc. (recognized Apr 9, 2020)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Securisea, Inc.", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Securisea, Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Securisea CB, LLC (California) - ISO/IEC 27001, ISO/IEC 42001", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Securisea", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Security assessment firm with an Annapolis, Maryland address listed as a FedRAMP 3PAO, PCI QSA and HITRUST External Assessor, with an ANAB-accredited affiliate for ISO 27001 and ISO 42001.", "sources": [ "https://www.securisea.com", "https://www.securisea.com/", "https://www.securisea.com/hitrust-hipaa", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://anabdirectory.remoteauditor.com/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Securisea" } ] }, { "name": "Frazier & Deeter", "slug": "frazier-and-deeter", "website": "https://www.frazierdeeter.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "GA", "city": "Alpharetta" }, { "country": "US", "state": "AL", "city": "Auburn" }, { "country": "US", "state": "AL", "city": "Montgomery" }, { "country": "US", "state": "MD", "city": "Towson" }, { "country": "US", "state": "MD", "city": "Columbia" }, { "country": "US", "state": "MA", "city": "Canton" }, { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "AL", "city": "Huntsville" }, { "country": "US", "state": "NV", "city": "Las Vegas" }, { "country": "US", "state": "MN", "city": "Plymouth" }, { "country": "US", "state": "TN", "city": "Nashville" }, { "country": "US", "state": "FL", "city": "Pensacola" }, { "country": "US", "state": "FL", "city": "Tampa" }, { "country": "US", "state": "FL", "city": "Winter Haven" } ], "frameworks": [ "SOC 2", "HITRUST", "PCI DSS", "HIPAA" ], "accreditations": [ { "registry": "CPAverify (NASBA) - GA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Frazier%20%26%20Deeter", "status_text": "FRAZIER & DEETER LLC - GA firm license ACF000776, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Frazier & Deeter, LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Frazier & Deeter", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "Atlanta-based CPA and advisory firm whose cybersecurity practice covers SOC 2, HITRUST, HIPAA and PCI DSS; listed as a PCI QSA and HITRUST External Assessor.", "sources": [ "https://www.frazierdeeter.com", "https://www.frazierdeeter.com/locations/", "https://www.frazierdeeter.com/advisory/cybersecurity/", "https://www.frazierdeeter.com/insights/article/how-to-prepare-for-a-soc-2-report/", "https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Frazier%20%26%20Deeter", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "risk3sixty", "slug": "risk3sixty", "website": "https://risk3sixty.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Roswell" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: risk3sixty", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: risk3sixty LLC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Roswell, Georgia security and compliance firm listed as a PCI QSA and HITRUST External Assessor.", "sources": [ "https://risk3sixty.com", "https://risk3sixty.com/contact", "https://risk3sixty.com/hitrust", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ProCheckUp", "slug": "procheckup", "website": "https://www.procheckup.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Portsmouth" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ProCheckUp Ltd (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Portsmouth-based information security firm (ProCheckUp Limited); listed as a PCI QSA.", "sources": [ "https://www.procheckup.com", "https://find-and-update.company-information.service.gov.uk/company/03843730", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cortida", "slug": "cortida", "website": "https://www.cortida.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" }, { "country": "UK", "state": "England", "city": "Buckhurst Hill" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CORTIDA LIMITED (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "London-based cybersecurity and compliance consultancy (Cortida Limited, registered office Buckhurst Hill, Essex); listed as a PCI QSA.", "sources": [ "https://www.cortida.com", "https://find-and-update.company-information.service.gov.uk/company/11778751", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Blackfoot UK", "slug": "blackfoot-uk", "website": "https://blackfootuk.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Welwyn Garden City" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Blackfoot UK Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity and compliance consultancy based in Welwyn Garden City (per its site); listed as a PCI QSA.", "sources": [ "https://blackfootuk.com", "https://find-and-update.company-information.service.gov.uk/company/06778791", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AMR CyberSecurity", "slug": "amr-cybersecurity", "website": "https://www.amrcybersecurity.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Whiteley" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: AMR CYBERSECURITY LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity firm registered in Whiteley, Hampshire (AMR CyberSecurity Ltd); listed as a PCI QSA.", "sources": [ "https://www.amrcybersecurity.com", "https://find-and-update.company-information.service.gov.uk/company/11551941", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "One Compliance Cyber", "slug": "one-compliance-cyber", "website": "https://www.onecompliance.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Warrington" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: One Compliance Cyber Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK payment security and compliance firm with a registered address in Warrington; listed as a PCI QSA.", "sources": [ "https://www.onecompliance.co.uk", "https://find-and-update.company-information.service.gov.uk/company/08890330", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Teamwork IMS", "slug": "teamwork-ims", "website": "https://www.teamworkims.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Reading" }, { "country": "UK", "state": "England", "city": "Leeds" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Teamwork IMS (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Management systems and information security consultancy with offices in Reading and Leeds (per its site); listed as a PCI QSA.", "sources": [ "https://www.teamworkims.co.uk", "https://find-and-update.company-information.service.gov.uk/company/06061585", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "2|SEC", "slug": "2-sec", "website": "https://www.2-sec.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: 2-sec Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "London-based cybersecurity consultancy (2-sec Limited) offering penetration testing and PCI DSS services; listed as a PCI QSA.", "sources": [ "https://www.2-sec.com", "https://find-and-update.company-information.service.gov.uk/company/07800173", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cyber Security Associates", "slug": "cyber-security-associates", "website": "https://csacyber.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" }, { "country": "UK", "state": "England", "city": "Gloucester" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Cyber Security Associates Limited (previously SureCloud Cyber Services Limited) (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity services firm with offices in London and Gloucester (per its site); listed as a PCI QSA.", "sources": [ "https://csacyber.com", "https://find-and-update.company-information.service.gov.uk/company/10124305", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "URM Consulting", "slug": "urm-consulting", "website": "https://www.urmconsulting.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Reading" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: URM CONSULTING SERVICES LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Reading-based governance, risk and compliance consultancy (URM Consulting Services Ltd); listed as a PCI QSA.", "sources": [ "https://www.urmconsulting.com", "https://www.urmconsulting.com/about/contact", "https://find-and-update.company-information.service.gov.uk/company/05488337", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PRISM Infosec", "slug": "prism-infosec", "website": "https://prisminfosec.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Cheltenham" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: PRISM INFOSEC LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity consultancy (Prism Infosec Ltd, registered office Cheltenham per Companies House); listed as a PCI QSA.", "sources": [ "https://prisminfosec.com", "https://prisminfosec.com/about-us/", "https://find-and-update.company-information.service.gov.uk/company/05985734", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PGI - Protection Group International", "slug": "pgi-protection-group-international", "website": "https://www.pgitl.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" }, { "country": "UK", "state": "England", "city": "Bristol" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: PGI - Protection Group International Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Digital risk and cybersecurity firm with offices in London and Bristol (per its site); listed as a PCI QSA.", "sources": [ "https://www.pgitl.com", "https://www.pgitl.com/contact", "https://find-and-update.company-information.service.gov.uk/company/07967865", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Orange Cyberdefense UK", "slug": "orange-cyberdefense-uk", "website": "https://www.orangecyberdefense.com/uk/", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" }, { "country": "UK", "state": "England", "city": "Maidstone" }, { "country": "UK", "state": "England", "city": "Manchester" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ORANGE CYBERDEFENSE UK LIMITED (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK arm of Orange Cyberdefense (Orange group) with offices in London, Maidstone and Manchester (per its site); listed as a PCI QSA.", "sources": [ "https://www.orangecyberdefense.com/uk/", "https://www.orangecyberdefense.com/uk/contact", "https://find-and-update.company-information.service.gov.uk/company/04365896", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Bureau Veritas UK", "slug": "bureau-veritas-uk", "website": "https://www.bureauveritas.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0008/ManagementSystems", "status_text": "UKAS accredited certification body no. 0008 (Bureau Veritas Certification Holding SAS - UK Branch); schedule lists ISO/IEC 27001:2022, ISO/IEC 27701:2019 and ISO 22301:2019 (issue 226, 04 Jun 2026); UKAS address London EC3R", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK branch of the Bureau Veritas certification business (London); UKAS-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.", "sources": [ "https://www.bureauveritas.co.uk", "https://www.ukas.com/download-schedule/0008/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/BR002542" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DNV UK", "slug": "dnv-uk", "website": "https://www.dnv.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0013/ManagementSystems", "status_text": "UKAS accredited certification body no. 0013 (DNV Business Assurance UK Limited); schedule lists ISO/IEC 27001:2022, ISO/IEC 27701:2019 and ISO 22301:2019 (issue 152, 30 Apr 2026); UKAS address London SE1", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK certification entity of DNV (DNV Business Assurance UK Limited, London); UKAS-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.", "sources": [ "https://www.dnv.co.uk", "https://www.ukas.com/download-schedule/0013/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/02172892" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SGS UK", "slug": "sgs-uk", "website": "https://www.sgs.com/en-gb", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Ellesmere Port" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0005/ManagementSystems", "status_text": "UKAS accredited certification body no. 0005 (SGS United Kingdom Limited); schedule lists ISO/IEC 27001:2022, ISO/IEC 27701:2019 and ISO 22301:2019 (issue 212, 15 Apr 2026); UKAS address Ellesmere Port, Cheshire", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK entity of the SGS testing, inspection and certification group (SGS United Kingdom Limited, Ellesmere Port); UKAS-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.", "sources": [ "https://www.sgs.com/en-gb", "https://www.ukas.com/download-schedule/0005/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/01193985" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Centre for Assessment", "slug": "centre-for-assessment", "website": "https://www.centreforassessment.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Manchester" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0120/ManagementSystems", "status_text": "UKAS accredited certification body no. 0120 (Centre for Assessment Limited); schedule lists ISO/IEC 27001:2022 (issue 067, 09 Jun 2026); UKAS address Manchester M1", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Manchester-based certification body (Centre for Assessment Limited); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.centreforassessment.co.uk", "https://www.ukas.com/download-schedule/0120/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/04089911" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "United Registrar of Systems (URS)", "slug": "united-registrar-of-systems-urs", "website": "https://www.urs-holdings.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Bournemouth" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0043/ManagementSystems", "status_text": "UKAS accredited certification body no. 0043 (United Registrar of Systems Ltd); schedule lists ISO/IEC 27001:2022 and ISO 22301:2019 (issue 107, 28 Jul 2026); UKAS address Bournemouth BH2", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bournemouth-based certification body (United Registrar of Systems Ltd); UKAS-accredited for ISO/IEC 27001 and ISO 22301 certification.", "sources": [ "https://www.urs-holdings.com", "https://www.ukas.com/download-schedule/0043/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/02924153" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SOCOTEC Certification UK", "slug": "socotec-certification-uk", "website": "https://www.socotec-certification-international.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Bicester" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0063/ManagementSystems", "status_text": "UKAS accredited certification body no. 0063 (Socotec Certification United Kingdom Limited); schedule lists ISO/IEC 27001:2022 (issue 060, 08 Jun 2026); UKAS address Bicester OX26", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bicester-based certification body (Socotec Certification United Kingdom Limited); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.socotec-certification-international.co.uk", "https://www.ukas.com/download-schedule/0063/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/02293655" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Atlas Certification", "slug": "atlas-certification", "website": "https://www.atlascertification.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/21062/ManagementSystems", "status_text": "UKAS accredited certification body no. 21062 (Atlas Certification Limited); schedule lists ISO/IEC 27001:2022 (issue 015, 21 Apr 2026); UKAS address London SW19", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "London-based certification body (Atlas Certification Limited); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.atlascertification.com", "https://www.ukas.com/download-schedule/21062/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/12534713" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Peers Quality Assurance (PQAL)", "slug": "peers-quality-assurance-pqal", "website": "https://www.pqal.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Aldridge" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/9940/ManagementSystems", "status_text": "UKAS accredited certification body no. 9940 (Peers Quality Assurance Limited); schedule lists ISO/IEC 27001:2022 (issue 033, 25 Jun 2026); UKAS address Aldridge, Walsall", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Certification body with its UK head office in Aldridge, Walsall (per its site); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.pqal.co.uk", "https://www.pqal.co.uk/contact-us/", "https://www.ukas.com/download-schedule/9940/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/10017452" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Five Tattva", "slug": "five-tattva", "website": "https://5tattva.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Five Tattva Cyberhub Security LLP (Gurugram)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: FIVE TATTVA CYBERHUB SECURITY LLP (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based cybersecurity firm listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://5tattva.com", "https://5tattva.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GlobalTech & Infosec", "slug": "globaltech-infosec", "website": "https://gtisec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: GlobalTech & Infosec Pvt Ltd. (Gurugram)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Globaltech & Infosec Private Limited (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based information security firm (GTIS) listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://gtisec.com", "https://gtisec.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberSigma", "slug": "cybersigma", "website": "https://cybersigmacs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Cybersigma Consulting Services LLP (Ghaziabad / Noida)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CYBERSIGMA CONSULTING SERVICES LLP (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-based cybersecurity consulting firm with delivery centres in Mumbai, Bengaluru and Pune; listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://cybersigmacs.com", "https://cybersigmacs.com/locations/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberCube", "slug": "cybercube", "website": "https://www.cybercube.co", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In", "PCI DSS" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: CyberCube Services Pvt. Ltd. (Gurugram)", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CYBERCUBE SERVICES PVT. LTD. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based cybersecurity and compliance firm listed as a CERT-In empanelled auditor and PCI QSA.", "sources": [ "https://www.cybercube.co", "https://www.cybercube.co/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AKS IT Services", "slug": "aks-it-services", "website": "https://www.aksitservices.co.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: AKS Information Technology Services Pvt Ltd (Noida)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-headquartered cybersecurity audit firm with offices in Delhi and Navi Mumbai; listed as a CERT-In empanelled auditor.", "sources": [ "https://www.aksitservices.co.in", "https://www.aksitservices.co.in/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TAC Security", "slug": "tac-security", "website": "https://tacsecurity.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Punjab", "city": "Mohali" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: TAC InfoSec Limited (Mohali)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mohali-based vulnerability management and security audit company (TAC InfoSec Limited) with offices in Mumbai, New Delhi and Pune; listed as a CERT-In empanelled auditor.", "sources": [ "https://tacsecurity.com", "https://tacsecurity.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Talakunchi Networks", "slug": "talakunchi-networks", "website": "https://talakunchi.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Dombivli" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Talakunchi Networks Pvt Ltd (Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based IT and network security services firm with a Dombivli office; listed as a CERT-In empanelled auditor.", "sources": [ "https://talakunchi.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CEREIV Advisory", "slug": "cereiv-advisory", "website": "https://cereiv.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Kerala", "city": "Thrissur" } ], "frameworks": [ "CERT-In", "ISO 27001" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: CEREIV Advisory LLP (Koratty, Thrissur)", "checked": "2026-10-20" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is-015/", "status_text": "CEREIV Advisory LLP - NABCB ISMS accreditation IS 015, valid 21 Jan 2026 to 20 Jan 2029; scope ISO/IEC 27001:2022", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Certification and assurance firm at Infopark Koratty (Thrissur, Kerala); NABCB-accredited ISO 27001 certification body and CERT-In empanelled auditor.", "sources": [ "https://cereiv.com", "https://cereiv.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://nabcb.qci.org.in/is-015/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cybertryzub Infosec", "slug": "cybertryzub-infosec", "website": "https://www.cybertryzub.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" }, { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "CERT-In", "ISO 27001" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Cybertryzub Infosec Pvt Ltd (Gurugram)", "checked": "2026-10-20" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is-017/", "status_text": "Cybertryzub Infosec Private Limited - NABCB ISMS accreditation IS 017, valid 18 Mar 2026 to 17 Mar 2029; scope ISO/IEC 27001:2022", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based information security firm with a Noida office; NABCB-accredited ISO 27001 certification body and CERT-In empanelled auditor.", "sources": [ "https://www.cybertryzub.com", "https://cybertryzub.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://nabcb.qci.org.in/is-017/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV SÜD South Asia", "slug": "tuv-sud-south-asia", "website": "https://www.tuvsud.com/en-in", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001", "PCI DSS", "CERT-In" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is001/", "status_text": "TUV SUD South Asia Private Limited - NABCB ISMS accreditation IS 001, valid until 15 Apr 2029; scope ISO/IEC 27001:2022 and ISO/IEC 27701:2025", "checked": "2026-10-20" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/ai-002/", "status_text": "TUV SUD South Asia Pvt. Ltd. - NABCB AIMS accreditation AI 002, valid 05 Aug 2025 to 04 Aug 2028; scope ISO/IEC 42001:2023", "checked": "2026-10-20" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/bc-002/", "status_text": "TUV SUD South Asia Pvt. Ltd. - NABCB BCMS accreditation BC 002, valid until 15 Apr 2030", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: TUV SUD South Asia Pvt. Ltd. (not in remediation)", "checked": "2026-10-20" }, { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: TUV-SUD South Asia Pvt. Ltd. (Pune)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Indian testing, inspection and certification company of the TÜV SÜD group; NABCB-accredited for ISO 27001, 27701, 42001 and 22301 certification, PCI QSA and CERT-In empanelled auditor.", "sources": [ "https://www.tuvsud.com/en-in", "https://nabcb.qci.org.in/is001/", "https://nabcb.qci.org.in/ai-002/", "https://nabcb.qci.org.in/bc-002/", "https://nabcb.qci.org.in/management-system-certification/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV India", "slug": "tuv-india", "website": "https://www.tuv-nord.com/in/en/", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is007/", "status_text": "TUV India Pvt. Ltd. - NABCB ISMS accreditation IS 007, valid 20 Oct 2021 to 19 Oct 2028; scope ISO/IEC 27001:2022 and ISO/IEC 27701:2019", "checked": "2026-10-20" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/ai-001/", "status_text": "TUV India Pvt. Ltd. - NABCB AIMS accreditation AI 001, valid 11 Feb 2025 to 10 Feb 2028; scope ISO/IEC 42001:2023", "checked": "2026-10-20" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/management-system-certification/", "status_text": "TUV India Pvt. Ltd. - NABCB BCMS accreditation BC 003, valid 15 Jan 2025 to 14 Jan 2028", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based inspection, certification and testing company of the TÜV NORD group; NABCB-accredited for ISO 27001, 27701, 42001 and 22301 certification.", "sources": [ "https://www.tuv-nord.com/in/en/", "https://nabcb.qci.org.in/is007/", "https://nabcb.qci.org.in/ai-001/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IRQS (Indian Register Quality Systems)", "slug": "irqs-indian-register-quality-systems", "website": "https://www.irqs.co.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is0004/", "status_text": "ISSPL Limited (formerly IRCLASS Systems and Solutions), division Indian Register Quality Systems - NABCB ISMS accreditation IS 004, valid 31 Jan 2018 to 30 Jan 2029; scope ISO/IEC 27001:2022 and ISO/IEC 27701:2019", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based certification body (a division of ISSPL Limited, formerly IRCLASS Systems and Solutions); NABCB-accredited for ISO 27001 and ISO 27701 certification.", "sources": [ "https://www.irqs.co.in", "https://www.irqs.co.in/contact-us", "https://nabcb.qci.org.in/is0004/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "STQC IT Certification Services", "slug": "stqc-it-certification-services", "website": "https://stqc.gov.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is003/", "status_text": "STQC IT Certification Services - NABCB ISMS accreditation IS 003, valid 20 Aug 2014 to 19 Dec 2029; scope ISO/IEC 27001:2022", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Certification service of the STQC Directorate, Ministry of Electronics and Information Technology (Government of India), New Delhi; NABCB-accredited ISO 27001 certification body.", "sources": [ "https://stqc.gov.in", "https://stqc.gov.in/en/contact-us-0", "https://nabcb.qci.org.in/is003/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": true, "listing_tier": "verified", "registry_listings": [] }, { "name": "Quality Asia Certifications", "slug": "quality-asia-certifications", "website": "https://www.qualityasia.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "Delhi" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Haryana", "city": "Panchkula" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is-013/", "status_text": "Quality Asia Certifications Private Limited - NABCB ISMS accreditation IS 013, valid 27 Aug 2025 to 26 Aug 2028; scope listed includes ISO/IEC 27701:2019", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Delhi-headquartered certification body with offices in Mumbai, Panchkula and Chennai; NABCB-accredited for ISO 27001 and ISO 27701 certification.", "sources": [ "https://www.qualityasia.in", "https://www.qualityasia.in/contact.php", "https://nabcb.qci.org.in/is-013/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Innovative Quality Certifications", "slug": "innovative-quality-certifications", "website": "https://www.iqcpl.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is-018/", "status_text": "Innovative Quality Certifications Pvt. Ltd. - NABCB ISMS accreditation IS 018, valid 27 May 2026 to 26 May 2029; scope ISO/IEC 27001:2022", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pune-based certification body (IQCPL); NABCB-accredited ISO 27001 certification body.", "sources": [ "https://www.iqcpl.com", "https://nabcb.qci.org.in/is-018/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "COAE International", "slug": "coae-international", "website": "https://www.coaeint.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is-20/", "status_text": "COAE International Pvt. Ltd. - NABCB ISMS accreditation IS 020, valid 28 Sep 2026 to 27 Sep 2029; scope ISO/IEC 27001:2022", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-based certification body (Centre of Assessment for Excellence); NABCB-accredited ISO 27001 certification body.", "sources": [ "https://www.coaeint.com", "https://nabcb.qci.org.in/is-20/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "WeSecureApp", "slug": "wesecureapp", "website": "https://wesecureapp.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Telangana", "city": "Hyderabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Tek Cube Pvt. Ltd. (WeSecureApp) (Hyderabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Hyderabad-based offensive security firm (Tek Cube Pvt. Ltd.) listed as a CERT-In empanelled auditor.", "sources": [ "https://wesecureapp.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Entersoft Security", "slug": "entersoft-security", "website": "https://entersoftsecurity.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Telangana", "city": "Hyderabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Entersoft Information Systems Private Limited (Hyderabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Hyderabad-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://entersoftsecurity.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sicherten", "slug": "sicherten", "website": "https://sicherten.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Telangana", "city": "Hyderabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Sicherten Info Consulting Private Limited (Hyderabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Hyderabad-based cybersecurity services firm listed as a CERT-In empanelled auditor.", "sources": [ "https://sicherten.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Paralok", "slug": "paralok", "website": "https://paralok.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Telangana", "city": "Secunderabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: PARALOK INFORMATION SECURITY PRIVATE LIMITED (Secunderabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Secunderabad-based information security firm listed as a CERT-In empanelled auditor.", "sources": [ "https://paralok.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Infopercept", "slug": "infopercept", "website": "https://infopercept.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Infopercept Consulting Private Limited (Ahmedabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ahmedabad-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://infopercept.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Net Square", "slug": "net-square", "website": "https://net-square.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Net Square Solutions Private Limited (Ahmedabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ahmedabad-based security testing firm with a Mumbai office; listed as a CERT-In empanelled auditor.", "sources": [ "https://net-square.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "eSecurify Technologies", "slug": "esecurify-technologies", "website": "https://www.esecurify.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: eSecurify Technologies LLP (Ahmedabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ahmedabad-based security testing firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.esecurify.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PSY9 Security Consulting", "slug": "psy9-security-consulting", "website": "https://psy9.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: PSY9 Security Consulting Private Limited (Ahmedabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ahmedabad-based security consulting firm listed as a CERT-In empanelled auditor.", "sources": [ "https://psy9.in", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TechD Cybersecurity", "slug": "techd-cybersecurity", "website": "https://techdefence.ai", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: TechD Cyber Security Limited (formerly Techdefence Labs) (Ahmedabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ahmedabad-based cybersecurity company (formerly Techdefence Labs) listed as a CERT-In empanelled auditor.", "sources": [ "https://techdefence.ai", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Itorizin Technology Solutions", "slug": "itorizin-technology-solutions", "website": "https://www.itorizin.com", "hq_country": "India", "offices": [ { "country": "India", "state": "West Bengal", "city": "Kolkata" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ITORIZIN TECHNOLOGY SOLUTIONS PVT. LTD. (Kolkata)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Kolkata-based cybersecurity services firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.itorizin.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RootNik Labs", "slug": "rootnik-labs", "website": "https://rootniklabs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ROOTNIK Labs Cybersecurity Private Limited (Kolkata)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Kolkata-headquartered cybersecurity firm with branches in New Delhi and Bengaluru; listed as a CERT-In empanelled auditor.", "sources": [ "https://rootniklabs.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "HackIT", "slug": "hackit", "website": "https://hackit.co", "hq_country": "India", "offices": [ { "country": "India", "state": "Kerala", "city": "Kochi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: HackIT Technology And Advisory Services (Kochi)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Kochi-based cybersecurity and advisory firm listed as a CERT-In empanelled auditor.", "sources": [ "https://hackit.co", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecurityBoat", "slug": "securityboat", "website": "https://securityboat.net", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: SecurityBoat Cybersecurity Solutions Private Limited (Pune)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pune-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://securityboat.net", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Code Decode Labs", "slug": "code-decode-labs", "website": "https://codedecodelabs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Code Decode Labs (Pune)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pune-based security testing firm listed as a CERT-In empanelled auditor.", "sources": [ "https://codedecodelabs.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Certcube Labs", "slug": "certcube-labs", "website": "https://certcube.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Certcube Labs Pvt Ltd (New Delhi)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "New Delhi-based cybersecurity consulting firm listed as a CERT-In empanelled auditor.", "sources": [ "https://certcube.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cyethack Solutions", "slug": "cyethack-solutions", "website": "https://cyethack.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Cyethack Solutions Private Limited (Noida)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://cyethack.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Securium Solutions", "slug": "securium-solutions", "website": "https://securiumsolutions.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: SECURIUM SOLUTIONS PRIVATE LIMITED (Noida)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-based security company listed as a CERT-In empanelled auditor.", "sources": [ "https://securiumsolutions.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sveltetech Technologies", "slug": "sveltetech-technologies", "website": "https://sveltetech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Sveltetech Technologies Private Limited (Gurugram)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://sveltetech.com", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AARC-360", "slug": "aarc-360", "website": "https://www.aarc-360.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Alpharetta" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "PCI DSS", "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "CPAverify (NASBA) - GA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Neil%20Gonsalves%20%26%20Associates", "status_text": "NEIL GONSALVES & ASSOCIATES, LLC (AARC-360 entity per PCI SSC listing) - GA firm license ACF006256, Active; no enforcement actions reported (only CPAverify record for the entity)", "checked": "2026-10-23" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Neil Gonsalves & Associates LLC, dba AARC-360 (not in remediation)", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: AARC-360", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: AARC-360 (recognized Feb 5, 2025)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: AARC-360", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Alpharetta, Georgia assurance and compliance firm offering SOC 1 and SOC 2 reports, PCI DSS, HITRUST and FedRAMP assessments.", "sources": [ "https://www.aarc-360.com", "https://www.aarc-360.com/contact-us/", "https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Neil%20Gonsalves%20%26%20Associates", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.fedramp.gov/marketplace/assessors/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-23", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "AARC-360" } ] }, { "name": "Anthony Timbers", "slug": "anthony-timbers", "website": "https://anthonytimbers.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Fredericksburg" } ], "frameworks": [ "PCI DSS", "FedRAMP", "CMMC" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Anthony Timbers LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Anthony Timbers LLC (recognized May 9, 2025)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Anthony Timbers LLC (Fredericksburg, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Fredericksburg, Virginia assessment firm listed as a FedRAMP 3PAO, CMMC C3PAO and PCI QSA.", "sources": [ "https://anthonytimbers.com", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Databrackets", "slug": "databrackets", "website": "https://databrackets.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Cary" } ], "frameworks": [ "FedRAMP", "CMMC" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Databrackets (recognized Apr 17, 2025)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Sahaa Solutions, LLC (website databrackets.com) (Cary, NC); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cary, North Carolina compliance assessment firm listed as a FedRAMP 3PAO and, through Sahaa Solutions, LLC, as a CMMC C3PAO.", "sources": [ "https://databrackets.com", "https://databrackets.com/contact-us/", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sera Brynn", "slug": "sera-brynn", "website": "https://serabrynn.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "Plano" }, { "country": "US", "state": "VA", "city": "Norfolk" }, { "country": "US", "state": "DC", "city": "Washington" } ], "frameworks": [ "FedRAMP", "CMMC", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Sera Brynn, LLC (recognized Jul 18, 2017)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: SERA BRYNN LLC (Plano, TX); active and in good standing", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Sera Brynn", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Cybersecurity assessment firm with offices listed in Plano, Norfolk and Washington, DC; listed as a FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://serabrynn.com", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Sera Brynn" } ] }, { "name": "First Information Technology Services (FITS)", "slug": "first-information-technology-services", "website": "https://www.firstinfotech.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Arlington" }, { "country": "US", "state": "WA", "city": "Bellevue" } ], "frameworks": [ "FedRAMP", "CMMC" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: First Information Technology Services, Inc. (recognized Aug 1, 2016)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: First Information Technology Services (Arlington, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Arlington, Virginia information security and compliance firm listed as a FedRAMP 3PAO and CMMC C3PAO.", "sources": [ "https://www.firstinfotech.com", "https://www.firstinfotech.com/contact", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "COACT", "slug": "coact", "website": "https://coact.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Columbia" } ], "frameworks": [ "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: COACT, Inc. (recognized Sep 9, 2016)", "checked": "2026-10-20" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: COACT", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Columbia, Maryland cybersecurity firm listed as a FedRAMP 3PAO, offering FISMA, FedRAMP and NIST SP 800-171 compliance services.", "sources": [ "https://coact.com", "https://coact.com/contact/", "https://www.fedramp.gov/marketplace/assessors/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "COACT" } ] }, { "name": "Ignyte Assurance", "slug": "ignyte-assurance", "website": "https://ignyteassurance.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Centerville" } ], "frameworks": [ "PCI DSS", "FedRAMP", "CMMC" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Ignyte Assurance LLC (not in remediation)", "checked": "2026-10-20" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Ignyte Platform Inc. (recognized May 18, 2022)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Ignyte Platform Inc. dba Ignyte Federal (Centerville, OH); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Centerville, Ohio assessment firm; the Ignyte entities are listed as a FedRAMP 3PAO, CMMC C3PAO and PCI QSA.", "sources": [ "https://ignyteassurance.com", "https://www.ignyteplatform.com", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://www.fedramp.gov/marketplace/assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Edwards Performance Solutions", "slug": "edwards-performance-solutions", "website": "https://edwps.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Columbia" } ], "frameworks": [ "HITRUST", "CMMC" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Edwards Performance Solutions", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Edwards Performance Solutions (Columbia, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Columbia, Maryland firm listed as a HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://edwps.com", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ecfirst", "slug": "ecfirst", "website": "https://ecfirst.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IA", "city": "Waukee" } ], "frameworks": [ "HITRUST", "CMMC" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: ecfirst", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: ecfirst (Waukee, IA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Waukee, Iowa compliance and cybersecurity firm listed as a HITRUST External Assessor and CMMC C3PAO.", "sources": [ "https://ecfirst.com", "https://hitrustalliance.net/find-an-external-assessor", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RSI Security", "slug": "rsi-security", "website": "https://www.rsisecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "Southlake" } ], "frameworks": [ "HITRUST", "PCI DSS", "CMMC" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: RSI Security", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: RSI Systems Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: RSI Systems, Inc. (Southlake, TX); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Southlake, Texas cybersecurity compliance firm listed as a HITRUST External Assessor, PCI QSA and CMMC C3PAO.", "sources": [ "https://www.rsisecurity.com", "https://www.rsisecurity.com/contact/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Meditology Services", "slug": "meditology-services", "website": "https://www.meditologyservices.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Meditology Services", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Clifford D. Baker, LLC, dba Meditology Assurance (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Atlanta, Georgia healthcare-focused risk and compliance firm listed as a HITRUST External Assessor and PCI QSA.", "sources": [ "https://www.meditologyservices.com", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Formos Consulting", "slug": "formos-consulting", "website": "https://www.formosconsulting.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Brentwood" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Formos Consulting", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Formos Consulting, LLC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Brentwood, Tennessee consulting firm listed as a HITRUST External Assessor and PCI QSA.", "sources": [ "https://www.formosconsulting.com", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Urbane Security", "slug": "urbane-security", "website": "https://urbanesecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Urbane Security", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Urbane Security (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chicago-headquartered security firm listed as a HITRUST External Assessor and PCI QSA.", "sources": [ "https://urbanesecurity.com", "https://urbanesecurity.com/contact/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "HALOCK Security Labs", "slug": "halock-security-labs", "website": "https://www.halock.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Schaumburg" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: HALOCK Security Labs (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Schaumburg, Illinois information security firm listed as a PCI QSA.", "sources": [ "https://www.halock.com", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Compass IT Compliance", "slug": "compass-it-compliance", "website": "https://www.compassitc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "RI", "city": "North Providence" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Compass IT Compliance, LLC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "North Providence, Rhode Island IT security and compliance firm listed as a PCI QSA.", "sources": [ "https://www.compassitc.com", "https://www.compassitc.com/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Trustnet", "slug": "trustnet", "website": "https://trustnetinc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Trustnet (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Atlanta, Georgia cybersecurity and compliance firm listed as a PCI QSA.", "sources": [ "https://trustnetinc.com", "https://trustnetinc.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intersec Worldwide", "slug": "intersec-worldwide", "website": "https://www.intersecworldwide.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Newport Beach" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Intersec Worldwide (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Newport Beach, California information security firm listed as a PCI QSA.", "sources": [ "https://www.intersecworldwide.com", "https://www.intersecworldwide.com/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CohnReznick", "slug": "cohnreznick", "website": "https://www.cohnreznick.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Tysons" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: CohnReznick Advisory LLC (Tysons, VA); active and in good standing", "checked": "2026-10-20" }, { "registry": "CPAverify (NASBA) - VA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=CohnReznick", "status_text": "COHNREZNICK LLP - VA firm license 134194, Active; all-jurisdiction CPAverify scan shows no enforcement actions on any row", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Accounting and advisory firm whose advisory affiliate is listed as a CMMC C3PAO (Tysons, Virginia).", "sources": [ "https://www.cohnreznick.com", "https://cyberab.org/Catalog", "https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=CohnReznick" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Endava", "slug": "endava", "website": "https://www.endava.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: Endava LTD; place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Technology services and software engineering company (London office from its contact page); its UK entity is listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://www.endava.com/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/05722669", "https://find-and-update.company-information.service.gov.uk/company/03919935" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Capgemini UK", "slug": "capgemini-uk", "website": "https://www.capgemini.com/gb-en/", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: Capgemini UK Plc (previous name: Information Risk Management (IRM)); place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK business of the Capgemini consulting and technology services group (London office from its UK contact page); Capgemini UK Plc is listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://www.capgemini.com/gb-en/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/00943935" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BT", "slug": "bt", "website": "https://www.bt.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: BT Plc.; place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK telecommunications and IT services company (London address from business.bt.com); listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://business.bt.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/01800000" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RedSecLabs", "slug": "redseclabs", "website": "https://www.redseclabs.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: REDSECLABS LIMITED; place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "London-based cybersecurity consultancy offering penetration testing and PCI DSS assessment; listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://www.redseclabs.com/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/14885288" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "1 Cyber Valley", "slug": "1-cyber-valley", "website": "https://www.onecybervalley.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: 1 CYBER VALLEY LIMITED; place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Cybersecurity consultancy offering PCI DSS QSA assessments, PCI PIN advisory and managed security services (London address from its contact page); listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://www.onecybervalley.com/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/13095603" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sovereign Secure", "slug": "sovereign-secure", "website": "https://sovereignsecure.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Accrington" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: Sovereign Secure Ltd.; place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Security and compliance firm established in 2012 offering PCI DSS assessment, security testing and ISO 27001 services; UK office in Accrington per its contact page; listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://sovereignsecure.co.uk/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/08334453" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Data Protection People", "slug": "data-protection-people", "website": "https://www.dataprotectionpeople.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Leeds" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: Data Protection People Limited (dba Data Security People); place of business includes UK; not in remediation", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Data protection and cyber security consultancy based in Leeds; listed by the PCI SSC as a Qualified Security Assessor company.", "sources": [ "https://www.dataprotectionpeople.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://find-and-update.company-information.service.gov.uk/company/09706626" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AFNOR UK", "slug": "afnor-uk", "website": "https://international.afnor.com/en/our-countries/united-kingdom/", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Swindon" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0022/ManagementSystems", "status_text": "UKAS accredited certification body no. 0022 (AFNOR UK Limited); schedule lists ISO/IEC 27001:2022 (issue 108, 6 Oct 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK certification body of the French AFNOR group (Swindon address on its site and UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://international.afnor.com/en/our-countries/united-kingdom/", "https://www.ukas.com/download-schedule/0022/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/02698859" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "World Certification Services", "slug": "world-certification-services", "website": "https://www.world-cert.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Liverpool" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0060/ManagementSystems", "status_text": "UKAS accredited certification body no. 0060 (World Certification Services Limited); schedule lists ISO/IEC 27001:2022 (issue 061, 31 Oct 2025)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Management systems certification body with its head office in Liverpool; UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.world-cert.co.uk", "https://www.ukas.com/download-schedule/0060/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/02894575" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV UK", "slug": "tuv-uk", "website": "https://www.tuv-nord.com/uk/en/", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Croydon" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/0065/ManagementSystems", "status_text": "UKAS accredited certification body no. 0065 (TUV UK Limited); schedule lists ISO/IEC 27001:2022 and ISO/IEC 42001:2023 (issue 059, 8 Jun 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK certification body of the TÜV NORD group (Croydon address on its site); UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://www.tuv-nord.com/uk/en/", "https://www.ukas.com/download-schedule/0065/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/01461331" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RA Cert", "slug": "ra-cert", "website": "https://racert.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/10720/ManagementSystems", "status_text": "UKAS accredited certification body no. 10720 (RA Cert Ltd); schedule lists ISO/IEC 27001:2022 (issue 008, 9 Apr 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "London-based certification body; UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://racert.com", "https://www.ukas.com/download-schedule/10720/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/14679031" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "3core2 Certification", "slug": "3core2-certification", "website": "https://www.3core2.co.uk", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Warrington" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/20271/ManagementSystems", "status_text": "UKAS accredited certification body no. 20271 (3Core2 Certification Limited); schedule lists ISO/IEC 27001:2022 (issue 014, 3 Jul 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "remote_audits": true, "summary": "Management systems certification body in Warrington offering remote and onsite audits; UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.3core2.co.uk", "https://www.ukas.com/download-schedule/20271/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/12004687" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CFE Certification", "slug": "cfe-certification", "website": "https://cfecert.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/20382/ManagementSystems", "status_text": "UKAS accredited certification body no. 20382 (CFE Certification Limited); schedule lists ISO/IEC 27001:2022 (issue 006, 11 Feb 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Certification and training body established in London in 2015; UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://cfecert.com", "https://www.ukas.com/download-schedule/20382/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/11448132" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Tempo Audits", "slug": "tempo-audits", "website": "https://www.tempoaudits.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Bristol" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/29621/ManagementSystems", "status_text": "UKAS accredited certification body no. 29621 (Tempo Audits Limited); schedule lists ISO/IEC 27001:2022 (issue 002, 31 Oct 2025)", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Audit body focused on ISO 27001 certification for technology companies (Bristol address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.tempoaudits.com", "https://www.ukas.com/download-schedule/29621/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/15419274", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Altus Certification", "slug": "altus-certification", "website": "https://www.altuscert.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Cannock" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/30812/ManagementSystems", "status_text": "UKAS accredited certification body no. 30812 (Altus Certification Limited); schedule lists ISO/IEC 27001:2022 (issue 002, 7 Oct 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "UK management systems certification body (Cannock address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.altuscert.com", "https://www.ukas.com/download-schedule/30812/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/15863537" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "eCOGRA", "slug": "ecogra", "website": "https://ecogra.org", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/4656/ManagementSystems", "status_text": "UKAS accredited certification body no. 4656 (eCOGRA Limited trading as eCOGRA); schedule lists ISO/IEC 27001:2022 (issue 011, 31 Oct 2025)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Testing and certification organisation focused on online gambling products (London address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://ecogra.org", "https://www.ukas.com/download-schedule/4656/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/04690117" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Approachable Certification", "slug": "approachable-certification", "website": "https://www.approachable.uk.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Denton" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/8320/ManagementSystems", "status_text": "UKAS accredited certification body no. 8320 (Approachable Certification Ltd); schedule lists ISO/IEC 27001:2022 and Privacy Information Management System ISO/IEC 27701:2019 (issue 020, 11 Dec 2025)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Management systems certification body in Denton, Greater Manchester (UKAS schedule address); UKAS-accredited for ISO/IEC 27001 and ISO/IEC 27701 certification.", "sources": [ "https://www.approachable.uk.com", "https://www.ukas.com/download-schedule/8320/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/08713893" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ForeFront Certification", "slug": "forefront-certification", "website": "https://ffcert.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Bromsgrove" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/8933/ManagementSystems", "status_text": "UKAS accredited certification body no. 8933 (Forefront Certification Limited (FFC)); schedule lists ISO/IEC 27001:2022 (issue 033, 24 Apr 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Management systems certification body near Birmingham (Bromsgrove address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://ffcert.com", "https://www.ukas.com/download-schedule/8933/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/09014372" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AUVA Certification", "slug": "auva-certification", "website": "https://www.auvacertification.com", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "Witham" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "UKAS - accredited certification bodies", "registry_url": "https://www.ukas.com/download-schedule/9963/ManagementSystems", "status_text": "UKAS accredited certification body no. 9963 (AUVA Certification Limited); schedule lists ISO/IEC 27001:2022 (issue 017, 23 Jun 2026)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Management systems certification body (Witham, Essex address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.auvacertification.com", "https://www.ukas.com/download-schedule/9963/ManagementSystems", "https://find-and-update.company-information.service.gov.uk/company/10553452" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Allied Boston Consultants", "slug": "allied-boston-consultants", "website": "https://www.alliedboston.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Allied Boston Consultants India Pvt. Ltd. (Noida)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-based consultancy listed as a CERT-In empanelled information-security auditor.", "sources": [ "https://www.alliedboston.com", "https://www.alliedboston.com/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Anzen Technologies", "slug": "anzen-technologies", "website": "https://anzentech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Anzen Technologies Pvt. Ltd. (Vashi, Navi Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Navi Mumbai-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://anzentech.com", "https://anzentech.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ANA Cyber Forensic", "slug": "ana-cyber-forensic", "website": "https://www.anacyber.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ANA Cyber Forensic Private Limited (Pune)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pune-based cybersecurity and digital forensics firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.anacyber.com", "https://www.anacyber.com/", "https://www.anacyber.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Arridae Infosec", "slug": "arridae-infosec", "website": "https://www.arridae.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Arridae Infosec Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.arridae.com", "https://www.arridae.com/", "https://www.arridae.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Ameya Cyber Risk Solutions", "slug": "ameya-cyber-risk-solutions", "website": "https://ameyacrs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Ameya Cyber Risk Solutions Pvt. Ltd. (Anna Nagar, Chennai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chennai-based cyber risk and compliance consultancy listed as a CERT-In empanelled auditor.", "sources": [ "https://ameyacrs.com", "https://ameyacrs.com/", "https://ameyacrs.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Codec Networks", "slug": "codec-networks", "website": "https://www.codecnetworks.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Codec Networks Pvt. Ltd. (New Delhi)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "New Delhi-based security audit and training firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.codecnetworks.com", "https://www.codecnetworks.com/", "https://www.codecnetworks.com/404.php", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberNerds Solutions", "slug": "cybernerds-solutions", "website": "https://www.cybernerds.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Thanjavur" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Cybernerds Solutions Private Limited (Thanjavur)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Thanjavur-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.cybernerds.in", "https://www.cybernerds.in/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Dr CBS Cyber Security Services", "slug": "dr-cbs-cyber-security-services", "website": "https://drcbscyber.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Rajasthan", "city": "Jaipur" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Dr CBS Cyber Security Services LLP (Jaipur)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Jaipur-based cybersecurity services firm listed as a CERT-In empanelled auditor.", "sources": [ "https://drcbscyber.com", "https://drcbscyber.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberNX Technologies", "slug": "cybernx-technologies", "website": "https://www.cybernx.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: CyberNX Technologies Pvt Ltd (Malad, Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based cybersecurity and cloud security firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.cybernx.com", "https://www.cybernx.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cypros Technologies", "slug": "cypros-technologies", "website": "https://cypros.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Cypros Technologies Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://cypros.in", "https://cypros.in/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Certbar Security", "slug": "certbar-security", "website": "https://certbar.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Surat" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Certbar Security Private Limited (Surat)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Surat-headquartered cybersecurity consultancy with a Mumbai office, listed as a CERT-In empanelled auditor.", "sources": [ "https://certbar.com", "https://certbar.com/", "https://certbar.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Darknext", "slug": "darknext", "website": "https://www.darknext.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: DarkNext LLP (Sion, Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.darknext.com", "https://www.darknext.com/", "https://www.darknext.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Innovador Infotech", "slug": "innovador-infotech", "website": "https://www.innovadorinfotech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Lucknow" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Innovador Infotech Private Limited (Lucknow)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Lucknow-based cybersecurity and IT services firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.innovadorinfotech.com", "https://www.innovadorinfotech.com/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intelliroot Technologies", "slug": "intelliroot-technologies", "website": "https://www.intelliroot.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Intelliroot Technologies (OPC) Private Limited (HSR Layout, Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity services firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.intelliroot.com", "https://www.intelliroot.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KCyber Experts", "slug": "kcyber-experts", "website": "https://kcyberexperts.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Nagpur" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: KCyber Experts Pvt. Ltd. (Nagpur)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Nagpur-headquartered cybersecurity and digital forensics firm listed as a CERT-In empanelled auditor.", "sources": [ "https://kcyberexperts.com", "https://kcyberexperts.com/", "https://kcyberexperts.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Levithan Technologies", "slug": "levithan-technologies", "website": "https://www.levithan.tech", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Faridabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Levithan Technologies Private Limited (Faridabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Faridabad-based security testing and compliance firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.levithan.tech", "https://www.levithan.tech/home", "https://www.levithan.tech/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Mirox Cyber Security & Technology", "slug": "mirox-cyber-security-technology", "website": "https://www.miroxindia.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Kerala", "city": "Thiruvananthapuram" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Mirox Cyber Security & Technology Pvt Ltd (Technopark, Thiruvananthapuram)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Thiruvananthapuram-based cybersecurity firm at Technopark, listed as a CERT-In empanelled auditor.", "sources": [ "https://www.miroxindia.com", "https://www.miroxindia.com/", "https://www.miroxindia.com/contact.html", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Macksofy Technologies", "slug": "macksofy-technologies", "website": "https://www.macksofy.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Macksofy Technologies Pvt Ltd (Bandra Kurla Complex, Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-headquartered cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://www.macksofy.com", "https://www.macksofy.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Qseap Infotech", "slug": "qseap-infotech", "website": "https://qseap.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Qseap Infotech Pvt. Ltd. (Mahape, Navi Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Navi Mumbai-based cybersecurity firm with a Bengaluru office, listed as a CERT-In empanelled auditor.", "sources": [ "https://qseap.com", "https://qseap.com/", "https://qseap.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RiskBerg Consulting", "slug": "riskberg-consulting", "website": "https://riskberg.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: RiskBerg Consulting Pvt Ltd (Gurugram)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based cybersecurity consultancy listed as a CERT-In empanelled auditor.", "sources": [ "https://riskberg.com", "https://riskberg.com/", "https://riskberg.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Shieldbyte Infosec", "slug": "shieldbyte-infosec", "website": "https://shieldbyteinfosec.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Shieldbyte Infosec Private Limited (Ghatkopar, Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-headquartered cybersecurity firm listed as a CERT-In empanelled auditor.", "sources": [ "https://shieldbyteinfosec.com", "https://shieldbyteinfosec.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Tribastion Technologies", "slug": "tribastion-technologies", "website": "https://tribastion.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Tribastion Technologies Private Limited (Ahmedabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ahmedabad-based cybersecurity services firm listed as a CERT-In empanelled auditor.", "sources": [ "https://tribastion.com", "https://tribastion.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecurWires", "slug": "securwires", "website": "https://www.securwires.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Thane" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: SecurWires Technologies and Services LLP (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Thane-based information-security firm listed as a PCI DSS Qualified Security Assessor company.", "sources": [ "https://www.securwires.com", "https://www.securwires.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Gravity Innovision", "slug": "gravity-innovision", "website": "https://www.gravityinnovision.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Gravity Innovision Solutions LLP (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based security and compliance firm listed as a PCI DSS Qualified Security Assessor company.", "sources": [ "https://www.gravityinnovision.com", "https://www.gravityinnovision.com/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RiskPro India", "slug": "riskpro-india", "website": "https://www.riskpro.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: RISKPRO INDIA VENTURES PRIVATE LIMITED (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based risk management consultancy listed as a PCI DSS Qualified Security Assessor company.", "sources": [ "https://www.riskpro.in", "https://www.riskpro.in/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Geels Norton", "slug": "geels-norton", "website": "https://www.geelsnorton.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Durham" } ], "frameworks": [ "SOC 1", "SOC 2" ], "accreditations": [ { "registry": "CPAverify (NASBA) - NC board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Geels%20Norton&size=500", "status_text": "GEELS NORTON PLLC - NC firm license 35060, Active; no enforcement actions reported. Also Active with no actions reported: GEELS NORTON LLC WA 50685 and CT CPAP.0005709.", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "CPA firm with its principal place of business in Durham, North Carolina, offering SOC 1 and SOC 2 examinations.", "sources": [ "https://www.geelsnorton.com", "https://www.geelsnorton.com/contact", "https://www.geelsnorton.com/soc2", "https://ald.nasba.org/search/firm/results?firmName=Geels%20Norton&size=500", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RS Assurance & Advisory", "slug": "rs-assurance-and-advisory", "website": "https://rsassure.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "Southlake" } ], "frameworks": [ "SOC 1", "SOC 2" ], "accreditations": [ { "registry": "CPAverify (NASBA) - TX board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=RS%20Assurance&size=500", "status_text": "RS ASSURANCE & ADVISORY PLLC - TX firm license C12194, Issued; no enforcement actions reported", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "CPA firm headquartered in Southlake, Texas, offering SOC 1, SOC 2 and SOC 3 attestations.", "sources": [ "https://rsassure.com", "https://rsassure.com/contact/", "https://rsassure.com/soc1/", "https://rsassure.com/soc2/", "https://ald.nasba.org/search/firm/results?firmName=RS%20Assurance&size=500", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Maloney + Novotny", "slug": "maloney-novotny", "website": "https://www.maloneynovotny.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Cleveland" }, { "country": "US", "state": "OH", "city": "Columbus" }, { "country": "US", "state": "OH", "city": "Canton" }, { "country": "US", "state": "OH", "city": "Elyria" }, { "country": "US", "state": "OH", "city": "Delaware" }, { "country": "US", "state": "FL", "city": "Clearwater" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST" ], "accreditations": [ { "registry": "CPAverify (NASBA) - OH board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Maloney&size=500", "status_text": "MALONEY + NOVOTNY LLC - OH firm license 44114034.PR, Active; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "CPAverify (NASBA) - FL board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Maloney&size=500", "status_text": "MALONEY + NOVOTNY LLC - FL firm license AD66978, Current; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Maloney + Novotny LLC", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Ohio CPA and advisory firm offering SOC 1 and SOC 2 reporting and HITRUST assessments, with offices in Ohio and Florida.", "sources": [ "https://www.maloneynovotny.com", "https://www.maloneynovotny.com/schedule-a-consultation/", "https://www.maloneynovotny.com/our-service/soc-reporting-services/", "https://ald.nasba.org/search/firm/results?firmName=Maloney&size=500", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Parameter Security", "slug": "parameter-security", "website": "https://www.parametersecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MO", "city": "Chesterfield" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Parameter Security (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chesterfield, Missouri security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.parametersecurity.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CampusGuard", "slug": "campusguard", "website": "https://campusguard.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NE", "city": "Lincoln" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CampusGuard LLC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Lincoln, Nebraska security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://campusguard.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "nGuard", "slug": "nguard", "website": "https://nguard.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Charlotte" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: nGuard Inc. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Charlotte, North Carolina security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://nguard.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Contextual Security Solutions", "slug": "contextual-security-solutions", "website": "https://www.contextualsecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Knoxville" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Contextual Security Solutions, LLC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Knoxville, Tennessee security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.contextualsecurity.com/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "FRSecure", "slug": "frsecure", "website": "https://frsecure.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MN", "city": "Edina" }, { "country": "US", "state": "CO", "city": "Lakewood" }, { "country": "US", "state": "MT", "city": "Bozeman" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: FRSecure LLC (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Edina, Minnesota security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://frsecure.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Drummond Group", "slug": "drummond-group", "website": "https://www.drummondgroup.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Durham" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Fortrex, LLC (dba Drummond Group) (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Durham, North Carolina security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.drummondgroup.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Rule4", "slug": "rule4", "website": "https://www.rule4.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CO", "city": "Boulder" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Rule4, Inc. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Boulder, Colorado security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.rule4.com/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "August Schell", "slug": "august-schell", "website": "https://augustschell.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Rockville" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: August Schell Enterprises, Inc. (Rockville, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Rockville, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://augustschell.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Blue Mantle Technology", "slug": "blue-mantle-technology", "website": "https://www.bluemantletech.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Sterling" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Blue Mantle, LLC (DBA Blue Mantle Technology) (Sterling, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Sterling, Virginia firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.bluemantletech.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Boston Government Services", "slug": "boston-government-services", "website": "https://www.bgs-llc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TN", "city": "Oak Ridge" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Boston Government Services, LLC (Oak Ridge, TN); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Oak Ridge, Tennessee government services firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.bgs-llc.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CISEVE", "slug": "ciseve", "website": "https://www.ciseve.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Burlington" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: CISEVE, Inc (Burlington, MA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Burlington, Massachusetts firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.ciseve.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DataSoftNow", "slug": "datasoftnow", "website": "https://www.datasoftnow.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "Melville" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: DataSoftNow, Inc. (Melville, NY); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melville, New York firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.datasoftnow.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IBSS Corp", "slug": "ibss-corp", "website": "https://ibsscorp.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Silver Spring" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: IBSS Corp (Silver Spring, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Silver Spring, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://ibsscorp.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KLC Consulting", "slug": "klc-consulting", "website": "https://klcconsulting.net", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Framingham" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: KLC Consulting, Inc (Framingham, MA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Framingham, Massachusetts firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://klcconsulting.net/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KTL Solutions", "slug": "ktl-solutions", "website": "https://www.ktlsolutions.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Frederick" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: KTL Solutions Inc (Frederick, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Frederick, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.ktlsolutions.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MAD Security", "slug": "mad-security", "website": "https://madsecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "AL", "city": "Huntsville" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: MAD Security (Huntsville, AL); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Huntsville, Alabama firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://madsecurity.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MNS Group", "slug": "mns-group", "website": "https://www.mnsgroup.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Belcamp" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: MNSG Acquisition Company, LLC (Belcamp, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Belcamp, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.mnsgroup.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "OSC Edge", "slug": "osc-edge", "website": "https://oscedge.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Open SAN Consulting, LLC (Atlanta, GA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Atlanta, Georgia firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://oscedge.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Paragon Cyber Solutions", "slug": "paragon-cyber-solutions", "website": "https://paragoncybersolutions.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Paragon Cyber Solutions LLC (Tampa, FL); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Tampa, Florida firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://paragoncybersolutions.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Penacity", "slug": "penacity", "website": "https://www.penacity.us", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Hanover" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Penacity, LLC (Hanover, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Hanover, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.penacity.us/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Resilient IT", "slug": "resilient-it", "website": "https://resilientit.us", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Springfield" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Resilient IT, Inc (Springfield, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Springfield, Virginia firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://resilientit.us/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Securesoft Technologies", "slug": "securesoft-technologies", "website": "https://www.secsofttech.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Greenbelt" }, { "country": "US", "state": "MD", "city": "Baltimore" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Securesoft Technologies LLC (Greenbelt, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Greenbelt, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.secsofttech.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Shellproof", "slug": "shellproof", "website": "https://www.shellproof.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "Greenvale" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Shellproof (Greenvale, NY); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Greenvale, New York firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.shellproof.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Systems Service Enterprises (SSE)", "slug": "systems-service-enterprises-sse", "website": "https://www.sseinc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MO", "city": "St. Louis" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Systems Service Enterprises, Inc. (Saint Louis, MO); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "St. Louis, Missouri IT services firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.sseinc.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TES Consultants", "slug": "tes-consultants", "website": "https://tesconsultants.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "McLean" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: The Enterprise Security Consultants, LLC (McLean, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "McLean, Virginia firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://tesconsultants.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Life Cycle Engineering", "slug": "life-cycle-engineering", "website": "https://www.lce.com", "hq_country": "US", "offices": [ { "country": "US", "state": "SC", "city": "Charleston" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Life Cycle Engineering Inc. (Charleston, SC); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Charleston, South Carolina engineering and consulting firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.lce.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Smithers Quality Assessments", "slug": "smithers-quality-assessments", "website": "https://www.smithers.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Fairlawn" } ], "frameworks": [ "ISO 27001", "CMMC" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Smithers Quality Assessments, Inc. (Ohio) - ISO/IEC 27001 (and others)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Smithers Quality Assessments (Fairlawn, OH); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Fairlawn, Ohio certification body accredited by ANAB for ISO/IEC 27001 certification and listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.smithers.com/industries/aerospace-defense", "https://anabdirectory.remoteauditor.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "EAGLE Certification Group", "slug": "eagle-certification-group", "website": "https://eaglecertificationgroup.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Dayton" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: EAGLE Registrations Inc. (Ohio) - ISO/IEC 27001 (and others)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Dayton, Ohio management system certification body (EAGLE Registrations Inc.) accredited by ANAB for ISO/IEC 27001 certification.", "sources": [ "https://eaglecertificationgroup.com/contact-us/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecureInteli Technologies", "slug": "secureinteli-technologies", "website": "https://secureinteli.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: SecureInteli Technologies Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity firm (formerly Bizcarta Technologies, per its site) listed as a CERT-In empanelled information security auditor.", "sources": [ "https://secureinteli.com/", "https://secureinteli.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecureNexGen", "slug": "securenexgen", "website": "https://securenexgen.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: SecureNexGen LLP (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity and IT compliance consulting firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://securenexgen.com/", "https://securenexgen.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Wings2i IT Solutions", "slug": "wings2i-it-solutions", "website": "https://wings2i.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Wings2i IT Solutions Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based information security, data privacy and security testing firm listed as a CERT-In empanelled auditor.", "sources": [ "https://wings2i.com/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "The Intect", "slug": "the-intect", "website": "https://theintect.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: The Intect (Hion Security Private Limited) (New Delhi)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Offensive security and compliance audit firm (Hion Security Pvt Ltd) with a registered office in New Delhi and a corporate office in Noida; listed as a CERT-In empanelled auditor.", "sources": [ "https://theintect.com/", "https://theintect.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NG Techassurance", "slug": "ng-techassurance", "website": "https://ngtech.co.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Surat" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: NG Techassurance Private Limited (Surat)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Surat-based firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://ngtech.co.in/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Saptang Labs", "slug": "saptang-labs", "website": "https://saptanglabs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Saptang Labs Private Limited (Chennai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Chennai-based threat monitoring and cybersecurity company listed as a CERT-In empanelled information security auditor.", "sources": [ "https://saptanglabs.com/", "https://saptanglabs.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Digital Age Strategies", "slug": "digital-age-strategies", "website": "https://digitalage.co.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Digital Age Strategies Pvt. Ltd (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://digitalage.co.in/", "https://digitalage.co.in/contact.html", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Globals ITES", "slug": "globals-ites", "website": "https://www.globalsinc.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Globals ITES Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-headquartered IT services company listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.globalsinc.com/", "https://www.globalsinc.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DigiFortex Technologies", "slug": "digifortex-technologies", "website": "https://www.digifortex.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: DigiFortex Technologies Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity company (India registered office in Bengaluru; its site also lists a US-registered affiliate) listed as a CERT-In empanelled auditor.", "sources": [ "https://www.digifortex.com/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IEM Labs", "slug": "iem-labs", "website": "https://iemlabs.com", "hq_country": "India", "offices": [ { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: IEMA Research & Development Private Limited (Kolkata)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Kolkata-based cybersecurity company (IEMLabs brand of IEMA Research & Development Pvt Ltd) with a Bengaluru office; listed as a CERT-In empanelled auditor.", "sources": [ "https://iemlabs.com/", "https://iemlabs.com/contact-us/", "https://iemlabs.com/about-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Marven Data Systems", "slug": "marven-data-systems", "website": "https://mdsinc.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Telangana", "city": "Hyderabad" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Marven Data Systems Private Limited (Hyderabad)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Hyderabad-based cybersecurity firm with a Bengaluru office; listed as a CERT-In empanelled information security auditor.", "sources": [ "https://mdsinc.in/", "https://mdsinc.in/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Matrix3D Infocom", "slug": "matrix3d-infocom", "website": "https://www.matrix3d.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Matrix3D Infocom Private Ltd (Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-headquartered company listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.matrix3d.com/", "https://www.matrix3d.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Netrika Consulting", "slug": "netrika-consulting", "website": "https://www.netrika.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Netrika Consulting India Pvt. Ltd. (Gurugram)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gurugram-based risk and security consulting firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.netrika.com/", "https://www.netrika.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Risk Quotient Consultancy", "slug": "risk-quotient-consultancy", "website": "https://rqsolutions.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Risk Quotient Consultancy Private Limited (Navi Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Navi Mumbai-based cybersecurity, risk and compliance consultancy (RQ Solutions; described on its site as a Cygeniq company) listed as a CERT-In empanelled auditor.", "sources": [ "https://rqsolutions.com/", "https://rqsolutions.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "QOS Technology", "slug": "qos-technology", "website": "https://www.qostechnology.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: QOS Technology Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based security solutions and services company listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.qostechnology.in/", "https://www.qostechnology.in/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Imperium Solutions", "slug": "imperium-solutions", "website": "https://imperiumsolution.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Thane" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Imperium Solutions (Thane)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Thane-based information security, privacy and risk consulting firm listed as a CERT-In empanelled auditor.", "sources": [ "https://imperiumsolution.com/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Innspark Solutions", "slug": "innspark-solutions", "website": "https://www.innspark.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Kerala", "city": "Kollam" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Innspark Solutions Private Limited (Kollam)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Kollam-based deeptech and cybersecurity company listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.innspark.in/", "https://www.innspark.in/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Suma Soft", "slug": "suma-soft", "website": "https://www.sumasoft.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Suma Soft Private Limited (Pune)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Pune-based IT services company listed as a CERT-In empanelled information security auditor.", "sources": [ "https://www.sumasoft.com/", "https://www.sumasoft.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "9USRcraft", "slug": "9usrcraft", "website": "https://9usrcraft.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: 9USRcraft (Navi Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Navi Mumbai-based cloud security and cybersecurity firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://9usrcraft.com/", "https://9usrcraft.com/contact.html", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ANB Solutions", "slug": "anb-solutions", "website": "https://anbglobal.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ANB Solutions Private Limited (Mumbai)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Mumbai-based risk management and advisory firm with a Delhi branch office; listed as a CERT-In empanelled information security auditor.", "sources": [ "https://anbglobal.com/", "https://anbglobal.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AuthenticOne Cybersecurity", "slug": "authenticone-cybersecurity", "website": "https://authenticone.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: AuthenticOne Cybersecurity Private Limited (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity strategy, governance and advisory firm listed as a CERT-In empanelled auditor.", "sources": [ "https://authenticone.com/", "https://authenticone.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Phoenix TechnoCyber", "slug": "phoenix-technocyber", "website": "https://p-technocyber.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Gandhinagar" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Phoenix TechnoCyber (Gandhinagar)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gandhinagar-based cybersecurity firm listed as a CERT-In empanelled information security auditor.", "sources": [ "https://p-technocyber.com/", "https://p-technocyber.com/contact-us.aspx", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ARM Innovations", "slug": "arm-innovations", "website": "https://arm-innovations.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "India", "state": "Delhi", "city": "Delhi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ARM Innovations Private Limited (Noida)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Noida-headquartered cybersecurity and framework audit firm with a Delhi office; listed as a CERT-In empanelled auditor.", "sources": [ "https://arm-innovations.com/", "https://arm-innovations.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "iSecurion Technology & Consulting", "slug": "isecurion-technology-consulting", "website": "https://isecurion.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ISECURION Technology & Consulting Pvt Ltd (Bengaluru)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Bengaluru-based cybersecurity consulting firm with offices in Kolkata and Mumbai; listed as a CERT-In empanelled information security auditor.", "sources": [ "https://isecurion.com/", "https://isecurion.com/contact-us.html", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-20", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AGES Systems Gelderfarenit", "slug": "ages-systems-gelderfarenit", "website": "https://ages-sg.com", "hq_country": "Singapore", "offices": [ { "country": "Singapore", "city": "Singapore" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: AGES Systems Gelderfarenit PTE LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Singapore-based security audit and assessment firm; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://ages-sg.com", "https://ages-sg.com/Contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Al Ejabi InfoSec", "slug": "al-ejabi-infosec", "website": "https://www.ejabi-infosec.com", "hq_country": "UAE", "offices": [ { "country": "UAE", "state": "Dubai", "city": "Dubai" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: AL EJABI AUDITING, REVIEWING & TESTING CYBER RISKS CO. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Dubai-headquartered cybersecurity audit firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.ejabi-infosec.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ArCybr", "slug": "arcybr", "website": "https://www.arcybr.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Aberdeen" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Arcybr (Aberdeen, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Aberdeen, Maryland CMMC assessment firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.arcybr.com/", "https://www.arcybr.com/about", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Athena-Dfenz", "slug": "athena-dfenz", "website": "https://www.athena-dfenz.com", "hq_country": "Singapore", "offices": [ { "country": "Singapore", "city": "Singapore" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ATHENA-DFENZ PRIVATE LIMITED (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Singapore-based payment security and PCI assessment firm; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.athena-dfenz.com", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BlueOrange Compliance", "slug": "blueorange-compliance", "website": "https://www.blueorangecompliance.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Dublin" } ], "frameworks": [ "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: BlueOrange Compliance", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Dublin, Ohio healthcare security and compliance firm listed as a HITRUST External Assessor; offers HIPAA risk assessments.", "sources": [ "https://www.blueorangecompliance.com/", "https://www.blueorangecompliance.com/contact-us-2/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "C.H. Guernsey & Company", "slug": "c-h-guernsey-and-company", "website": "https://guernsey.us", "hq_country": "US", "offices": [ { "country": "US", "state": "OK", "city": "Oklahoma City" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: C.H. Guernsey & Company (Oklahoma City, OK); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Oklahoma City, Oklahoma engineering and consulting firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://guernsey.us/cybersecurity-and-cmmc/cmmc/", "https://guernsey.us/contact-us/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Certifii", "slug": "certifii", "website": "https://certifii.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Queensland", "city": "Brisbane" }, { "country": "Australia", "state": "South Australia", "city": "Adelaide" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "Western Australia", "city": "Perth" }, { "country": "Australia", "state": "New South Wales", "city": "Sydney" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Certifii Pty Ltd trading as Certifi International (Brisbane QLD) - Information Security Management Systems Scheme (ISO/IEC 27001:2022); accreditation valid to 02/06/2031", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Brisbane-headquartered (Brendale) certification body with offices in Adelaide, Melbourne, Perth and Sydney; JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://certifii.com.au", "https://certifii.com.au/contact/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CipherShield", "slug": "ciphershield", "website": "https://ciphershield.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Western Australia", "city": "Perth" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CIPHERSHIELD PTY LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Perth-based security advisory firm offering PCI DSS, ISO 27001 advisory and testing services; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://ciphershield.au", "https://ciphershield.au/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Compass Assurance Services", "slug": "compass-assurance-services", "website": "https://cas.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Queensland", "city": "Tingalpa" }, { "country": "Australia", "state": "New South Wales", "city": "North Ryde" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "South Australia", "city": "Tonsley" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Compass Assurance Services Pty Ltd (Tingalpa QLD) - Information Security Management Systems Scheme (ISO/IEC 27001:2022) and AIMS Scheme (ISO/IEC 42001:2023); accreditation valid to 20/05/2031", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Queensland-based (Tingalpa) certification body with offices in North Ryde, Melbourne and Tonsley; JAS-ANZ accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://cas.com.au", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Complade", "slug": "complade", "website": "https://www.complade.com", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Ontario", "city": "Oshawa" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Standards Council of Canada (SCC) directory of accredited organizations", "registry_url": "https://scc-ccn.ca/accreditation/management-systems/complade-canada-inc", "status_text": "Accredited: Complade Canada Inc. (SCC file 08078), Management Systems - ISMS (ISO/IEC 27001:2022/Amd 1:2024) and CyberSecure Canada; valid to 2027-11-30", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Oshawa, Ontario certification body accredited by the Standards Council of Canada for ISO/IEC 27001 and CyberSecure Canada certification.", "sources": [ "https://www.complade.com/", "https://www.complade.com/about-us", "https://scc-ccn.ca/system/files/2025-12/ASB_SOA_08078-Complade_v5_2025-12-12_EN.pdf", "https://scc-ccn.ca/accreditation/management-systems/complade-canada-inc" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Concordant", "slug": "concordant", "website": "https://concordant.com", "hq_country": "US", "offices": [ { "country": "US", "state": "WY", "city": "Laramie" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Concordant LLC (Laramie, WY); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Laramie, Wyoming cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://concordant.com/", "https://concordant.com/contact", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cyber Security Canada", "slug": "cyber-security-canada", "website": "https://cybersecuritycanada.com", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Ontario", "city": "Petawawa" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Standards Council of Canada (SCC) directory of accredited organizations", "registry_url": "https://scc-ccn.ca/accreditation/management-systems/1415045-ontario-inc-cyber-security-canada", "status_text": "Accredited: 1415045 Ontario Inc. o/a Cyber Security Canada (SCC file 08060), Management Systems - ISMS (ISO/IEC 27001:2022/Amd 1:2024) and CyberSecure Canada; valid to 2030-03-26", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Petawawa, Ontario certification body accredited by the Standards Council of Canada for ISO/IEC 27001 and CyberSecure Canada certification.", "sources": [ "https://cybersecuritycanada.com/contact/", "https://cybersecuritycanada.com/about-us/", "https://scc-ccn.ca/system/files/2026-05/ASB_SOA_08060_v5_2026-05-04_EN.pdf", "https://scc-ccn.ca/accreditation/management-systems/1415045-ontario-inc-cyber-security-canada" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberCX", "slug": "cybercx", "website": "https://cybercx.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Queensland", "city": "Brisbane" }, { "country": "Australia", "state": "South Australia", "city": "Adelaide" }, { "country": "Australia", "state": "Western Australia", "city": "Perth" }, { "country": "Australia", "state": "Australian Capital Territory", "city": "Canberra" }, { "country": "Australia", "state": "Northern Territory", "city": "Darwin" }, { "country": "Australia", "state": "Tasmania", "city": "Hobart" }, { "country": "New Zealand", "city": "Auckland" }, { "country": "New Zealand", "city": "Wellington" }, { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CyberCX Pty Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melbourne-headquartered cybersecurity services firm with offices across Australia, New Zealand and London; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://cybercx.com.au", "https://cybercx.com.au/contact-us/", "https://cybercx.com.au/solutions/governance-risk-compliance/pci-dss/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cyberensic", "slug": "cyberensic", "website": "https://cyberensic.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Sydney" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Cyberensic Pty Ltd (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Sydney-based cybersecurity and compliance firm; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://cyberensic.com.au", "https://cyberensic.com.au/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cybernetic Global Intelligence", "slug": "cybernetic-global-intelligence", "website": "https://www.cyberneticgi.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Queensland", "city": "Brisbane" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "New South Wales", "city": "Pymble" }, { "country": "New Zealand", "city": "Wellington" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CYBERNETIC GLOBAL INTELLIGENCE (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Brisbane-headquartered cybersecurity and compliance firm with offices in Melbourne, Pymble (NSW) and Wellington; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.cyberneticgi.com", "https://www.cyberneticgi.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberRx", "slug": "cyberrx", "website": "https://cyber-rx.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Silver Spring" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: CyberRx, Inc. (Silver Spring, MD); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Silver Spring, Maryland cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://cyber-rx.com/", "https://cyber-rx.com/contact-us", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Cybersec Investments", "slug": "cybersec-investments", "website": "https://cybersecinvestments.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Melbourne" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Cybersec Investments (Melbourne, FL); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melbourne, Florida cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://cybersecinvestments.com/", "https://cybersecinvestments.com/contact/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Decrypt Compliance", "slug": "decrypt-compliance", "website": "https://decrypt.cpa", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "San Jose" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "CPAverify (NASBA) - CA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Decrypt&size=500", "status_text": "DECRYPT COMPLIANCE PC - CA firm license COR 9491, Clear; no enforcement actions reported", "checked": "2026-10-20" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Decrypt Compliance", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "San Jose, California CPA firm offering SOC 1 and SOC 2 examinations, listed as a HITRUST External Assessor; offers HIPAA compliance services.", "sources": [ "https://decrypt.cpa/", "https://www.decryptcompliance.com/contact-us/", "https://ald.nasba.org/search/firm/results?firmName=Decrypt&size=500", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DLCS", "slug": "dlcs", "website": "https://www.dlcsi.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Melbourne" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: DLCS International Pty Ltd Trading As DLCS (Melbourne VIC) - Information Security Management Systems Scheme (ISO/IEC 27001:2022); accreditation valid to 16/12/2029", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melbourne-based certification body; JAS-ANZ accredited for ISO/IEC 27001 information security management system certification.", "sources": [ "https://www.dlcsi.com.au", "https://www.dlcsi.com.au/contact", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "dotSec", "slug": "dotsec", "website": "https://www.dotsec.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Queensland", "city": "Brisbane" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: DotSec Pty Ltd (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Brisbane-based cybersecurity firm offering testing, managed security and compliance services including PCI DSS; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.dotsec.com", "https://www.dotsec.com/about-us/", "https://www.dotsec.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ECAAS Certification International", "slug": "ecaas-certification-international", "website": "https://www.ecaas.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "South Australia", "city": "Adelaide" }, { "country": "Singapore", "city": "Singapore" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: ECAAS Pty Ltd t/as ECAAS Certification International (Adelaide SA) - Information Security Management Systems Scheme (ISO/IEC 27001:2022); accreditation valid to 03/04/2028", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Adelaide-headquartered certification body with an office in Singapore; JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.ecaas.com", "https://www.ecaas.com/contact-us", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Eminence Consultancy", "slug": "eminence-consultancy", "website": "https://emcuae.ae", "hq_country": "UAE", "offices": [ { "country": "UAE", "state": "Abu Dhabi", "city": "Abu Dhabi" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: EMINENCE CONSULTANCY - L.L.C - S.P.C (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Abu Dhabi-headquartered assessment and audit firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://emcuae.ae/", "https://emcuae.ae/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Gabriel Registrar", "slug": "gabriel-registrar", "website": "https://www.gabrielregistrar.com", "hq_country": "UAE", "offices": [ { "country": "UAE", "state": "Dubai", "city": "Dubai" }, { "country": "UAE", "state": "Abu Dhabi", "city": "Abu Dhabi" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "EIAC (Emirates International Accreditation Centre) directory", "registry_url": "https://eiac.gov.ae/directory/", "status_text": "Active: Gabriel Registrar Certificate Issuing Services LLC, CB-ISMS-079 (ISMS, ISO/IEC 27001); initial accreditation Feb 07, 2018, valid since Mar 18, 2026", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Dubai-based certification body accredited by EIAC for ISO/IEC 27001 certification, with an Abu Dhabi office.", "sources": [ "https://www.gabrielregistrar.com/contactuae.php", "https://eiac.gov.ae/en/directory-details/?tc=FSGAIVddbSZFLXWNih7HJ4aUmhrJEv17409498691740949869&ID=923", "https://eiac.gov.ae/directory/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Global Compliance Certification", "slug": "global-compliance-certification", "website": "https://gccertification.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "North Sydney" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Global Compliance Certification Pty Ltd (North Sydney NSW) - Information Security Management Systems Scheme (ISO/IEC 27001:2022) and AIMS Scheme (ISO/IEC 42001:2023); accreditation valid to 08/09/2027", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "North Sydney-headquartered certification body with a Melbourne office; JAS-ANZ accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://gccertification.com", "https://register.jasanz.org/accredited-bodies", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Global-Mark", "slug": "global-mark", "website": "https://www.global-mark.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "North Ryde" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Global-Mark Pty Ltd (North Ryde NSW) - Information Security Management Systems Scheme (ISO/IEC 27001:2022); accreditation valid to 19/03/2031", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "North Ryde (NSW) certification body covering management system and product certification; JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.global-mark.com.au", "https://www.global-mark.com.au/contact/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Gray Analytics", "slug": "gray-analytics", "website": "https://grayanalytics.com", "hq_country": "US", "offices": [ { "country": "US", "state": "AL", "city": "Huntsville" }, { "country": "US", "state": "CA", "city": "Glendale" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Gray Analytics Inc. (Huntsville, AL); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Huntsville, Alabama cybersecurity and IT firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://grayanalytics.com/", "https://grayanalytics.com/contact/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "H2L Solutions", "slug": "h2l-solutions", "website": "https://www.h2lsolutions.com", "hq_country": "US", "offices": [ { "country": "US", "state": "AL", "city": "Huntsville" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: H2L Solutions, Inc. (Huntsville, AL); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Huntsville, Alabama cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.h2lsolutions.com/", "https://www.h2lsolutions.com/contact", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Hive Systems Defense Solutions", "slug": "hive-systems-defense-solutions", "website": "https://www.hivesystems.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Richmond" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Hive Systems Defense Solutions (Richmond, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Richmond, Virginia cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.hivesystems.com/c3pao", "https://www.hivesystems.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Integrity360", "slug": "integrity360", "website": "https://www.integrity360.com", "hq_country": "Ireland", "offices": [ { "country": "Ireland", "state": "Dublin", "city": "Dublin" }, { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: INTEGRITY360 EUROPE LIMITED (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Dublin-headquartered cybersecurity services firm listed as a PCI Qualified Security Assessor (QSA) company, with a London office.", "sources": [ "https://www.integrity360.com/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intercert", "slug": "intercert", "website": "https://www.intercert.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "The Woodlands" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Intercert", "checked": "2026-10-20" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: INTERCERT INC. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "The Woodlands, Texas audit and certification firm listed as a HITRUST External Assessor and a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.intercert.com/", "https://www.intercert.com/contactus", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intraprise Health", "slug": "intraprise-health", "website": "https://intraprisehealth.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Reston" } ], "frameworks": [ "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Intraprise Health", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Reston, Virginia healthcare cybersecurity firm listed as a HITRUST External Assessor; offers HIPAA security and privacy assessments.", "sources": [ "https://intraprisehealth.com/", "https://intraprisehealth.com/contact/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KNC Strategic Services", "slug": "knc-strategic-services", "website": "https://www.kncss.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Carlsbad" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: KNC Strategic Services (Carlsbad, CA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Carlsbad, California cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.kncss.com/", "https://www.kncss.com/contact", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ManageIT Security", "slug": "manageit-security", "website": "https://manageitsecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Arlington" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: ManageIT Security (Arlington, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Arlington, Virginia CMMC assessment firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://manageitsecurity.com/", "https://manageitsecurity.com/contact", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Meerkat Cyber", "slug": "meerkat-cyber", "website": "https://www.meerkatcyber.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "McLean" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Meerkat Cyber, LLC (McLean, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "McLean, Virginia cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.meerkatcyber.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MHM CPA", "slug": "mhm-cpa", "website": "https://www.mhmcpa.ca", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Alberta", "city": "Calgary" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "Standards Council of Canada (SCC) directory of accredited organizations", "registry_url": "https://scc-ccn.ca/accreditation/management-systems/mhm-advisory-ltd", "status_text": "Accredited: MHM Advisory Ltd. (SCC file 08074), Management Systems - ISMS (ISO/IEC 27001:2022), PIMS (ISO/IEC 27701:2019), AIMS (ISO/IEC 42001:2023); valid to 2027-11-28", "checked": "2026-10-20" }, { "registry": "CPA Alberta - Verify a Professional Accounting Firm", "registry_url": "https://services.cpaalberta.ca/VerifyEntity/Firms/", "status_text": "MHM Professional Corporation, Chartered Professional Accountant (Calgary): Good Standing; registered service areas Audit, Review, Accounting Services; no conditions/restrictions", "checked": "2026-10-20" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" }, { "tool": "Drata", "source_url": "https://drata.com/partners/audit-alliance/directory" } ], "summary": "Calgary, Alberta CPA practice offering SOC 1 and SOC 2 reports through MHM Professional Corporation and ISO/IEC 27001, 27701 and 42001 certification through SCC-accredited MHM Advisory Ltd.", "sources": [ "https://www.mhmcpa.ca/", "https://www.mhmcpa.ca/contact-us", "https://scc-ccn.ca/system/files/2026-03/ASB_SOA_08074_v8_2026-03-30_EN.pdf", "https://scc-ccn.ca/accreditation/management-systems/mhm-advisory-ltd", "https://services.cpaalberta.ca/VerifyEntity/Firms/", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner", "https://drata.com/partners/audit-alliance/directory" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ModoSecurity", "slug": "modosecurity", "website": "https://modosecurity.ca", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Ontario", "city": "Markham" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: (1) Modosecurity Inc. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Markham, Ontario IT security consulting firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://modosecurity.ca/", "https://modosecurity.ca/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Monarch Information Security Consulting", "slug": "monarch-information-security-consulting", "website": "https://monarchisc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "ME", "city": "Portland" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Monarch Information Security Consulting Inc (Portland, ME); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Portland, Maine information security firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://monarchisc.com/", "https://monarchisc.com/contact-us/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MorriSec", "slug": "morrisec", "website": "https://morrisec.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Sydney" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: MORRISEC PTY LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Sydney-based cybersecurity firm offering PCI DSS compliance services; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://morrisec.com.au", "https://morrisec.com.au/contact/", "https://morrisec.com.au/pci-dss-compliance-services/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Obsequentia", "slug": "obsequentia", "website": "https://obsequentia.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "Queensland", "city": "Spring Hill" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Obsequentia Pty Ltd (Sydney NSW) - Information Security Management Systems Scheme (ISO/IEC 27001:2022); accreditation valid to 28/05/2029", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Sydney-headquartered certification body with offices in Melbourne and Spring Hill (Brisbane); JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://obsequentia.com.au", "https://obsequentia.com.au/contact-us/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PCI Consulting Australia", "slug": "pci-consulting-australia", "website": "https://www.pciconsultingaustralia.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Queensland", "city": "Brisbane" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: PCI Consulting Australia PTY, LTD (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melbourne-headquartered PCI DSS consulting and assessment firm with offices in Sydney and Brisbane; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.pciconsultingaustralia.com.au", "https://www.pciconsultingaustralia.com.au/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Peak InfoSec", "slug": "peak-infosec", "website": "https://peakinfosec.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Peak InfoSec LLC (Tampa, FL); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Tampa, Florida cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://peakinfosec.com/", "https://peakinfosec.com/contact/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Referentia Systems", "slug": "referentia-systems", "website": "https://www.referentia.com", "hq_country": "US", "offices": [ { "country": "US", "state": "HI", "city": "Honolulu" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Referentia Systems Incorporated (Honolulu, HI); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Honolulu, Hawaii technology firm (CMMC services under its eResilience division) listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.referentia.com/", "https://www.referentia.com/contact-us", "https://eresilience.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Richter", "slug": "richter", "website": "https://www.richter.ca", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Quebec", "city": "Montreal" }, { "country": "Canada", "state": "Ontario", "city": "Toronto" }, { "country": "Canada", "state": "Alberta", "city": "Calgary" }, { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Richter Inc. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Montreal-based accounting and advisory firm listed as a PCI Qualified Security Assessor (QSA) company, with offices in Toronto, Calgary and Chicago.", "sources": [ "https://www.richter.ca/contact/", "https://www.richter.ca/business-advisory/payment-card-industry/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Rock Solutions", "slug": "rock-solutions", "website": "https://rocksolutions.com.sg", "hq_country": "Singapore", "offices": [ { "country": "Singapore", "city": "Singapore" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Rock Pte. Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Singapore-based firm (Rock Pte Ltd) providing PCI DSS, PIN, 3DS and card production audits, consulting and training; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://rocksolutions.com.sg", "https://rocksolutions.com.sg/contact.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SAV Advisory", "slug": "sav-advisory", "website": "https://savadvisory.com", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Ontario", "city": "Toronto" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Standards Council of Canada (SCC) directory of accredited organizations", "registry_url": "https://scc-ccn.ca/accreditation/management-systems/sav-advisory-inc", "status_text": "Accredited: SAV Advisory Inc. (SCC file 08082), Management Systems - ISMS (ISO/IEC 27001:2022/Amd 1:2024) and CyberSecure Canada; valid to 2028-12-07", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Toronto (North York), Ontario certification body accredited by the Standards Council of Canada for ISO/IEC 27001 and CyberSecure Canada certification.", "sources": [ "https://savadvisory.com/contact-us/", "https://savadvisory.com/about-us/", "https://scc-ccn.ca/system/files/2026-04/ASB_SOA_08082_v5_2026-04-29_EN.pdf", "https://scc-ccn.ca/accreditation/management-systems/sav-advisory-inc" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Secure Logic", "slug": "secure-logic", "website": "https://www.securelogicgroup.net", "hq_country": "Singapore", "offices": [ { "country": "Singapore", "city": "Singapore" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "Malaysia", "city": "Kuala Lumpur" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Secure Logic Pte. Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Singapore-headquartered PCI and payment security firm with offices in Bengaluru and Kuala Lumpur; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.securelogicgroup.net", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecuredNet", "slug": "securednet", "website": "https://www.securednet.com", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Alberta", "city": "Calgary" }, { "country": "Canada", "state": "Ontario", "city": "Toronto" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Secured Net Solutions Inc. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Calgary, Alberta security consultancy listed as a PCI Qualified Security Assessor (QSA) company, with offices in Toronto and Dublin.", "sources": [ "https://www.securednet.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecureStrux", "slug": "securestrux", "website": "https://securestrux.com", "hq_country": "US", "offices": [ { "country": "US", "state": "PA", "city": "Lancaster" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: SecureStrux, LLC (Lancaster, PA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Lancaster, Pennsylvania cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://securestrux.com/", "https://securestrux.com/schedule-meeting/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Security Centric", "slug": "security-centric", "website": "https://www.securitycentric.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Sydney" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Security Centric Pty Ltd (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Sydney-based cybersecurity consulting firm offering compliance services including PCI DSS and ISO 27001 advisory; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.securitycentric.com.au", "https://www.securitycentric.com.au/contact-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sekuro", "slug": "sekuro", "website": "https://sekuro.io", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "Queensland", "city": "Brisbane" }, { "country": "Australia", "state": "Western Australia", "city": "Perth" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Sekuro Pty. Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Australian cybersecurity services firm with offices in Sydney, Melbourne, Brisbane and Perth; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://sekuro.io", "https://sekuro.io/contact-us/", "https://sekuro.io/pci-compliance/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Southpac Certifications", "slug": "southpac-certifications", "website": "https://southpaccertifications.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Queensland", "city": "Burleigh Heads" }, { "country": "Australia", "state": "Western Australia", "city": "Perth" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Southpac Certifications Pty Ltd (Burleigh Heads QLD) - Information Security Management Systems Scheme (ISO/IEC 27001:2022); accreditation valid to 05/12/2028", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Gold Coast (Burleigh Heads) certification body with a Perth office; JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://southpaccertifications.com", "https://southpaccertifications.com/contact-us/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Specialized Security Services (S3)", "slug": "specialized-security-services-s3", "website": "https://www.s3security.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "Plano" } ], "frameworks": [ "PCI DSS", "CMMC" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Specialized Security Services, Inc. (not in remediation)", "checked": "2026-10-20" }, { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Specialized Security Services, Inc. (Plano, TX); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Plano, Texas security firm listed as a PCI Qualified Security Assessor (QSA) company and an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.s3security.com/", "https://www.s3security.com/privacy-policy/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Stratica", "slug": "stratica", "website": "https://www.stratica.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Abbotsford" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Stratica Australia Pty Ltd DBA Stratica (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melbourne-area (Abbotsford) advisory practice focused on PCI DSS compliance; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.stratica.com.au", "https://www.stratica.com.au/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sustainable Certification", "slug": "sustainable-certification", "website": "https://www.sustainablecertification.com.au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Melbourne" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited certification body: Sustainable Certification Pty Ltd (Melbourne VIC) - Information Security Management Systems Scheme (ISO/IEC 27001:2022) and AIMS Scheme (ISO/IEC 42001:2023); accreditation valid to 16/04/2031", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Melbourne-based certification body; JAS-ANZ accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://www.sustainablecertification.com.au", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ThreatIQ", "slug": "threatiq", "website": "https://www.threatiq.io", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Ontario", "city": "Oakville" }, { "country": "US", "state": "FL", "city": "West Palm Beach" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ThreatIQ Inc. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Oakville, Ontario cybersecurity firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.threatiq.io/", "https://www.threatiq.io/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Triskele Labs", "slug": "triskele-labs", "website": "https://www.triskelelabs.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Western Australia", "city": "Perth" }, { "country": "Australia", "state": "Australian Capital Territory", "city": "Canberra" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Triskele Labs (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Australian cybersecurity firm with offices in Melbourne, Sydney, Perth and Canberra; listed as a PCI SSC Qualified Security Assessor company and offers PCI DSS assessments.", "sources": [ "https://www.triskelelabs.com", "https://www.triskelelabs.com/contact", "https://www.triskelelabs.com/regulations-compliance/pci-dss", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Vectra Corporation", "slug": "vectra-corporation", "website": "https://www.vectra-corp.com", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "South Australia", "city": "Adelaide" }, { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "Western Australia", "city": "West Perth" }, { "country": "Singapore", "city": "Singapore" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Vectra Corporation Ltd. (not in remediation)", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Adelaide-headquartered cybersecurity firm with offices in Sydney, Melbourne, West Perth and Singapore; listed as a PCI SSC Qualified Security Assessor company.", "sources": [ "https://www.vectra-corp.com", "https://www.vectra-corp.com/contact/", "https://www.vectra-corp.com/about/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Veritas Assurance", "slug": "veritas-assurance", "website": "https://www.veritasassurance.com", "hq_country": "UAE", "offices": [ { "country": "UAE", "state": "Dubai", "city": "Dubai" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "EIAC (Emirates International Accreditation Centre) directory", "registry_url": "https://eiac.gov.ae/directory/", "status_text": "Active: Veritas System Quality Certificates Issuing LLC, CB-ISMS-099 (ISMS, ISO/IEC 27001); initial ISMS accreditation Mar 18, 2026", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Dubai-based certification body accredited by EIAC for ISO/IEC 27001 certification.", "sources": [ "https://www.veritasassurance.com/contact.php", "https://eiac.gov.ae/en/directory-details/?tc=9UYxVM767msFDmPNErYyFuiRorH7qv17409494701740949470&ID=1063", "https://eiac.gov.ae/directory/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "West Assured", "slug": "west-assured", "website": "https://westassured.ie", "hq_country": "Ireland", "offices": [ { "country": "Ireland", "state": "Galway", "city": "Loughrea" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "INAB (Irish National Accreditation Board) directory - Management Systems Certification", "registry_url": "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/", "status_text": "Accredited: West Assured Solutions Limited t/a West Assured (INAB Reg No 5021), EN ISO/IEC 17021-1 - scope includes ISO/IEC 27001 (assessed with ISO/IEC 27006-1:2024); schedule edition 6, 12/10/2026", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Loughrea, County Galway certification body accredited by INAB for ISO/IEC 27001 certification.", "sources": [ "https://westassured.ie/", "https://www.inab.ie/media/qjyfcttz/5021-sc.pdf", "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Wise Technical Innovations", "slug": "wise-technical-innovations", "website": "https://www.wtinetworks.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Norfolk" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Wise Technical Innovations (Norfolk, VA); active and in good standing", "checked": "2026-10-20" } ], "partner_tools": [], "summary": "Norfolk, Virginia cybersecurity and training firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.wtinetworks.com/", "https://www.wtinetworks.com/contact", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberCrest Compliance", "slug": "cybercrest-compliance", "website": "https://www.cybercrestcompliance.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Encinitas" } ], "frameworks": [ "SOC 2", "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: CyberCrest Compliance", "checked": "2026-10-21" }, { "registry": "CPAverify (NASBA ALD)", "registry_url": "https://ald.nasba.org/search/firm", "status_text": "CYBERCREST CONTROLS RLLP, CA PAR 8215, Clear; none reported to this site by the board (only record)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Encinitas, California compliance firm listed as a HITRUST External Assessor; SOC 2 attestation reports are issued through its licensed CPA firm, CyberCrest Controls RLLP.", "sources": [ "https://www.cybercrestcompliance.com/", "https://www.cybercrestcompliance.com/about-us", "https://hitrustalliance.net/find-an-external-assessor", "https://ald.nasba.org/search/firm/results?firmName=CyberCrest&size=500" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Jacobian Engineering", "slug": "jacobian-engineering", "website": "https://jacobianengineering.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Alameda" } ], "frameworks": [ "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Jacobian Engineering", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Alameda, California IT and compliance firm listed as a HITRUST External Assessor; also offers HIPAA risk assessments.", "sources": [ "https://jacobianengineering.com/", "https://jacobianengineering.com/contact", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Sentinel Blue", "slug": "sentinel-blue", "website": "https://www.sentinelblue.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Warrenton" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Sentinel Blue (Warrenton, VA); active and in good standing", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Warrenton, Virginia cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.sentinelblue.com/", "https://www.sentinelblue.com/contact/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kieri Solutions", "slug": "kieri-solutions", "website": "https://www.kieri.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Woodbine" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Kieri Solutions LLC (Woodbine, MD); active and in good standing", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Woodbine, Maryland cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.kieri.com/", "https://www.kieri.com/about-kieri-solutions/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Digital Beachhead", "slug": "digital-beachhead", "website": "https://www.digitalbeachhead.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CO", "city": "Colorado Springs" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Digital Beachhead (Colorado Springs, CO); active and in good standing", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Colorado Springs, Colorado cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://digitalbeachhead.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "K3DES", "slug": "k3des", "website": "https://k3des.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "Houston" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: K3DES, LLC (not in remediation; PCI DSS v4 assessor)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Houston, Texas payment security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://k3des.com/", "https://k3des.com/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Aurionpro Solutions", "slug": "aurionpro-solutions", "website": "https://www.aurionpro.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s Aurionpro Solution Limited (Navi Mumbai); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Navi Mumbai-based technology company listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://www.aurionpro.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Happiest Minds Technologies", "slug": "happiest-minds-technologies", "website": "https://www.happiestminds.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s Happiest Minds Technologies Limited (Bengaluru); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Bengaluru-based IT services company listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://www.happiestminds.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Net Access India", "slug": "net-access-india", "website": "https://www.netaccess-india.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s NET ACCESS INDIA LIMITED (Chennai); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Chennai-based IT services company listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://www.netaccess-india.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Utthunga Technologies", "slug": "utthunga-technologies", "website": "https://utthunga.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s Utthunga Technologies Private Limited (Bengaluru); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Bengaluru-based industrial automation and engineering company listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://utthunga.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Terasoft Technologies", "slug": "terasoft-technologies", "website": "https://www.terasoft.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Ahmednagar" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s Terasoft Technologies Pvt. Ltd. (Ahmednagar); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Ahmednagar, Maharashtra cybersecurity firm listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://www.terasoft.in/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Swadesh System", "slug": "swadesh-system", "website": "https://www.swadeshsystem.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s SWADESH SYSTEM PVT.LTD. (New Delhi); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "New Delhi-based cybersecurity firm listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://www.swadeshsystem.in/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Inspira Enterprise India", "slug": "inspira-enterprise-india", "website": "https://inspiraenterprise.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditing organisation: M/s Inspira enterprise India Ltd (Mumbai); list dated Oct 5, 2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Mumbai-based cybersecurity services company listed by CERT-In as an empanelled information security auditing organisation.", "sources": [ "https://inspiraenterprise.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Ernst & Young LLP (EY US)", "slug": "ey-us", "website": "https://www.ey.com/en_us", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "CA", "city": "San Francisco" }, { "country": "US", "state": "CA", "city": "Los Angeles" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "TX", "city": "Houston" }, { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "MA", "city": "Boston" }, { "country": "US", "state": "DC", "city": "Washington" }, { "country": "US", "state": "VA", "city": "McLean" }, { "country": "US", "state": "PA", "city": "Philadelphia" }, { "country": "US", "state": "WA", "city": "Seattle" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "FL", "city": "Miami" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Ernst and Young LLP (place of business USA; not in remediation)", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Ernst & Young LLP", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US member firm of the EY global network; listed as a PCI DSS Qualified Security Assessor and a HITRUST External Assessor.", "sources": [ "https://www.ey.com/en_us", "https://www.ey.com/en_us/locations", "https://www.ey.com/content/ey-unified-site/ey-com.office-locations.json?site=ey-com&locale=en_us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Ernst & Young LLP (EY India)", "slug": "ey-india", "website": "https://www.ey.com/en_in", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Haryana", "city": "Gurugram" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "Telangana", "city": "Hyderabad" }, { "country": "India", "state": "Maharashtra", "city": "Pune" }, { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Gujarat", "city": "Ahmedabad" }, { "country": "India", "state": "Kerala", "city": "Kochi" }, { "country": "India", "state": "Uttar Pradesh", "city": "Noida" } ], "frameworks": [ "HITRUST", "CERT-In" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Ernst & Young India", "checked": "2026-10-21" }, { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Empanelled: M/s Ernst & Young LLP (entry no. 76)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Indian member firm of the EY global network; CERT-In empanelled information security auditor and HITRUST External Assessor.", "sources": [ "https://www.ey.com/en_in", "https://www.ey.com/en_in/locations", "https://www.ey.com/content/ey-unified-site/ey-com.office-locations.json?site=ey-com&locale=en_in", "https://hitrustalliance.net/find-an-external-assessor", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "datenschutz cert", "slug": "datenschutz-cert", "website": "https://www.datenschutz-cert.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Bremen", "city": "Bremen" }, { "country": "Germany", "state": "Hesse", "city": "Offenbach am Main" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16077-01-01 / D-ZM-16077-01-02 (datenschutz cert GmbH, Konsul-Smidt-Straße 88a, 28217 Bremen; site Mainstraße 143, 63065 Offenbach am Main); scope annex covers certification to ISO/IEC 27001:2022 and ISO/IEC 27701 extension under ISO/IEC 27006; annex issued 24.04.2025 / 23.10.2024", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Bremen-based certification body with a second accredited site in Offenbach am Main; DAkkS-accredited for ISO/IEC 27001 certification including ISO/IEC 27701 privacy extension.", "sources": [ "https://www.datenschutz-cert.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16077-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "intellcert", "slug": "intellcert", "website": "https://intellcert.com", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Berlin", "city": "Berlin" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-23239-01-01 (intellcert GmbH, Heilmannring 57, 13627 Berlin); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 24.06.2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Berlin certification, inspection and training company; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://intellcert.com/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-23239-01-01.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RSM Certification", "slug": "rsm-certification", "website": "https://www.rsm-certification.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Düsseldorf" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-21371-01-01 (RSM Certification GmbH, Am Wehrhahn 33, 40211 Düsseldorf); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 01.08.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Düsseldorf-based certification body in the RSM network; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.rsm-certification.de/de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-21371-01-01.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DMSZ", "slug": "dmsz", "website": "https://www.dmsz.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Hesse", "city": "Griesheim" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16033-01-04 (DMSZ Deutsche Managementsystem Zertifizierungsgesellschaft mbH, Im Leuschnerpark 1, 64347 Griesheim); scope annex covers certification to ISO/IEC 27001 and ISO 22301 under ISO/IEC 27006; annex issued 12.06.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Griesheim (Hesse) management system certification body; DAkkS-accredited for ISO/IEC 27001 and ISO 22301 certification.", "sources": [ "https://www.dmsz.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16033-01-04.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CEA Certification", "slug": "cea-certification", "website": "https://www.cea-certification.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Hesse", "city": "Kassel" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-17165-01-02 (CEA Certification GmbH, Friedrich-Engels-Straße 26, 34117 Kassel); scope annex covers certification to ISO/IEC 27001 and ISO 22301 under ISO/IEC 27006; annex issued 17.11.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Kassel-based certification body; DAkkS-accredited for ISO/IEC 27001 and ISO 22301 certification.", "sources": [ "https://www.cea-certification.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-17165-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GUTcert", "slug": "gutcert", "website": "https://www.gut-cert.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Berlin", "city": "Berlin" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16003-01-02 (GUT Certifizierungsgesellschaft für Managementsysteme mbH Umweltgutachter, Eichenstraße 3 b, 12435 Berlin); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 13.08.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Berlin-based management system certification body; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.gut-cert.de/de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16003-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DeuZert", "slug": "deuzert", "website": "https://deuzert.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Brandenburg", "city": "Wildau" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16070-01-02 (DeuZert Deutsche Zertifizierung in Bildung und Wirtschaft GmbH, Hochschulring 2, 15745 Wildau); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 15.05.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Wildau (Brandenburg) certification body; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://deuzert.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16070-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ZER-QMS", "slug": "zer-qms", "website": "https://www.zer-qms.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Cologne" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-17431-01-02 (ZER-QMS Zertifizierungsstelle GmbH, Volksgartenstraße 48, 50677 Köln); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 17.12.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cologne-based certification body; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.zer-qms.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-17431-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IFU-CERT", "slug": "ifu-cert", "website": "https://ifu-cert.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Lower Saxony", "city": "Hanover" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16092-01-02 (IFU-CERT GmbH Zertifizierungsgesellschaft und Umweltgutachterorganisation, Prinzenstraße 10 A, 30159 Hannover); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 03.06.2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Hanover-based certification and environmental verification body; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://ifu-cert.de/de", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16092-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DQS", "slug": "dqs", "website": "https://www.dqsglobal.com/de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Hesse", "city": "Frankfurt am Main" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16074-01-02 (DQS GmbH Deutsche Gesellschaft zur Zertifizierung von Managementsystemen, August-Schanz-Straße 21, 60433 Frankfurt am Main); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 30.03.2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Frankfurt-headquartered management system certification group; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.dqsglobal.com/de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16074-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV Hessen", "slug": "tuv-hessen", "website": "https://www.tuev-hessen.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Hesse", "city": "Darmstadt" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-14137-01-03 (TÜV Technische Überwachung Hessen GmbH, Robert-Bosch-Straße 16, 64293 Darmstadt); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 15.05.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Darmstadt-based technical inspection and certification organisation; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.tuev-hessen.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-14137-01-03.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV Saarland Certification", "slug": "tuv-saarland-certification", "website": "https://www.tuev-saar.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Saarland", "city": "Sulzbach" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-21011-01-02 (TÜV Saarland Certification GmbH, Am TÜV 1, 66280 Sulzbach/Saar); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 23.09.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Sulzbach/Saar certification body of the TÜV Saarland group; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.tuev-saar.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-21011-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DEKRA Certification", "slug": "dekra-certification", "website": "https://www.dekra.de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Baden-Württemberg", "city": "Stuttgart" }, { "country": "Netherlands", "state": "Gelderland", "city": "Arnhem" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16029-01-04 (DEKRA Certification GmbH, Handwerkstraße 15, 70565 Stuttgart); scope annex covers certification to ISO/IEC 27001 and ISO 22301 under ISO/IEC 27006; annex issued 01.08.2026", "checked": "2026-10-21" }, { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c013/", "status_text": "Accredited C 013 (DEKRA Certification B.V., Meander 1051, 6825 MJ Arnhem); scope annex covers ISO/IEC 27001 and ISO/IEC 27701; annex valid 26-08-2026 to 01-01-2030", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification arm of the Stuttgart-based DEKRA group with a Dutch certification entity in Arnhem; accredited by DAkkS for ISO/IEC 27001 and ISO 22301 and by RvA for ISO/IEC 27001 and ISO/IEC 27701.", "sources": [ "https://www.dekra.de/de/startseite/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16029-01-04.pdf", "https://www.rva.nl/en/alle-geaccrediteerden/c013/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C013-scn.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV Rheinland", "slug": "tuv-rheinland", "website": "https://www.tuv.com/germany/de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Cologne" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16031-01-04 (TÜV Rheinland Cert GmbH, Am Grauen Stein, 51105 Köln); scope annex covers certification to ISO/IEC 27001 and ISO 22301 under ISO/IEC 27006; annex issued 18.02.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cologne-headquartered testing and certification group; its certification entity TÜV Rheinland Cert GmbH is DAkkS-accredited for ISO/IEC 27001 and ISO 22301.", "sources": [ "https://www.tuv.com/germany/de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16031-01-04.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KPMG Cert GmbH", "slug": "kpmg-cert-gmbh", "website": "https://kpmg.com/de/de.html", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Cologne" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16103-01-02 (KPMG Cert GmbH Umweltgutachterorganisation, Luise-Straus-Ernst-Straße 2, 50679 Köln); scope annex covers certification to ISO/IEC 27001 and ISO 22301 under ISO/IEC 27006; annex issued 04.09.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body of KPMG in Germany, based in Cologne; DAkkS-accredited for ISO/IEC 27001 and ISO 22301 certification.", "sources": [ "https://kpmg.com/de/de.html", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16103-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Deloitte Certification Services GmbH", "slug": "deloitte-certification-services-gmbh", "website": "https://www.deloitte.com/de/de.html", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Düsseldorf" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16108-01-01 (Deloitte Certification Services GmbH, Erna-Scheffler-Straße 2, 40476 Düsseldorf); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 18.09.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body of Deloitte in Germany, based in Düsseldorf; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.deloitte.com/de/de.html", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16108-01-01.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kiwa", "slug": "kiwa", "website": "https://www.kiwa.com/nl/nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Rijswijk" }, { "country": "Germany", "state": "Hamburg", "city": "Hamburg" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c025/", "status_text": "Accredited C 025 (Kiwa Nederland B.V., Sir Winston Churchill-laan 273, 2288 EA Rijswijk); scope annex covers ISO/IEC 27001; annex valid 15-07-2026 to 01-01-2030", "checked": "2026-10-21" }, { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16102-01-03 (Kiwa International Cert GmbH, Grüner Deich 1, 20097 Hamburg); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006; annex issued 14.05.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Testing, inspection and certification group headquartered in Rijswijk, Netherlands, with a German certification entity in Hamburg; accredited by RvA and DAkkS for ISO/IEC 27001 certification.", "sources": [ "https://www.kiwa.com/nl/nl/", "https://www.kiwa.com/de/de/", "https://www.rva.nl/en/alle-geaccrediteerden/c025/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C025-scn.pdf", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16102-01-03.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SRC Security Research & Consulting", "slug": "src-security-research-and-consulting", "website": "https://src-gmbh.de/en/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Bonn" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: SRC Security Research & Consulting GmbH (Germany); place of business includes the listed country; not in remediation; PCI DSS v4 assessor", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Bonn-based IT security consultancy listed by the PCI Security Standards Council as a Qualified Security Assessor company.", "sources": [ "https://src-gmbh.de/en/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Noordbeek", "slug": "noordbeek", "website": "https://noordbeek.com", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Hazerswoude-Rijndijk" } ], "frameworks": [ "ISO 27001", "PCI DSS" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c663/", "status_text": "Accredited C 663 (Noordbeek Certification B.V., Rijndijk 235, 2394 CD Hazerswoude-Rijndijk); scope annex covers ISO/IEC 27001; annex valid 21-05-2026 to 01-06-2030", "checked": "2026-10-21" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: Noordbeek B.V. (Netherlands); place of business includes the listed country; not in remediation; PCI DSS v4 assessor", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Dutch IT audit and certification firm in Hazerswoude-Rijndijk; RvA-accredited for ISO/IEC 27001 certification and listed as a PCI Qualified Security Assessor company.", "sources": [ "https://noordbeek.com/nl/contact", "https://www.rva.nl/en/alle-geaccrediteerden/c663/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C663-scn.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "3angles Certify", "slug": "3angles-certify", "website": "https://3angles.nl", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Hillegom" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c708/", "status_text": "Accredited C 708 (3angles Certify BV, Weerlaan 4B, 2181 HH Hillegom); scope annex covers ISO/IEC 27001; annex valid 29-01-2026 to 01-02-2027", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Hillegom-based certification body; RvA-accredited for ISO/IEC 27001 certification.", "sources": [ "https://3angles.nl/contact/", "https://www.rva.nl/en/alle-geaccrediteerden/c708/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C708-scn.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CERCOMS", "slug": "cercoms", "website": "https://cercoms.nl", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "The Hague" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c714/", "status_text": "Accredited C 714 (Cercoms B.V., Verlengde Tolweg 2C, 2517 JV 's-Gravenhage); scope annex covers ISO/IEC 27001; annex valid 29-01-2026 to 01-02-2030", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "The Hague-based certification body; RvA-accredited for ISO/IEC 27001 certification.", "sources": [ "https://cercoms.nl/en/contact-us/", "https://www.rva.nl/en/alle-geaccrediteerden/c714/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C714-scn.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Fortytwo Security", "slug": "fortytwo-security", "website": "https://www.fortytwo.nl", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Holland", "city": "Amsterdam" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: Fortytwo Security B.V. (Netherlands); place of business includes the listed country; not in remediation; PCI DSS v4 assessor", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Amsterdam-based PCI DSS, cyber security and cloud services firm listed as a PCI Qualified Security Assessor company.", "sources": [ "https://www.fortytwo.nl/contact/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Centre for Development of Advanced Computing (C-DAC)", "slug": "c-dac", "website": "https://www.cdac.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Telangana", "city": "Hyderabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Centre for Development of Advanced Computing (C - DAC) (entry no. 38, Hyderabad)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Scientific society of the Ministry of Electronics and Information Technology (Government of India). Its CERT-In empanelled Hyderabad centre offers VA/PT, security testing and audit services to government and private organisations.", "sources": [ "https://www.cdac.in/index.aspx?id=achieve_cyber_security_forensic", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": true, "listing_tier": "verified", "registry_listings": [] }, { "name": "Deloitte & Touche LLP (Deloitte US)", "slug": "deloitte-us", "website": "https://www.deloitte.com/us/en.html", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "VA", "city": "Arlington" }, { "country": "US", "state": "VA", "city": "McLean" }, { "country": "US", "state": "DC", "city": "Washington" }, { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "MA", "city": "Boston" }, { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "TX", "city": "Houston" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "MI", "city": "Detroit" }, { "country": "US", "state": "CA", "city": "Los Angeles" }, { "country": "US", "state": "CA", "city": "San Francisco" }, { "country": "US", "state": "FL", "city": "Miami" }, { "country": "US", "state": "MN", "city": "Minneapolis" }, { "country": "US", "state": "PA", "city": "Philadelphia" }, { "country": "US", "state": "WA", "city": "Seattle" } ], "frameworks": [ "ISO 27001", "FedRAMP", "HITRUST" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Deloitte & Touche LLP (recognized Apr 27, 2017; Arlington, VA)", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Deloitte & Touche LLP", "checked": "2026-10-21" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: D&T-MS-1845 - Deloitte & Touche LLP (New York); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "US member firm of the Deloitte network. ANAB-accredited ISO/IEC 27001 certification body, FedRAMP-recognized third-party assessor and HITRUST External Assessor.", "sources": [ "https://www.deloitte.com/us/en/offices/us-locations/arlington.html", "https://www.deloitte.com/us/en/offices/us-locations/new-york-prac.html", "https://www.deloitte.com/us/en/offices/us-locations/chicago.html", "https://www.deloitte.com/us/sitemaps/secured/sitemap_us_en.xml", "https://www.fedramp.gov/marketplace/assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Deloitte Touche Tohmatsu India LLP (Deloitte India)", "slug": "deloitte-india", "website": "https://www.deloitte.com/in/en.html", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Pune" }, { "country": "India", "state": "Maharashtra", "city": "Thane" }, { "country": "India", "state": "Haryana", "city": "Gurugram" }, { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "India", "state": "Uttar Pradesh", "city": "Lucknow" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "Tamil Nadu", "city": "Coimbatore" }, { "country": "India", "state": "Telangana", "city": "Hyderabad" }, { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Gujarat", "city": "Ahmedabad" }, { "country": "India", "state": "Kerala", "city": "Kochi" }, { "country": "India", "state": "Odisha", "city": "Bhubaneswar" }, { "country": "India", "state": "Chandigarh", "city": "Chandigarh" }, { "country": "India", "state": "Goa", "city": "Panaji" }, { "country": "India", "state": "Jharkhand", "city": "Jamshedpur" } ], "frameworks": [ "HITRUST", "CERT-In" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Deloitte Touche Tohmatsu India LLP", "checked": "2026-10-21" }, { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Deloitte Touche Tohmatsu India LLP (entry no. 67)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Indian member firm of the Deloitte network. CERT-In empanelled information security auditor and HITRUST External Assessor.", "sources": [ "https://www.deloitte.com/in/en/offices/mumbai.html", "https://www.deloitte.com/in/en/offices/gurugram-dlf-cybercity.html", "https://www.deloitte.com/in/en/offices/Bengaluru.html", "https://www.deloitte.com/in/sitemaps/secured/sitemap_in_en.xml", "https://hitrustalliance.net/find-an-external-assessor", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KPMG LLP (KPMG US)", "slug": "kpmg-us", "website": "https://kpmg.com/us/en.html", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "VA", "city": "McLean" }, { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "MA", "city": "Boston" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "TX", "city": "Houston" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "CA", "city": "Los Angeles" }, { "country": "US", "state": "CA", "city": "San Francisco" }, { "country": "US", "state": "PA", "city": "Philadelphia" }, { "country": "US", "state": "WA", "city": "Seattle" } ], "frameworks": [ "FedRAMP", "PCI DSS" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: KPMG, LLP (recognized Jun 20, 2016; McLean, VA)", "checked": "2026-10-21" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: KPMG LLP (place of business USA, not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US member firm of the KPMG network. FedRAMP-recognized third-party assessor and PCI Qualified Security Assessor company.", "sources": [ "https://kpmg.com/us/en/how-we-work/locations.html", "https://kpmg.com/us/en/how-we-work/locations/atlanta.html", "https://kpmg.com/us/en/how-we-work/locations/los-angeles.html", "https://kpmg.com/us/en/sitemap.xml", "https://www.fedramp.gov/marketplace/assessors/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "KPMG Assurance and Consulting Services LLP (KPMG India)", "slug": "kpmg-india", "website": "https://kpmg.com/in/en.html", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" }, { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Navi Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Pune" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "Telangana", "city": "Hyderabad" }, { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Gujarat", "city": "Ahmedabad" }, { "country": "India", "state": "Gujarat", "city": "Vadodara" }, { "country": "India", "state": "Kerala", "city": "Kochi" }, { "country": "India", "state": "Rajasthan", "city": "Jaipur" }, { "country": "India", "state": "Chandigarh", "city": "Chandigarh" }, { "country": "India", "state": "Goa", "city": "Panaji" }, { "country": "India", "state": "Andhra Pradesh", "city": "Vijayawada" } ], "frameworks": [ "HITRUST", "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: KPMG Assurance and Consulting Services LLP (entry no. 118, Gurugram)", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: KPMG in India", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Indian member firm of the KPMG network. CERT-In empanelled information security auditor and HITRUST External Assessor.", "sources": [ "https://kpmg.com/in/en/about/offices.html", "https://hitrustalliance.net/find-an-external-assessor", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "REI Systems", "slug": "rei-systems", "website": "https://www.reisystems.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Sterling" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: REI Systems, Inc. (Sterling, VA); active and in good standing", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Government technology services firm headquartered in Sterling, Virginia; authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.reisystems.com/cmmc-c3pao/", "https://www.reisystems.com/contact/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Booz Allen Hamilton", "slug": "booz-allen-hamilton", "website": "https://www.boozallen.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "McLean" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: Booz Allen Hamilton, Inc. (McLean, VA); active and in good standing", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Technology and consulting firm headquartered in McLean, Virginia; authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.boozallen.com/expertise/cybersecurity/cmmc.html", "https://www.boozallen.com/menu/office-locations/north-america.html", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kimmell Cybersecurity (KCFS)", "slug": "kimmell-cybersecurity", "website": "https://www.kimmell.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Akron" } ], "frameworks": [ "CMMC" ], "accreditations": [ { "registry": "Cyber AB Marketplace - C3PAO", "registry_url": "https://cyberab.org/Catalog", "status_text": "Listed as C3PAO: KCFS, LLC (Akron, OH); active and in good standing", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity and managed security firm in Akron, Ohio; authorized CMMC Third-Party Assessment Organization (C3PAO).", "sources": [ "https://www.kimmell.com/", "https://cyberab.org/Catalog" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Acquisory Consulting", "slug": "acquisory-consulting", "website": "https://www.acquisory.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Uttar Pradesh", "city": "Noida" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Acquisory Consulting LLP (Noida)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Risk and advisory firm with offices in Noida, Mumbai and Bengaluru; CERT-In empanelled information security auditor.", "sources": [ "https://www.acquisory.com/", "https://www.acquisory.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ASPL Info Services", "slug": "aspl-info-services", "website": "https://asplinfo.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ASPL Info Services Pvt Ltd (Bengaluru)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "IT services and security firm based in Bengaluru; CERT-In empanelled information security auditor.", "sources": [ "https://asplinfo.com/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SynRadar (Amigosec Consulting)", "slug": "synradar", "website": "https://synradar.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Thane" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Amigosec Consulting Pvt Ltd (SynRadar) (Thane)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity firm based in Thane, Maharashtra; CERT-In empanelled information security auditor.", "sources": [ "https://synradar.com/", "https://synradar.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ConsultEdge Global Services", "slug": "consultedge-global-services", "website": "https://www.consultedge.global", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: ConsultEdge Global Services (OPC) Pvt Ltd (Gurugram)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity and compliance consultancy headquartered in Gurugram; CERT-In empanelled information security auditor.", "sources": [ "https://www.consultedge.global/", "https://www.consultedge.global/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Astra Cybertech (formerly Fortune4)", "slug": "astra-cybertech", "website": "https://astracybertech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Fortune4 Expert Advisors (Mumbai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity advisory firm in Mumbai, formerly Fortune4 Advisors; CERT-In empanelled information security auditor.", "sources": [ "https://astracybertech.com/", "https://astracybertech.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "HiTrust Infotech Solution", "slug": "hitrust-infotech-solution", "website": "https://www.hitrustinfotech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: HiTrust Infotech Solution Pvt Ltd (New Delhi)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Information security consultancy in Rohini, New Delhi; CERT-In empanelled information security auditor.", "sources": [ "https://www.hitrustinfotech.com/", "https://www.hitrustinfotech.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kirtane & Pandit", "slug": "kirtane-and-pandit", "website": "https://www.kirtanepandit.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Nashik" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Telangana", "city": "Hyderabad" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Kirtane & Pandit LLP (Mumbai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Chartered accountancy and advisory firm headquartered in Pune with offices across India; CERT-In empanelled information security auditor.", "sources": [ "https://www.kirtanepandit.com/", "https://www.kirtanepandit.com/contact-us", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MitKat Advisory Services", "slug": "mitkat-advisory-services", "website": "https://mitkatadvisory.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: MitKat Advisory Services Pvt Ltd (Mumbai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Risk consulting and security advisory firm headquartered in Mumbai with an office in Gurugram; CERT-In empanelled information security auditor.", "sources": [ "https://mitkatadvisory.com/", "https://mitkatadvisory.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Primefort", "slug": "primefort", "website": "https://www.primefort.net", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Primefort Pvt Ltd (Chennai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity firm headquartered in Chennai; CERT-In empanelled information security auditor.", "sources": [ "https://www.primefort.net/", "https://www.primefort.net/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RAH Infotech", "slug": "rah-infotech", "website": "https://rahinfotech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Delhi", "city": "New Delhi" }, { "country": "India", "state": "Haryana", "city": "Gurugram" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "West Bengal", "city": "Kolkata" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: RAH Infotech Pvt Ltd (New Delhi)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "IT infrastructure and security solutions company with offices in New Delhi, Gurugram and other Indian cities; CERT-In empanelled information security auditor.", "sources": [ "https://rahinfotech.com/", "https://rahinfotech.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SQ1 Security Technology", "slug": "sq1-security-technology", "website": "https://sq1.security", "hq_country": "India", "offices": [ { "country": "India", "state": "Tamil Nadu", "city": "Chennai" }, { "country": "India", "state": "Karnataka", "city": "Bengaluru" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: SQ1 Security Technology Pvt Ltd (Chennai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity firm with Indian offices in Chennai and Bengaluru and affiliates in the US and UK; CERT-In empanelled information security auditor.", "sources": [ "https://sq1.security/", "https://sq1.security/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "G. D. Apte & Co", "slug": "g-d-apte-and-co", "website": "https://www.gdaca.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" }, { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: G. D. Apte & Company (Mumbai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Chartered accountancy and advisory firm with offices in Mumbai and Pune; CERT-In empanelled information security auditor.", "sources": [ "https://www.gdaca.com/", "https://www.gdaca.com/contact-us/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Forensic CyberTech", "slug": "forensic-cybertech", "website": "https://www.forensiccybertech.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Gujarat", "city": "Ahmedabad" }, { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Forensic CyberTech Pvt Ltd (Ahmedabad)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity and digital forensics firm headquartered in Ahmedabad with a Mumbai branch; CERT-In empanelled information security auditor.", "sources": [ "https://www.forensiccybertech.com/", "https://www.forensiccybertech.com/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Evanti Tech", "slug": "evanti-tech", "website": "https://www.evanti.in", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Evanti Tech Pvt Ltd (Mumbai)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity, compliance and cloud services firm in Goregaon, Mumbai; CERT-In empanelled information security auditor.", "sources": [ "https://www.evanti.in/", "https://www.evanti.in/contact", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Secnuo Consulting", "slug": "secnuo-consulting", "website": "https://secnuo.com", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Pune" } ], "frameworks": [ "CERT-In" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: Secnuo Consulting (OPC) Pvt Ltd (Pune)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity consultancy based in Pune; CERT-In empanelled information security auditor.", "sources": [ "https://secnuo.com/", "https://secnuo.com/contact/", "https://www.cert-in.org.in/PDF/Empanel_org.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PÜG", "slug": "pug", "website": "https://www.pueg.de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Baden-Württemberg", "city": "Gäufelden" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16007-01-03 (PÜG Prüf- und Überwachungsgesellschaft mbH, Hämmerlestraße 14+16, 71126 Gäufelden); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 13.01.2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Gäufelden-based testing and certification company (PÜG Prüf- und Überwachungsgesellschaft mbH) certifying several management system standards; DAkkS-accredited for ISO/IEC 27001 certification, including the energy-sector IT security catalogue.", "sources": [ "https://www.pueg.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16007-01-03.pdf", "https://www.pueg.de/impressum" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ÖHMI EuroCert", "slug": "ohmi-eurocert", "website": "https://www.oehmi-cert.de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Saxony-Anhalt", "city": "Magdeburg" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16015-01-03 (ÖHMI EuroCert GmbH, Berliner Chaussee 66, 39114 Magdeburg); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 11.06.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Magdeburg-based certification body (ÖHMI EuroCert GmbH) covering quality, environmental, energy and information security management systems; DAkkS-accredited for ISO/IEC 27001 and the energy-sector IT security catalogue.", "sources": [ "https://www.oehmi-cert.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16015-01-03.pdf", "https://www.oehmi-cert.de/leistungen/eurocert/akkreditierungen" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CERTivation", "slug": "certivation", "website": "https://www.certivation.com/en", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Lower Saxony", "city": "Wietmarschen" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-21170-01-02 (CERTivation GmbH, Lanzstraße 1, 49835 Wietmarschen); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 21.10.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body based in Wietmarschen-Lohne, Lower Saxony (CERTivation GmbH), offering accredited management system certification; DAkkS-accredited for ISO/IEC 27001.", "sources": [ "https://www.certivation.com/en", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-21170-01-02.pdf", "https://www.certivation.com/en/global/legal-notice", "https://www.certivation.com/en/global/contact" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "FiduCert", "slug": "fiducert", "website": "https://www.fiducert.com/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Saxony-Anhalt", "city": "Magdeburg" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-22467-01-01 (FiduCert GmbH, Niels-Bohr-Straße 10c, 39106 Magdeburg); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 23.09.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Magdeburg-based certification body (FiduCert GmbH) specialised in ISO/IEC 27001 certification; DAkkS-accredited; states it does not provide ISMS consulting.", "sources": [ "https://www.fiducert.com/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-22467-01-01.pdf", "https://www.fiducert.com/kontakt/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CERTIAS", "slug": "certias", "website": "https://certias.de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Lower Saxony", "city": "Hildesheim" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-23224-01-01 (CERTIAS GmbH, Goschenstraße 37, 31134 Hildesheim); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 01.07.2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Hildesheim-based certification and testing company (CERTIAS GmbH); DAkkS-accredited for ISO/IEC 27001 management system certification and also offers energy-sector IT security catalogue certification.", "sources": [ "https://certias.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-23224-01-01.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PwC Certification Services GmbH", "slug": "pwc-certification-services-gmbh", "website": "https://pwc-cert.com/en/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Hesse", "city": "Frankfurt am Main" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16030-02-02 (PwC Certification Services GmbH, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 12.02.2026", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Frankfurt-based certification body of the PwC network in Germany (PwC Certification Services GmbH); DAkkS-accredited for ISO/IEC 27001 ISMS certification.", "sources": [ "https://pwc-cert.com/en/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16030-02-02.pdf", "https://pwc-cert.com/en/certification-of-information-security-management-systems-isms-according-to-iso-iec-27001/", "https://pwc-cert.com/en/imprint/", "https://pwc-cert.com/en/contact/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV Thüringen", "slug": "tuv-thuringen", "website": "https://zertifizierung.tuev-thueringen.de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Thuringia", "city": "Jena" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16006-03-01 (Technischer Überwachungs-Verein Thüringen e.V., Zertifizierungsstelle für Systeme und Personal, Ernst-Ruska-Ring 6, 07745 Jena); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 06.03.2026 (also ISO/IEC 20000-1)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body of TÜV Thüringen e.V. based in Jena, certifying management systems including information security and IT service management; DAkkS-accredited for ISO/IEC 27001.", "sources": [ "https://zertifizierung.tuev-thueringen.de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16006-03-01.pdf", "https://zertifizierung.tuev-thueringen.de/managementsysteme/it-managementsystem/iso-27001/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "infaz", "slug": "infaz", "website": "https://www.infaz.eu/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Neuss" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-16023-01-02 (infaz Institut für Auditierung und Zertifizierung GmbH, Nixhütter Weg 85, 41468 Neuss); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 23.09.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Neuss-based certification body (infaz Institut für Auditierung und Zertifizierung GmbH) for quality, environmental and information security management systems; DAkkS-accredited for ISO/IEC 27001 and the energy-sector IT security catalogue.", "sources": [ "https://www.infaz.eu/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-16023-01-02.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PFI Germany", "slug": "pfi-germany", "website": "https://pfi-germany.de/de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Rhineland-Palatinate", "city": "Pirmasens" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-14150-01-02 (Prüf- und Forschungsinstitut Pirmasens e.V., Marie-Curie-Straße 19, 66953 Pirmasens); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 30.07.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Testing and research institute in Pirmasens (Prüf- und Forschungsinstitut Pirmasens e.V.) whose certification body covers management systems; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://pfi-germany.de/de/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-14150-01-02.pdf", "https://pfi-germany.de/de/zertifizierungen/managementsysteme/", "https://pfi-germany.de/de/impressum/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GTÜ Certification", "slug": "gtu-certification", "website": "https://www.gtue.de/de/geschaeftskunden/zertifizierungsstelle", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Baden-Württemberg", "city": "Stuttgart" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-18824-01-03 (GTÜ Certification GmbH, Vor dem Lauch 25, 70567 Stuttgart); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 03.11.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Stuttgart-based certification body of the GTÜ group (GTÜ Certification GmbH); DAkkS-accredited for ISO/IEC 27001 information security management system certification.", "sources": [ "https://www.gtue.de/de/geschaeftskunden/zertifizierungsstelle", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-18824-01-03.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Proks Certification", "slug": "proks-certification", "website": "https://www.proks-cert.de/en", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Düsseldorf" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-21201-01-02 (Proks Certification GmbH, Breite Straße 27, 40213 Düsseldorf); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 17.11.2025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Düsseldorf-based certification body (Proks Certification GmbH); DAkkS-accredited for ISO/IEC 27001 and ISO 9001 management system certification.", "sources": [ "https://www.proks-cert.de/en", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-21201-01-02.pdf", "https://www.proks-cert.de/en/legal/accreditation", "https://www.proks-cert.de/en/standards/iso-27001" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CIIO", "slug": "ciio", "website": "https://www.ciio.nl/nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Hendrik-Ido-Ambacht" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c559/", "status_text": "Accredited C559 (CIIO B.V., Reeweg 146, 3343 AP Hendrik-Ido-Ambacht); scope annex valid 11-02-2026 to 01-12-2027; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body in Hendrik-Ido-Ambacht (CIIO B.V.) serving sectors such as education, healthcare and public administration; RvA-accredited for ISO/IEC 27001, NEN 7510 and ISO 9001 certification.", "sources": [ "https://www.ciio.nl/nl/", "https://www.rva.nl/alle-geaccrediteerden/c559/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C559-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Duijnborgh Certification", "slug": "duijnborgh-certification", "website": "https://dbcert.nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "Utrecht", "city": "Utrecht" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c590/", "status_text": "Accredited C590 (Duijnborgh Certification B.V., Papendorpseweg 100, 3528 BJ Utrecht); scope annex valid 04-12-2024 to 01-02-2027; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Utrecht-based certification body (Duijnborgh Certification B.V.); RvA-accredited for ISO/IEC 27001 information security management system certification.", "sources": [ "https://dbcert.nl/", "https://www.rva.nl/alle-geaccrediteerden/c590/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C590-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DigiTrust", "slug": "digitrust", "website": "https://www.digitrust.nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Brabant", "city": "Eindhoven" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c618/", "status_text": "Accredited C618 (Digitrust B.V., Achtseweg Zuid 159 R, 5651 GW Eindhoven); scope annex valid 03-09-2026 to 01-06-2028; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Eindhoven-based audit and certification body (Digitrust B.V.) focused on information security; RvA-accredited for ISO/IEC 27001, NEN 7510, ISO 9001 and ISO 14001 certification.", "sources": [ "https://www.digitrust.nl/", "https://www.rva.nl/alle-geaccrediteerden/c618/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C618-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "The Certification Leaders", "slug": "the-certification-leaders", "website": "https://www.thecertificationleaders.nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "Limburg", "city": "Herten" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c715/", "status_text": "Accredited C715 (The Certification Leaders B.V., Merumerkerkweg 1, 6049 BX Herten); scope annex valid 23-07-2026 to 01-08-2030; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body in Herten, Limburg (The Certification Leaders B.V.); RvA-accredited for ISO/IEC 27001 and ISO 9001 certification.", "sources": [ "https://www.thecertificationleaders.nl/", "https://www.rva.nl/alle-geaccrediteerden/c715/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C715-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Normec Certification", "slug": "normec-certification", "website": "https://certification.normecgroup.com/nl/companies/normec-certification", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "Gelderland", "city": "Geldermalsen" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c274/", "status_text": "Accredited C274 (Normec Certification B.V., also trading as Eerland certification, Stationsweg 2, 4191 KK Geldermalsen); scope annex valid 14-10-2026 to 01-10-2029; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Geldermalsen-based certification body of the Normec group (Normec Certification B.V.) covering several management system schemes; RvA-accredited for ISO/IEC 27001 certification.", "sources": [ "https://certification.normecgroup.com/nl/companies/normec-certification", "https://www.rva.nl/alle-geaccrediteerden/c274/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C274-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/", "https://normeccertification.nl/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Brand Compliance", "slug": "brand-compliance", "website": "https://brandcompliance.com/en/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Brabant", "city": "'s-Hertogenbosch" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c548/", "status_text": "Accredited C548 (Brand Compliance B.V., Hambakenwetering 8d, 5231 DC 's-Hertogenbosch); scope annex valid 29-04-2026 to 01-05-2027; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024, and ISO/IEC 27001 + ISO/IEC 27701 under ISO/IEC 27006-2; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Certification body headquartered in 's-Hertogenbosch (Brand Compliance B.V.); RvA-accredited for ISO/IEC 27001 and ISO/IEC 27701 certification.", "sources": [ "https://brandcompliance.com/en/", "https://www.rva.nl/alle-geaccrediteerden/c548/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C548-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "EIK Certificering", "slug": "eik-certificering", "website": "https://www.eikcertificering.nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Rotterdam" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c669/", "status_text": "Accredited C669 (EIK Certificering BV, Piet van de Polsingel 168, 3056 AK Rotterdam); scope annex valid 04-12-2024 to 01-01-2028; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Rotterdam-based certification body (EIK Certificering B.V.); RvA-accredited for ISO/IEC 27001 information security management system certification.", "sources": [ "https://www.eikcertificering.nl/", "https://www.rva.nl/alle-geaccrediteerden/c669/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C669-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/", "https://www.eikcertificering.nl/contact/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ProCertify", "slug": "procertify", "website": "https://www.procertify.nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "Gelderland", "city": "Apeldoorn" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c707/", "status_text": "Accredited C707 (ProCertify B.V., Vd Houven van Oordtlaan 2, 7316 AH Apeldoorn); scope annex valid 25-09-2025 to 01-10-2029; covers ISO/IEC 27001 certification under ISO/IEC 27006-1:2024; not on RvA suspensions/withdrawals page", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Apeldoorn-based certification body (ProCertify B.V.); RvA-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.procertify.nl/", "https://www.rva.nl/alle-geaccrediteerden/c707/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C707-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GraVoc", "slug": "gravoc", "website": "https://www.gravoc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Peabody" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: GraVoc Associates, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Peabody, Massachusetts IT, security and business consulting firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.gravoc.com/contact/", "https://www.gravoc.com/about-us/certifications/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Edelta Consulting", "slug": "edelta-consulting", "website": "https://www.edeltaconsulting.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "New York" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: EDELTA SERVICES LLC dba EDELTA CONSULTING (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "New York City advisory and assurance firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.edeltaconsulting.com/contact-us", "https://www.edeltaconsulting.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "AccessIT Group", "slug": "accessit-group", "website": "https://www.accessitgroup.com", "hq_country": "US", "offices": [ { "country": "US", "state": "PA", "city": "King of Prussia" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: AccessIT Group, Inc (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "King of Prussia, Pennsylvania cybersecurity firm listed as a PCI Qualified Security Assessor (QSA) company; its site lists PCI ROC/SAQ services.", "sources": [ "https://www.accessitgroup.com/contact/", "https://www.accessitgroup.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "WestNet Consulting Services", "slug": "westnet-consulting", "website": "https://www.westnet.tech", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Los Angeles" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: WestNet Consulting Services, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Los Angeles IT consulting and security firm listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.westnet.tech/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Novacoast", "slug": "novacoast", "website": "https://www.novacoast.com", "hq_country": "US", "offices": [ { "country": "US", "state": "KS", "city": "Wichita" }, { "country": "US", "state": "CA", "city": "Paso Robles" }, { "country": "US", "state": "AZ", "city": "Tempe" }, { "country": "US", "state": "MI", "city": "Southfield" }, { "country": "US", "state": "PA", "city": "West Chester" }, { "country": "US", "state": "TX", "city": "Arlington" }, { "country": "US", "state": "UT", "city": "Orem" }, { "country": "US", "state": "WA", "city": "Gig Harbor" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Novacoast (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Wichita, Kansas cybersecurity services firm with US offices in seven more states, listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.novacoast.com/contact-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GuidePoint Security", "slug": "guidepoint-security", "website": "https://www.guidepointsecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Reston" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: GuidePoint Security, LLC (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Reston, Virginia cybersecurity services firm listed as a PCI Qualified Security Assessor (QSA) company; its site offers PCI DSS compliance services.", "sources": [ "https://www.guidepointsecurity.com/contact-us/", "https://www.guidepointsecurity.com/pci-dss-compliance/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Optiv", "slug": "optiv", "website": "https://www.optiv.com", "hq_country": "US", "offices": [ { "country": "US", "state": "KS", "city": "Leawood" }, { "country": "US", "state": "CA", "city": "Newport Beach" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Optiv Security Inc. (not in remediation)", "checked": "2026-10-21" }, { "registry": "HITRUST External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as HITRUST External Assessor: Optiv (type: external)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Leawood, Kansas cybersecurity firm listed as a PCI Qualified Security Assessor (QSA) company and a HITRUST External Assessor.", "sources": [ "https://www.optiv.com/company/locations", "https://www.optiv.com/services/risk/pci-dss-compliance", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Kroll", "slug": "kroll", "website": "https://www.kroll.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "New York" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Kroll Associates, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "New York risk and investigations firm whose cyber practice is listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.kroll.com/en/services/cyber/regulatory-compliance-assessments/pci-services", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CDW", "slug": "cdw", "website": "https://www.cdw.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Vernon Hills" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CDW Technologies LLC (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Vernon Hills, Illinois IT solutions provider whose security practice is listed as a PCI Qualified Security Assessor (QSA) company.", "sources": [ "https://www.cdw.com/content/cdw/en/why-cdw/about-us/overview.html", "https://webobjects2.cdw.com/is/content/CDW/cdw/on-domain-cdw/solutions/security/pci-compliance-services.pdf", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Crimson Security", "slug": "crimson-security", "website": "https://crimsonsecurityinc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Reston" } ], "frameworks": [ "PCI DSS", "HITRUST", "HIPAA" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Crimson Security, Inc. (not in remediation)", "checked": "2026-10-21" }, { "registry": "HITRUST External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as HITRUST External Assessor: Crimson Security Inc. (type: external)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Reston, Virginia security compliance and assessment firm listed as a PCI Qualified Security Assessor (QSA) company and a HITRUST External Assessor; its site offers HIPAA-based assessments.", "sources": [ "https://crimsonsecurityinc.com/about/", "https://crimsonsecurityinc.com/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Triaxiom Security", "slug": "triaxiom-security", "website": "https://www.triaxiomsecurity.com", "hq_country": "US", "offices": [ { "country": "US", "state": "NC", "city": "Charlotte" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Strata Information Group, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Charlotte, North Carolina penetration testing and security consulting firm; its QSA listing is under the legal name Strata Information Group, Inc.", "sources": [ "https://www.triaxiomsecurity.com/about-us/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NSAI (National Standards Authority of Ireland)", "slug": "nsai", "website": "https://www.nsai.ie/", "hq_country": "Ireland", "offices": [ { "country": "Ireland", "state": "Dublin", "city": "Dublin" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "INAB (Irish National Accreditation Board) directory - Management Systems Certification", "registry_url": "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/nsai/", "status_text": "Accredited: NSAI (INAB Reg No 5001), EN ISO/IEC 17021-1:2015; scope includes ISO/IEC 27001 (Full); certificate last renewed 18/08/2023, expires 18/08/2028; schedule edition 35, 12/10/2026; 'Services available to the public: Yes'; head office 1 Swift Square, Northwood, Santry, Dublin 9", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Ireland's official standards body (statutory body under the NSAI Act 1996), based in Santry, Dublin; its certification service is INAB-accredited for ISO/IEC 27001 and offers certification to outside organisations.", "sources": [ "https://www.nsai.ie/certification/management-systems/", "https://www.nsai.ie/about/", "https://www.inab.ie/media/iaommkip/5001-sc.pdf", "https://www.inab.ie/media/vbkhkfx0/5001-ac-copy-1.pdf", "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/" ], "last_checked": "2026-10-21", "government_body": true, "listing_tier": "verified", "registry_listings": [] }, { "name": "EY CertifyPoint", "slug": "ey-certifypoint", "website": "https://www.ey.com/en_gl/services/assurance/certify-point", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Holland", "city": "Amsterdam" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/en/alle-geaccrediteerden/c466/", "status_text": "Accredited C466 (Ernst & Young CertifyPoint B.V., Antonio Vivaldistraat 150, 1083 HP Amsterdam); scope annex valid 29-07-2026 to 01-07-2027; ISO/IEC 27001 (ISO/IEC 27006-1:2024), ISO/IEC 27001 + 27701 (ISO/IEC 27006-2) and ISO 22301 active; only some ISO 14001/45001 IAF codes voluntarily withdrawn as of 29-07-2026. RvA website remained offline on a later 2026-10-21 re-check (precautionary PHP-vulnerability outage); status is from the live annex check earlier the same day.", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "EY's ISO certification body (Ernst & Young CertifyPoint B.V.), Amsterdam; RvA-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.", "sources": [ "https://www.ey.com/en_gl/services/assurance/certify-point", "https://www.rva.nl/alle-geaccrediteerden/c466/", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Citation Certification", "slug": "citation-certification", "website": "https://citationgroup.com.au/certification/", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Newcastle" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited: Citation Certification Pty Ltd (head office Suite 1, 352 Hunter Street, Newcastle NSW 2300); Information Security Management Systems Scheme, ISO/IEC 27001:2022; last accreditation issued 14/07/2024, expiry 14/07/2029; only JAS-ANZ CAB notice is a voluntary withdrawal of the NDIS AQA scheme (31 July 2026), not ISMS", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Newcastle (NSW) certification body (Citation Certification Pty Ltd, part of Citation Group Australia); JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://citationgroup.com.au/certification/", "https://citationgroup.com.au/contact/", "https://register.jasanz.org/accredited-bodies", "https://register.jasanz.org/important-notices" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ATLAS Certification Australia", "slug": "atlas-certification-australia", "website": "https://www.atlascertification.com.au/", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "South Australia", "city": "Mount Barker" }, { "country": "Australia", "state": "Queensland", "city": "Burleigh Heads" }, { "country": "Australia", "state": "Northern Territory", "city": "Ludmilla" }, { "country": "Australia", "state": "Victoria", "city": "Southbank" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Accredited: ATLAS Certification Pty Ltd (head office Unit 6, 2-4 Cameron Road, Mount Barker SA 5251); Information Security Management Systems Scheme, ISO/IEC 27001:2022; last accreditation issued 23/02/2022, expiry 23/02/2027; no JAS-ANZ CAB notice", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Australian certification body (ATLAS Certification Pty Ltd, established 2018) based in Mount Barker, SA, with offices on the Gold Coast, in Darwin and in Melbourne; JAS-ANZ accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.atlascertification.com.au/contact/", "https://www.atlascertification.com.au/about/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JQA (Japan Quality Assurance Organization)", "slug": "jqa", "website": "https://www.jqa.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR001.html", "status_text": "Accredited ISMS certification body 一般財団法人 日本品質保証機構 マネジメントシステム部門, accreditation no. ISR001, valid until 2029-04-18 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on; ISMS-PIMS (ISO/IEC 27701) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited BCMS (ISO 22301) certification bodies", "registry_url": "https://isms.jp/bcms/lst/isr/index.html", "status_text": "Listed as accredited BCMS certification body: BCR001", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 27701 and ISO 22301 (business continuity) certification.", "sources": [ "https://www.jqa.jp", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR001.html", "https://isms.jp/bcms/lst/isr/index.html", "https://isms.jp/lst/isr/index-isms-pims.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JICQA", "slug": "jicqa", "website": "https://www.jicqa.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR002.html", "status_text": "Accredited ISMS certification body 日本検査キューエイ株式会社, accreditation no. ISR002, valid until 2028-07-19 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://www.jicqa.co.jp", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR002.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BSI Group Japan", "slug": "bsi-group-japan", "website": "https://www.bsigroup.com/ja-JP/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" } ], "frameworks": [ "ISO 27001", "ISO 27701", "PCI DSS" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR004.html", "status_text": "Accredited ISMS certification body BSIグループジャパン株式会社, accreditation no. ISR004, valid until 2029-07-04 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on; ISMS-PIMS (ISO/IEC 27701) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited BCMS (ISO 22301) certification bodies", "registry_url": "https://isms.jp/bcms/lst/isr/index.html", "status_text": "Listed as accredited BCMS certification body: BCR004", "checked": "2026-10-21" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: BSI Group Japan K.K. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 27701 and ISO 22301 (business continuity) certification, also listed by the PCI SSC as a QSA company.", "sources": [ "https://www.bsigroup.com/ja-JP/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR004.html", "https://isms.jp/bcms/lst/isr/index.html", "https://isms.jp/lst/isr/index-isms-pims.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JUSE ISO Center", "slug": "juse-iso-center", "website": "https://www.juse-iso.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR005.html", "status_text": "Accredited ISMS certification body 一般財団法人日本科学技術連盟 ISO審査登録センター, accreditation no. ISR005, valid until 2029-11-14 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on; ISMS-PIMS (ISO/IEC 27701) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.", "sources": [ "https://www.juse-iso.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR005.html", "https://isms.jp/lst/isr/index-isms-pims.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JSA Solutions", "slug": "jsa-solutions", "website": "https://shinsaweb.jsa.or.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR006.html", "status_text": "Accredited ISMS certification body 日本規格協会ソリューションズ株式会社 審査登録事業部, accreditation no. ISR006, valid until 2029-12-04 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://shinsaweb.jsa.or.jp", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR006.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JACO", "slug": "jaco", "website": "https://www.jaco.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR007.html", "status_text": "Accredited ISMS certification body 株式会社日本環境認証機構, accreditation no. ISR007, valid until 2030-01-26 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on; ISMS-PIMS (ISO/IEC 27701) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited BCMS (ISO 22301) certification bodies", "registry_url": "https://isms.jp/bcms/lst/isr/index.html", "status_text": "Listed as accredited BCMS certification body: BCR007", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 27701 and ISO 22301 (business continuity) certification.", "sources": [ "https://www.jaco.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR007.html", "https://isms.jp/bcms/lst/isr/index.html", "https://isms.jp/lst/isr/index-isms-pims.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DNV Business Assurance Japan", "slug": "dnv-business-assurance-japan", "website": "https://www.dnv.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Hyogo", "city": "Kobe" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR008.html", "status_text": "Accredited ISMS certification body DNV ビジネス・アシュアランス・ジャパン株式会社, accreditation no. ISR008, valid until 2030-09-04 (ISO/IEC 27001)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Kobe-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://www.dnv.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR008.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ICMS", "slug": "icms-japan", "website": "https://www.icms.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001", "PCI DSS" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR010.html", "status_text": "Accredited ISMS certification body 国際マネジメントシステム認証機構株式会社, accreditation no. ISR010, valid until 2030-11-11 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" }, { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: International Certificate Authority of Management System (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification, also listed by the PCI SSC as a QSA company.", "sources": [ "https://www.icms.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR010.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JMAQA", "slug": "jmaqa", "website": "https://jmaqa.jma.or.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR011.html", "status_text": "Accredited ISMS certification body 一般社団法人日本能率協会 審査登録センター, accreditation no. ISR011, valid until 2030-03-11 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://jmaqa.jma.or.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR011.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Perry Johnson Registrar Japan", "slug": "perry-johnson-registrar-japan", "website": "https://www.pjr.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR012.html", "status_text": "Accredited ISMS certification body ペリージョンソン ホールディング 株式会社 ペリージョンソン レジストラー, accreditation no. ISR012, valid until 2027-05-18 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://www.pjr.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR012.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JATE ISMS Registration Center", "slug": "jate-isms-registration-center", "website": "https://www.jate.or.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR013.html", "status_text": "Accredited ISMS certification body 一般財団法人電気通信端末機器審査協会 ＩＳＭＳ審査登録センター, accreditation no. ISR013, valid until 2027-05-18 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://www.jate.or.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR013.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV Rheinland Japan", "slug": "tuv-rheinland-japan", "website": "https://www.tuv.com/japan/jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR015.html", "status_text": "Accredited ISMS certification body テュフ ラインランド ジャパン株式会社, accreditation no. ISR015, valid until 2028-01-11 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited AIMS (ISO/IEC 42001) certification bodies", "registry_url": "https://isms.jp/aims/lst/isr/index.html", "status_text": "Listed as accredited AIMS certification body: AIR015", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 42001 (AI management) certification.", "sources": [ "https://www.tuv.com/japan/jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR015.html", "https://isms.jp/aims/lst/isr/index.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MSA", "slug": "msa-japan", "website": "https://www.msac.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR016.html", "status_text": "Accredited ISMS certification body 株式会社マネジメントシステム評価センター, accreditation no. ISR016, valid until 2028-01-11 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on; ISMS-PIMS (ISO/IEC 27701) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.", "sources": [ "https://www.msac.co.jp", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR016.html", "https://isms.jp/lst/isr/index-isms-pims.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "J-VAC", "slug": "j-vac", "website": "https://j-vac.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR017.html", "status_text": "Accredited ISMS certification body 株式会社 ジェイーヴァック, accreditation no. ISR017, valid until 2028-01-11 (ISO/IEC 27001)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://j-vac.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR017.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Bureau Veritas Japan", "slug": "bureau-veritas-japan", "website": "https://www.bureauveritas.jp/certification", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR018.html", "status_text": "Accredited ISMS certification body ビューローベリタスジャパン株式会社 システム認証事業本部, accreditation no. ISR018, valid until 2028-01-11 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited BCMS (ISO 22301) certification bodies", "registry_url": "https://isms.jp/bcms/lst/isr/index.html", "status_text": "Listed as accredited BCMS certification body: BCR018", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO 22301 (business continuity) certification.", "sources": [ "https://www.bureauveritas.jp/certification", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR018.html", "https://isms.jp/bcms/lst/isr/index.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DFEII System Certification Center", "slug": "dfeii-system-certification-center", "website": "https://dfeii.or.jp/01-management-system-certification", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR019.html", "status_text": "Accredited ISMS certification body 公益財団法人 防衛基盤整備協会 システム審査センター, accreditation no. ISR019, valid until 2028-03-23 (ISO/IEC 27001)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://dfeii.or.jp/01-management-system-certification", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR019.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SGS Japan", "slug": "sgs-japan", "website": "https://www.sgs.com/ja-jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR021.html", "status_text": "Accredited ISMS certification body ＳＧＳジャパン株式会社, accreditation no. ISR021, valid until 2029-01-19 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited AIMS (ISO/IEC 42001) certification bodies", "registry_url": "https://isms.jp/aims/lst/isr/index.html", "status_text": "Listed as accredited AIMS certification body: AIR021", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited BCMS (ISO 22301) certification bodies", "registry_url": "https://isms.jp/bcms/lst/isr/index.html", "status_text": "Listed as accredited BCMS certification body: BCR021", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 42001 (AI management) and ISO 22301 (business continuity) certification.", "sources": [ "https://www.sgs.com/ja-jp", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR021.html", "https://isms.jp/aims/lst/isr/index.html", "https://isms.jp/bcms/lst/isr/index.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BL-QE", "slug": "bl-qe", "website": "https://bl-iso.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR022.html", "status_text": "Accredited ISMS certification body 一般財団法人ベターリビング システム審査登録センター, accreditation no. ISR022, valid until 2029-04-26 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" }, { "registry": "ISMS-AC - accredited PIMS certification bodies", "registry_url": "https://isms.jp/pims/lst/isr/index.html", "status_text": "Listed as accredited PIMS certification body: PIR022", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.", "sources": [ "https://bl-iso.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR022.html", "https://isms.jp/pims/lst/isr/index.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ISA", "slug": "isa-cb-japan", "website": "https://www.isa-cb.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Aichi", "city": "Nagoya" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR024.html", "status_text": "Accredited ISMS certification body 国際システム審査株式会社, accreditation no. ISR024, valid until 2029-12-17 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Nagoya-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://www.isa-cb.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR024.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ASR", "slug": "asr-japan", "website": "https://www.armsr.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR025.html", "status_text": "Accredited ISMS certification body エイエスアール株式会社, accreditation no. ISR025, valid until 2030-01-28 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://www.armsr.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR025.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JCQA", "slug": "jcqa", "website": "https://www.jcqa.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR026.html", "status_text": "Accredited ISMS certification body 日本化学キューエイ株式会社, accreditation no. ISR026, valid until 2028-02-22 (ISO/IEC 27001)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://www.jcqa.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR026.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DQS Japan", "slug": "dqs-japan", "website": "https://www.dqsglobal.com/ja/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR027.html", "status_text": "Accredited ISMS certification body ドイツ品質システム認証株式会社, accreditation no. ISR027, valid until 2029-01-17 (ISO/IEC 27001)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://www.dqsglobal.com/ja/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR027.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IMJ", "slug": "imj-japan", "website": "https://imj-shinsa.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR029.html", "status_text": "Accredited ISMS certification body アイエムジェー審査登録センター株式会社, accreditation no. ISR029, valid until 2027-11-16 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on; ISMS-PIMS (ISO/IEC 27701) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.", "sources": [ "https://imj-shinsa.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR029.html", "https://isms.jp/lst/isr/index-isms-pims.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ARM Standard", "slug": "arm-standard", "website": "https://www.armstandard.com/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR030.html", "status_text": "Accredited ISMS certification body アームスタンダード株式会社, accreditation no. ISR030, valid until 2030-01-15 (ISO/IEC 27001)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://www.armstandard.com/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR030.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IS Certification", "slug": "is-certification-japan", "website": "https://www.iscert.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR031.html", "status_text": "Accredited ISMS certification body ＩＳサーティフィケーション株式会社, accreditation no. ISR031, valid until 2026-11-14 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://www.iscert.co.jp/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR031.html" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "LAP", "slug": "lap-japan", "website": "https://lap-j.com/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Osaka", "city": "Osaka" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR032.html", "status_text": "Accredited ISMS certification body 株式会社LAP, accreditation no. ISR032, valid until 2029-10-13 (ISO/IEC 27001; ISMS cloud security (ISO/IEC 27017) add-on)", "checked": "2026-10-21" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: LAP Co., Ltd. (LAP-MS-1702) - ISO/IEC 27001, ISO 9001, ISO 14001", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Osaka-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.", "sources": [ "https://lap-j.com/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR032.html", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NRI SecureTechnologies", "slug": "nri-securetechnologies", "website": "https://www.nri-secure.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" }, { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" }, { "country": "Japan", "state": "Osaka", "city": "Osaka" }, { "country": "US", "state": "CA", "city": "Irvine" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: NRI Secure Technologies LTD (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based security services firm listed by the PCI SSC as a QSA company, with offices in Yokohama, Osaka and Irvine, California.", "sources": [ "https://www.nri-secure.co.jp", "https://www.nri-secure.co.jp/company/outline", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "UBsecure, Inc.", "slug": "ubsecure", "website": "https://www.ubsecure.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: UBsecure, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based security assessment firm listed by the PCI SSC as a QSA company.", "sources": [ "https://www.ubsecure.jp", "https://www.ubsecure.jp/company", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Meyar Arabia Company", "slug": "meyar-arabia-company", "website": "https://mac-cs.sa/", "hq_country": "Saudi Arabia", "offices": [ { "country": "Saudi Arabia", "state": "Makkah", "city": "Jeddah" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Saudi Accreditation Center (SAAC) - accredited bodies", "registry_url": "https://www.saac.gov.sa/en/accredited-bodies/?appid=pre-n-m-05352", "status_text": "Active: Meyar Arabic Company (MAC), certificate N-ISMS-00003, ISO 27001:2022 (ISMS), ISO/IEC 17021-1 / 27006-1, valid 2025-01-22 to 2028-01-21, Jeddah", "checked": "2026-10-21" }, { "registry": "Saudi Accreditation Center (SAAC) - accredited bodies", "registry_url": "https://www.saac.gov.sa/en/accredited-bodies/?appid=n-bcms-00028", "status_text": "Active: miyar alarabiyya Company Ltd, certificate N-BCMS-00028, ISO 22301 (BCMS), Jeddah", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Jeddah-based certification body accredited by the Saudi Accreditation Center for ISO/IEC 27001 and ISO 22301 certification.", "sources": [ "https://mac-cs.sa/", "https://www.saac.gov.sa/en/accredited-cabs/", "https://www.saac.gov.sa/en/accredited-bodies/?appid=pre-n-m-05352", "https://www.saac.gov.sa/en/accredited-bodies/?appid=n-bcms-00028" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RONET International Certification Services Ltd", "slug": "ronet-international-certification-services", "website": "https://www.ronet-ics.com/", "hq_country": "Israel", "offices": [ { "country": "Israel", "state": "Haifa District", "city": "Caesarea" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: RONET International Certification Services Ltd (RONET-MS-5087) - ISO/IEC 27001, ISO/IEC 27701, ISO 9001, ISO 14001", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Caesarea-based certification body accredited by ANAB for ISO/IEC 27001 and ISO/IEC 27701 certification.", "sources": [ "https://www.ronet-ics.com/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Standards Institution of Israel", "slug": "standards-institution-of-israel", "website": "https://www.sii.org.il", "hq_country": "Israel", "offices": [ { "country": "Israel", "state": "Tel Aviv District", "city": "Tel Aviv" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: The Standards Institution of Israel, Quality and Certification Division (SII-MS-4932) - ISO/IEC 27001, ISO 9001, ISO 22000, AS9100, AS9120", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Israel's national standards institution; its Tel Aviv-based Quality and Certification Division offers ISO/IEC 27001 certification to organisations and is accredited by ANAB.", "sources": [ "https://www.sii.org.il", "https://www.sii.org.il/he/lobby/qualityauth", "https://www.sii.org.il/he/lobby/qualityauth/software-and-information-security/iso-27001", "https://www.sii.org.il/he/policy-and-accreditation", "https://www.sii.org.il/he/contact-us/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": true, "listing_tier": "verified", "registry_listings": [] }, { "name": "AuditSafe", "slug": "auditsafe", "website": "https://www.auditsafe.com.br", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "São Paulo", "city": "São Paulo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Auditsafe Auditoria e Consultoria em Riscos Corporativos Ltda (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "São Paulo-based audit and security consultancy listed by the PCI SSC as a QSA company.", "sources": [ "https://www.auditsafe.com.br", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Access Security", "slug": "access-security-brazil", "website": "https://accesssecurity.com.br", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "São Paulo", "city": "Barueri" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: 1 ACCESS SECURITY CONSULTORIA E TECNOLOGIA LTDA (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Barueri-based security firm listed by the PCI SSC as a QSA company, offering PCI DSS audits.", "sources": [ "https://accesssecurity.com.br", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TIC Defense", "slug": "tic-defense", "website": "https://www.ticdefense.com", "hq_country": "Mexico", "offices": [ { "country": "Mexico", "state": "Mexico City", "city": "Mexico City" }, { "country": "Mexico", "state": "State of Mexico", "city": "Naucalpan de Juárez" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: TIC DEFENSE, S.A. DE C.V. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Mexico City-based cybersecurity firm listed by the PCI SSC as a QSA company, with an operations center in Naucalpan.", "sources": [ "https://www.ticdefense.com", "https://www.ticdefense.com/contacto", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Protiviti", "slug": "protiviti", "website": "https://www.protiviti.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Menlo Park" } ], "frameworks": [ "HITRUST", "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Protiviti (not in remediation)", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Protiviti", "checked": "2026-10-21" }, { "registry": "Rhode Island Department of State - Business entity search", "registry_url": "https://business.sos.ri.gov/CorpWeb/CorpSearch/CorpSummary.aspx?FEIN=000547240", "status_text": "Protiviti Inc. (foreign corporation, organized in DE): principal office 2884 Sand Hill Road Ste 200, Menlo Park, CA 94025", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Menlo Park-based consulting firm offering PCI DSS assessments as a QSA company and HITRUST assessments as an authorized external assessor.", "sources": [ "https://www.protiviti.com/us-en/about-us", "https://business.sos.ri.gov/CorpWeb/CorpSearch/CorpSummary.aspx?FEIN=000547240", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TrustedSec", "slug": "trustedsec", "website": "https://trustedsec.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Fairlawn" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: TrustedSec, LLC (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Fairlawn, Ohio-based cybersecurity firm offering penetration testing, incident response and compliance services, including PCI DSS assessments as a QSA company.", "sources": [ "https://trustedsec.com/services/pci", "https://trustedsec.com/contact", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "VikingCloud", "slug": "vikingcloud", "website": "https://www.vikingcloud.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "Ireland", "state": "Dublin", "city": "Dublin" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: VikingCloud, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Cybersecurity and compliance company with headquarters in Chicago and Dublin, offering PCI DSS assessments as a QSA company alongside penetration testing and vulnerability scanning.", "sources": [ "https://www.vikingcloud.com/about-us/why-us", "https://www.vikingcloud.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DEKRA Certification, Inc. (DEKRA US)", "slug": "dekra-certification-us", "website": "https://www.dekra.us/en/audit/iso-27001-certification/", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: DEKRA-MS-7497 - DEKRA Certification, Inc. (Georgia, United States); accredited to ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 and other MS standards", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US management system certification body of the DEKRA group, based in Atlanta, Georgia; ANAB-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001 certification.", "sources": [ "https://www.dekra.us/en/audit/iso-27001-certification/", "https://www.dekra.us/en/audit/accreditations/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DQS Inc. (DQS US)", "slug": "dqs-us", "website": "https://www.dqsglobal.com/en-us/", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Schaumburg" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: DQS-MS-7328 - DQS Inc. (Illinois, United States); accredited to ISO/IEC 27001, ISO/IEC 42001 and other MS standards", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US entity of the DQS certification group, based in Schaumburg, Illinois; ANAB-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.", "sources": [ "https://www.dqsglobal.com/en-us/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV Rheinland of North America", "slug": "tuv-rheinland-north-america", "website": "https://www.tuv.com/usa/en/", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Boxborough" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: TRNA-MS-8450 - TUV Rheinland of North America, Inc. (Massachusetts, United States); accredited to ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 and other MS standards; ANAB scope document (400 Beaver Brook Road, Boxborough, MA 01719) shows ISO/IEC 27001:2022 since 24 July 2023, ISO/IEC 27701 since 02 March 2023, ISO/IEC 42001 since 04 September 2025, accreditation expires 01 November 2030", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "North American entity of the TÜV Rheinland group, based in Boxborough, Massachusetts; ANAB-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001 certification.", "sources": [ "https://www.tuv.com/usa/en/", "https://www.tuv.com/world/en/locationfinder/location-detail-page_45570.html", "https://www.tuv.com/content-media-files/usa/pdfs/2026/anab-certificate-2026-02-09.pdf", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NSAI Inc. (NSAI US)", "slug": "nsai-inc-us", "website": "https://www.nsaiinc.com/", "hq_country": "US", "offices": [ { "country": "US", "state": "NH", "city": "Nashua" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: NSAI-MS-4070 - The National Standards Authority of Ireland, Inc. (New Hampshire, United States); accredited to ISO/IEC 27001, ISO 22301 and other MS standards", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US certification entity of Ireland’s National Standards Authority, headquartered in Nashua, New Hampshire; ANAB-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.nsaiinc.com/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PricewaterhouseCoopers LLP (PwC UK)", "slug": "pwc-uk", "website": "https://www.pwc.co.uk/", "hq_country": "UK", "offices": [ { "country": "UK", "state": "England", "city": "London" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: PricewaterhouseCoopers (PWC) -UK (website www.pwc.co.uk, place of business Europe, not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "UK member firm of the PwC network with a London office at Embankment Place; listed by the PCI Security Standards Council as a Qualified Security Assessor company.", "sources": [ "https://www.pwc.co.uk/who-we-are/regional-sites/london.html", "https://find-and-update.company-information.service.gov.uk/company/OC303525", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PricewaterhouseCoopers Pvt. Ltd. (PwC India)", "slug": "pwc-india", "website": "https://www.pwc.in/", "hq_country": "India", "offices": [ { "country": "India", "state": "Haryana", "city": "Gurugram" } ], "frameworks": [ "CERT-In", "HITRUST" ], "accreditations": [ { "registry": "CERT-In empanelled information security auditing organisations", "registry_url": "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "status_text": "Listed as CERT-In empanelled auditor: M/s Price water house Coopers Pvt. Ltd. (entry no. 152, DLF Cyber City, Gurgaon, Haryana)", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: PwC India", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Indian member firm of the PwC network, with a Gurgaon office on CERT-In’s empanelled-auditor list; also listed by HITRUST as an External Assessor.", "sources": [ "https://www.cert-in.org.in/PDF/Empanel_org.pdf", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BroadBand Security (BBSec)", "slug": "broadband-security-bbsec", "website": "https://www.bbsec.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: BroadBand Security, Inc. (BBSec) (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based security services firm listed by the PCI SSC as a QSA company.", "sources": [ "https://www.bbsec.co.jp", "https://www.bbsec.co.jp/company/overview.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NEC Security", "slug": "nec-security", "website": "https://www.nec-security.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: NEC Security, Ltd. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based security services company of the NEC group listed by the PCI SSC as a QSA company.", "sources": [ "https://www.nec-security.co.jp", "https://www.nec-security.co.jp/company/profile.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NTT DATA INTELLILINK", "slug": "ntt-data-intellilink", "website": "https://www.intellilink.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" }, { "country": "Japan", "state": "Osaka", "city": "Osaka" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: NTT Data Intellilink Corporation (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based IT and security services company listed by the PCI SSC as a QSA company, with an office in Osaka.", "sources": [ "https://www.intellilink.co.jp", "https://www.intellilink.co.jp/company/corporate.aspx", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Net One Systems", "slug": "net-one-systems", "website": "https://www.netone.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Net One Systems Co., Ltd. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based network and IT systems integrator listed by the PCI SSC as a QSA company.", "sources": [ "https://www.netone.co.jp", "https://www.netone.co.jp/company/profile/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TISI Inc.", "slug": "tisi-inc", "website": "https://www.tisi.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: TISI Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based IT services company (TISI Inc., formed by the July 2026 merger of TIS and INTEC) listed by the PCI SSC as a QSA company.", "sources": [ "https://www.tisi.jp/company/information/", "https://www.tisi.jp/company/about/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GRCS", "slug": "grcs-japan", "website": "https://www.grcs.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" }, { "country": "Japan", "state": "Kanagawa", "city": "Yokohama" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: GRCS Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based governance, risk and security services firm listed by the PCI SSC as a QSA company, with an office in Yokohama.", "sources": [ "https://www.grcs.co.jp", "https://www.grcs.co.jp/corporate-profile", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Secure Pro", "slug": "secure-pro-japan", "website": "https://secure-pro.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Secure Pro Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based payment security firm listed by the PCI SSC as a QSA company.", "sources": [ "https://secure-pro.co.jp/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SP Compliance", "slug": "sp-compliance", "website": "https://www.spcompliance.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: SP Compliance Co., LTD (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based firm providing PCI DSS assessments, listed by the PCI SSC as a QSA company.", "sources": [ "https://www.spcompliance.co.jp", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Leon Technology", "slug": "leon-technology", "website": "https://www.leon-tec.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" }, { "country": "Japan", "state": "Osaka", "city": "Osaka" }, { "country": "Japan", "state": "Fukuoka", "city": "Fukuoka" }, { "country": "Japan", "state": "Toyama", "city": "Takaoka" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Leon Technology, Inc. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based security firm listed by the PCI SSC as a QSA company, with offices in Osaka, Fukuoka and Takaoka.", "sources": [ "https://www.leon-tec.co.jp", "https://www.leon-tec.co.jp/company/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ICMS Solutions", "slug": "icms-solutions", "website": "https://www.icmssol.co.jp", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: ICMS SOLUTIONS Co., Ltd. (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based information security services firm listed by the PCI SSC as a QSA company.", "sources": [ "https://www.icmssol.co.jp", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Deloitte Tohmatsu Cyber LLC", "slug": "deloitte-tohmatsu-cyber", "website": "https://www.deloitte.com/jp/ja/about/group/deloitte-tohmatsu-cyber.html", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Deloitte Tohmatsu Cyber LLC (not in remediation)", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Tokyo-based cybersecurity firm of the Deloitte Tohmatsu Group listed by the PCI SSC as a QSA company.", "sources": [ "https://www.deloitte.com/jp/ja/about/group/deloitte-tohmatsu-cyber.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Deloitte Touche Tohmatsu LLC", "slug": "deloitte-touche-tohmatsu-japan", "website": "https://www.deloitte.com/jp/ja/about/group/deloitte-touche-tohmatsu.html", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution 有限責任監査法人トーマツ, registration no. A20-0002, registered 2020-08-20, registration valid until 2026-08-19; registry remark: renewal application filed, so registration remains valid after the 2026-08-19 expiry date", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Tokyo-based audit firm of the Deloitte Tohmatsu Group registered as an ISMAP audit institution for Japanese government cloud security assessments.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.deloitte.com/jp/ja/about/group/deloitte-touche-tohmatsu.html" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A20-0002", "legal_name": "有限責任監査法人トーマツ", "valid_until": "2026-08-19", "remark": "renewal application filed, so registration remains valid after the 2026-08-19 expiry date" } ] }, { "name": "KPMG AZSA LLC", "slug": "kpmg-azsa", "website": "https://kpmg.com/jp/ja/about/azsa.html", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution 有限責任あずさ監査法人, registration no. A20-0003, registered 2020-08-20, registration valid until 2026-08-19; registry remark: renewal application filed, so registration remains valid after the 2026-08-19 expiry date", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Tokyo-based audit firm of the KPMG network registered as an ISMAP audit institution for Japanese government cloud security assessments.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://kpmg.com/jp/ja/about/azsa.html" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A20-0003", "legal_name": "有限責任あずさ監査法人", "valid_until": "2026-08-19", "remark": "renewal application filed, so registration remains valid after the 2026-08-19 expiry date" } ] }, { "name": "PwC Japan LLC", "slug": "pwc-japan-llc", "website": "https://www.pwc.com/jp/ja/about-us/member/assurance.html", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" }, { "country": "Japan", "state": "Aichi", "city": "Nagoya" }, { "country": "Japan", "state": "Kyoto", "city": "Kyoto" }, { "country": "Japan", "state": "Osaka", "city": "Osaka" }, { "country": "Japan", "state": "Fukuoka", "city": "Fukuoka" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution ＰｗＣ Japan有限責任監査法人 (formerly ＰｗＣあらた有限責任監査法人), registration no. A20-0004, registered 2020-08-20, registration valid until 2026-08-19; registry remark: renewal application filed, so registration remains valid after the 2026-08-19 expiry date; registry also records a 2023-12-04 name change", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Tokyo-based audit firm of the PwC network registered as an ISMAP audit institution for Japanese government cloud security assessments, with offices in Nagoya, Kyoto, Osaka and Fukuoka.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.pwc.com/jp/ja/about-us/member/assurance.html" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A20-0004", "legal_name": "ＰｗＣ Japan有限責任監査法人", "valid_until": "2026-08-19", "remark": "renewal application filed, so registration remains valid after the 2026-08-19 expiry date" } ] }, { "name": "BDO Sanyu & Co.", "slug": "bdo-sanyu", "website": "https://www.bdo.or.jp/ja-jp/about/top/about-bdo-sanyu-top", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution 三優監査法人, registration no. A21-0005, registered 2021-12-20, registration valid until 2027-12-19; registry remarks: registration validity renewed 2024-02-19 and 2026-04-24", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Tokyo-based audit firm (BDO member firm in Japan) registered as an ISMAP audit institution for Japanese government cloud security assessments.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.bdo.or.jp/ja-jp/about/top/about-bdo-sanyu-top" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A21-0005", "legal_name": "三優監査法人", "valid_until": "2027-12-19", "remark": "registration validity renewed 2024-02-19 and 2026-04-24" } ] }, { "name": "Japan Security Rating Organization (JaSRO)", "slug": "jasro", "website": "https://www.jasro.org", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution 一般社団法人日本セキュリティ格付機構, registration no. A26-0008, registered 2026-06-26, registration valid until 2028-06-25", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Tokyo-based general incorporated association registered as an ISMAP audit institution, offering ISMAP information security audits.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.jasro.org", "https://www.jasro.org/ISMAPservice/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A26-0008", "legal_name": "一般社団法人日本セキュリティ格付機構", "valid_until": "2028-06-25" } ] }, { "name": "Tanner LLP", "slug": "tanner", "website": "https://tannerco.com", "hq_country": "US", "offices": [ { "country": "US", "state": "UT", "city": "Salt Lake City" }, { "country": "US", "state": "UT", "city": "Lehi" }, { "country": "US", "state": "AZ", "city": "Tempe" } ], "frameworks": [ "SOC 1", "SOC 2", "HITRUST" ], "accreditations": [ { "registry": "CPAverify (NASBA Accountancy Licensee Database)", "registry_url": "https://ald.nasba.org/search/firm", "status_text": "CPA firm licences active with no board actions reported in the listed office states: Tanner LLP UT 108384-2603 Active and 13232241-2603 Active; TANNERCO.COM LLP AZ 6742 Active (FL row names the firm \"TANNER LLP (TANNERCO.COM LLP)\")", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Tanner LLP", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Salt Lake City-based CPA firm whose IT assurance practice offers SOC 1 and SOC 2 examinations and HITRUST assessments, with offices in Lehi, Utah and Tempe, Arizona.", "sources": [ "https://www.tannerco.com/contact/", "https://tannerco.com/services/it-assurance/", "https://ald.nasba.org/search/firm", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Ernst & Young ShinNihon LLC (EY ShinNihon)", "slug": "ey-shinnihon", "website": "https://www.ey.com/ja_jp/about-us/ey-shinnihon-llc", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution ＥＹ新日本有限責任監査法人, registration no. A20-0001, registered 2020-08-20, registration valid until 2026-08-19; registry remark: renewal application filed, so registration remains valid after the 2026-08-19 expiry date", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Tokyo-based audit firm of the EY network registered as an ISMAP audit institution for Japanese government cloud security assessments.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.ey.com/ja_jp/about-us/ey-shinnihon-llc" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A20-0001", "legal_name": "ＥＹ新日本有限責任監査法人", "valid_until": "2026-08-19", "remark": "renewal application filed, so registration remains valid after the 2026-08-19 expiry date" } ] }, { "name": "Vicis Law PC", "slug": "vicis-law", "website": "https://www.vicislaw.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "San Francisco" } ], "frameworks": [ "HITRUST" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Vicis Law PC", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "San Francisco-based law firm offering HITRUST readiness and certification services and privacy compliance work, listed by HITRUST as an External Assessor.", "sources": [ "https://www.vicislaw.com/", "https://www.vicislaw.com/contact-us", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "King & Spalding LLP", "slug": "king-and-spalding", "website": "https://www.kslaw.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" } ], "frameworks": [ "HITRUST" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: King & Spalding", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Atlanta-based international law firm listed by HITRUST as an External Assessor.", "sources": [ "https://www.kslaw.com/offices/atlanta", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GM Sectec (1stSecureIT LLC)", "slug": "gm-sectec", "website": "https://www.gmsectec.com", "hq_country": "US", "offices": [ { "country": "US", "state": "PR", "city": "Río Piedras" }, { "country": "US", "state": "FL", "city": "Fort Lauderdale" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: 1stSecureIT LLC (dba GM SECTEC), places of business incl. USA and Puerto Rico (not in remediation)", "checked": "2026-10-21" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: GMsectec", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Puerto Rico-headquartered cybersecurity firm with a US office in Fort Lauderdale, offering PCI DSS assessments as a QSA company and HIPAA/HITRUST assessment services.", "sources": [ "https://www.gmsectec.com/company/locations/", "https://www.gmsectec.com/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BSI Group ANZ", "slug": "bsi-group-anz", "website": "https://www.bsigroup.com/en-AU/", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "North Sydney" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "BSI Group ANZ Pty Limited: accredited, ISO/IEC 27001:2022 in ISMS scope; last accreditation issued 06/10/2022, expiry 06/10/2027; head office North Sydney NSW", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Australian certification body of the BSI Group (UK), accredited by JAS-ANZ for ISO/IEC 27001 certification, with its head office in North Sydney.", "sources": [ "https://www.bsigroup.com/en-AU/contact-us/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Bureau Veritas Australia", "slug": "bureau-veritas-australia", "website": "https://www.bureauveritas.com.au/", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Melbourne" }, { "country": "Australia", "state": "Western Australia", "city": "West Perth" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "Bureau Veritas Australia Pty. Ltd.: accredited, ISO/IEC 27001:2022 in ISMS scope; last accreditation issued 24/10/2023, expiry 24/10/2028; head office Melbourne VIC, location West Perth WA", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Australian entity of the Bureau Veritas group (France), accredited by JAS-ANZ for ISO/IEC 27001 certification, headquartered in Melbourne.", "sources": [ "https://www.bureauveritas.com.au/contact-us", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DNV Business Assurance Australia", "slug": "dnv-business-assurance-australia", "website": "https://www.dnv.com.au/", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "North Sydney" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "DNV Business Assurance Australia P/L: accredited, ISO/IEC 27001:2022 in ISMS scope; last accreditation issued 13/06/2023, expiry 13/06/2028; head office North Sydney NSW", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Australian business assurance entity of the DNV group (Norway), accredited by JAS-ANZ for ISO/IEC 27001 certification, based in North Sydney.", "sources": [ "https://www.dnv.com.au/", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SGS Australia", "slug": "sgs-australia", "website": "https://www.sgs.com/en-au", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "Victoria", "city": "Clayton" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "SGS Australia Pty Ltd: accredited, ISO/IEC 27001:2022 in ISMS scope; last accreditation issued 02/11/2023, expiry 02/11/2028; Australian location Clayton VIC", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Australian entity of the SGS group (Switzerland), accredited by JAS-ANZ for ISO/IEC 27001 certification, with its accredited location in Clayton, Victoria.", "sources": [ "https://www.sgs.com/en-au/office-directory", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intertek SAI Global Australia", "slug": "intertek-sai-global-australia", "website": "https://saiassurance.com.au/", "hq_country": "Australia", "offices": [ { "country": "Australia", "state": "New South Wales", "city": "Sydney" }, { "country": "Australia", "state": "Victoria", "city": "Port Melbourne" } ], "frameworks": [ "ISO 27001", "ISO 42001" ], "accreditations": [ { "registry": "JAS-ANZ Register - accredited certification bodies", "registry_url": "https://register.jasanz.org/accredited-bodies", "status_text": "SAI Global Certification Services Pty Ltd operating as Intertek & Intertek SAI Global: accredited, ISO/IEC 27001:2022 (ISMS scheme) and ISO/IEC 42001:2023 (AIMS scheme); last accreditation issued 27/03/2024, expiry 27/03/2029; head office Sydney NSW, location Port Melbourne VIC", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Australian certification entity of the Intertek group (UK), operating as Intertek SAI Global, accredited by JAS-ANZ for ISO/IEC 27001 and ISO/IEC 42001 certification, with offices in Sydney and Port Melbourne.", "sources": [ "https://saiassurance.com.au/contact-us", "https://register.jasanz.org/accredited-bodies" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SGS North America", "slug": "sgs-north-america", "website": "https://www.sgs.com/en-us", "hq_country": "US", "offices": [ { "country": "US", "state": "NJ", "city": "Bloomfield" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: SGS-MS-3454 - SGS North America Inc. (New Jersey); standards include ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US entity of the SGS group (Switzerland), accredited by ANAB for ISO/IEC 27001, 27701 and 42001 certification, with its local head office in Bloomfield, New Jersey.", "sources": [ "https://www.sgs.com/en/office-directory/sgs-usa-bloomfield-local-head-office", "https://www.sgs.com/en-us/our-company/about-sgs/sgs-in-north-america", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV SÜD America", "slug": "tuv-sud-america", "website": "https://www.tuvsud.com/en-us", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Wakefield" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: TUVAM-MS-8254 - TÜV SÜD America Inc. (Massachusetts); standards include ISO/IEC 27001", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "US subsidiary of the TÜV SÜD group (Germany), accredited by ANAB for ISO/IEC 27001 certification, headquartered in Wakefield, Massachusetts.", "sources": [ "https://www.tuvsud.com/en-us/imprint", "https://www.tuvsud.com/en-us/about-us/north-america", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "GLI Europe", "slug": "gli-europe", "website": "https://gaminglabs.com/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Holland", "city": "Haarlem" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/alle-geaccrediteerden/c676/", "status_text": "GLI Europe B.V., registration C 676: annex valid 13-05-2026 to 01-06-2029, ISO/IEC 27001:2022 Information Security Management Systems (accredited per ISO/IEC 27006), location Diakenhuisweg 29-35, Haarlem", "checked": "2026-10-21" } ], "partner_tools": [], "summary": "Dutch entity of Gaming Laboratories International (GLI, US), accredited by the RvA for ISO/IEC 27001 certification, based in Haarlem.", "sources": [ "https://gaminglabs.com/gli-locations/", "https://www.rva.nl/alle-geaccrediteerden/c676/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C676-sce.pdf" ], "last_checked": "2026-10-21", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "DNV Business Assurance Netherlands", "slug": "dnv-business-assurance-netherlands", "website": "https://www.dnv.nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Barendrecht" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/alle-geaccrediteerden/c024/", "status_text": "DNV Business Assurance B.V., registration C 024: annex valid 14-10-2026 to 01-09-2030; scope includes EN ISO/IEC 27001 (per ISO/IEC 27006-1:2024), ISO/IEC 27001 & 27701 (per ISO/IEC 27006-2, valid until 15-10-2028), ISO/IEC 27701, ISO 42001 (per ISO/IEC 42006) and ISO 22301; head office Zwolseweg 1, Barendrecht. Not on the RvA suspensions/withdrawals page (the K103 DNV Netherlands B.V. laboratory entry in Groningen is a different entity).", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Dutch certification entity of the DNV group (Norway), accredited by the RvA for ISO/IEC 27001, 27701, 42001 and ISO 22301 certification, based in Barendrecht near Rotterdam.", "sources": [ "https://www.dnv.nl/", "https://www.rva.nl/alle-geaccrediteerden/c024/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C024-sce.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV NORD Nederland", "slug": "tuv-nord-nederland", "website": "https://www.tuv.nl/nl/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Brabant", "city": "Son en Breugel" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/alle-geaccrediteerden/c029/", "status_text": "TÜV NORD Nederland B.V., registration C 029: annex valid 14-10-2026 to 01-11-2028; scope includes ISO/IEC 27001 (per ISO/IEC 27006-1:2024), ISO/IEC 27001 & 27701 (per ISO/IEC 27006-2), ISO 22301 and ISO 42001; head office Ekkersrijt 4401, Son en Breugel. Not on the RvA suspensions/withdrawals page.", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Dutch certification and inspection company of the TÜV NORD group (Germany), accredited by the RvA for ISO/IEC 27001, 27701, 42001 and ISO 22301 certification, based in Son en Breugel.", "sources": [ "https://www.tuv.nl/nl/contact/", "https://www.rva.nl/alle-geaccrediteerden/c029/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C029-sce.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BSI Group The Netherlands", "slug": "bsi-group-netherlands", "website": "https://www.bsigroup.com/nl-NL/", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "North Holland", "city": "Amsterdam" } ], "frameworks": [ "ISO 42001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/alle-geaccrediteerden/c122/", "status_text": "BSI Group The Netherlands B.V., registration C 122: annex valid 15-04-2026 to 01-06-2029; scope includes ISO/IEC 42001 (per ISO/IEC 42006) at the head office John M. Keynesplein 9, Amsterdam; no ISO/IEC 27001 in this RvA scope. Not on the RvA suspensions/withdrawals page.", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Dutch entity of BSI (UK), accredited by the RvA for ISO/IEC 42001 AI management system certification, based in Amsterdam.", "sources": [ "https://www.bsigroup.com/nl-NL/", "https://www.rva.nl/alle-geaccrediteerden/c122/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C122-sce.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Forvis Mazars Certification Hub", "slug": "forvis-mazars-certification-hub", "website": "https://www.forvismazars.com/nl/nl/diensten/consulting/forvis-mazars-certification-hub", "hq_country": "Netherlands", "offices": [ { "country": "Netherlands", "state": "South Holland", "city": "Rotterdam" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "RvA (Dutch Accreditation Council) register - management system certification bodies", "registry_url": "https://www.rva.nl/alle-geaccrediteerden/c693/", "status_text": "Forvis Mazars Certification Hub B.V., registration C693: annex valid 18-03-2026 to 01-11-2027; ISO/IEC 27001 (per ISO/IEC 27006-1:2024); head office Watermanweg 80, Rotterdam. Not on the RvA suspensions/withdrawals page.", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Dutch ISO/IEC 27001 certification body of the Forvis Mazars network in the Netherlands, accredited by the RvA, based in Rotterdam.", "sources": [ "https://www.forvismazars.com/nl/nl/diensten/consulting/forvis-mazars-certification-hub", "https://www.forvismazars.com/nl/nl/offices/rotterdam", "https://www.rva.nl/alle-geaccrediteerden/c693/", "https://www.rva.nl/wp-content/uploads/scopes_files/home/rva-ftp/C693-scn.pdf", "https://www.rva.nl/schorsingen-en-intrekkingen/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV NORD CERT", "slug": "tuv-nord-cert", "website": "https://www.tuev-nord.de/de/dienstleistungen/auditierung-und-zertifizierung/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "North Rhine-Westphalia", "city": "Essen" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-12007-01-06 (TÜV NORD CERT GmbH, Am TÜV 1, 45307 Essen); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1 and ISO 22301 under ISO/IEC TS 17021-6; annex valid from 13.10.2025, issued 14.11.2025", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Essen-based certification company of the TÜV NORD group; DAkkS-accredited for ISO/IEC 27001 and ISO 22301 certification.", "sources": [ "https://www.tuev-nord.de/de/dienstleistungen/auditierung-und-zertifizierung/", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-12007-01-06.pdf" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV SÜD Management Service", "slug": "tuv-sud-management-service", "website": "https://www.tuvsud.com/de-de", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Bavaria", "city": "Munich" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-14143-01-03 (TÜV SÜD Management Service GmbH, Ridlerstraße 57, 80339 München); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 13.06.2025", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Munich-based management system certification company of the TÜV SÜD group; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.tuvsud.com/de-de/impressum", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-14143-01-03.pdf" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SOCOTEC Certification Deutschland", "slug": "socotec-certification-deutschland", "website": "https://www.socotec-certification-international.de/", "hq_country": "Germany", "offices": [ { "country": "Germany", "state": "Bavaria", "city": "Halblech" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "DAkkS database of accredited bodies - certification body for management systems", "registry_url": "https://www.dakks.de/en/accredited-bodies-search.html", "status_text": "Active accreditation D-ZM-18855-01-01 (SOCOTEC Certification Deutschland GmbH, Graf-Dürkheim-Straße 3, 87642 Halblech); scope annex covers certification to ISO/IEC 27001 under ISO/IEC 27006-1; annex valid from 14.10.2025", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "German certification entity of the SOCOTEC group (France), based in Halblech, Bavaria; DAkkS-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.socotec-certification-international.de/unsere-standorte", "https://www.dakks.de/en/accredited-bodies-search.html", "https://www.dakks.de/files/data/as/pdf/D-ZM-18855-01-01.pdf" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Bureau Veritas India", "slug": "bureau-veritas-india", "website": "https://www.bureauveritas.co.in/", "hq_country": "India", "offices": [ { "country": "India", "state": "Maharashtra", "city": "Mumbai" } ], "frameworks": [ "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/is006/", "status_text": "Bureau Veritas (India) Pvt. Ltd. - NABCB ISMS accreditation IS 006, valid 08 Jan 2020 to 13 Apr 2027; scope ISO/IEC 27001:2022 and ISO/IEC 27701:2019; address Marol Industrial Area, Andheri (East), Mumbai", "checked": "2026-10-22" }, { "registry": "NABCB accredited management system certification bodies", "registry_url": "https://nabcb.qci.org.in/ai-004/", "status_text": "Bureau Veritas (India) Pvt. Ltd. - NABCB AIMS accreditation AI 004, valid 02 Jun 2026 to 01 Jun 2029; scope ISO/IEC 42001:2023", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Mumbai-based Indian entity of the Bureau Veritas group (France); NABCB-accredited for ISO/IEC 27001, 27701 and 42001 certification.", "sources": [ "https://www.bureauveritas.co.in/form/contact-us-final", "https://nabcb.qci.org.in/is006/", "https://nabcb.qci.org.in/ai-004/", "https://nabcb.qci.org.in/management-system-certification/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Intertek Testing Services NA (Intertek US)", "slug": "intertek-testing-services-na", "website": "https://www.intertek.com/business-assurance/contacts-usa/", "hq_country": "US", "offices": [ { "country": "US", "state": "MI", "city": "Kentwood" }, { "country": "US", "state": "MA", "city": "Boxborough" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Intertek-MS-4176 - Intertek Testing Services NA, Inc. dba Intertek and Intertek SAI Global (Michigan); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "US business assurance entity of Intertek (UK), with offices in Kentwood, Michigan and Boxborough, Massachusetts; ANAB-accredited for ISO/IEC 27001 certification.", "sources": [ "https://www.intertek.com/business-assurance/contacts-usa/", "https://anabdirectory.remoteauditor.com/", "https://scc-ccn.ca/system/files/2025-11/ASB_SOA_08006-Scope_v23_2025-11-03_EN.pdf" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "MNP LLP", "slug": "mnp", "website": "https://www.mnp.ca/", "hq_country": "Canada", "offices": [ { "country": "Canada", "state": "Quebec", "city": "Montreal" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed QSA company: MNP LLP (Canada); place of business includes the listed country; not in remediation; PCI DSS v4 assessor (live list pulled 2026-10-22, 475 companies)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Canadian accounting and consulting firm whose cyber security team is listed by the PCI Security Standards Council as a Qualified Security Assessor company; PCI team works from the Montreal office.", "sources": [ "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://www.mnp.ca/", "https://www.mnp.ca/en/insights/directory/pci-compliance-validation-and-penetration-testing" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Palindrome Technologies", "slug": "palindrome-technologies", "website": "https://palindrometech.com/", "hq_country": "US", "offices": [ { "country": "US", "state": "NJ", "city": "Princeton" } ], "frameworks": [ "ISO 42001", "HITRUST" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Palindrome Technologies (type-external)", "checked": "2026-10-22" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: PaliTech-MS-4287 - Palindrome Technologies (New Jersey); accredited to include ISO/IEC 42001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Princeton, New Jersey cybersecurity firm listed as a HITRUST External Assessor and an ANAB-accredited ISO/IEC 42001 certification body.", "sources": [ "https://hitrustalliance.net/find-an-external-assessor", "https://palindrometech.com/", "https://palindrometech.com/contact-us", "https://palindrometech.com/hitrust-certification-service", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "JET (Japan Electrical Safety & Environment Technology Laboratories)", "slug": "jet-iso-registration-center", "website": "https://www.jet.or.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR028.html", "status_text": "Accredited ISMS certification body 一般財団法人 電気安全環境研究所 ISO登録センター (JET), accreditation no. ISR028, criteria JIP-ISAC100-5.0, first registered 2011-05-16, valid until 2030-05-15; address Yoyogi 5-14-12, Shibuya-ku, Tokyo", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Tokyo-based testing and certification foundation whose ISO Registration Center is accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.", "sources": [ "https://www.jet.or.jp/", "https://www.jet.or.jp/iso/iso27001/", "https://www.jet.or.jp/en/", "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR028.html" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "FAHSS (National Inspection & Technical Testing Company)", "slug": "fahss", "website": "https://www.fahss.com/", "hq_country": "Saudi Arabia", "offices": [ { "country": "Saudi Arabia", "state": "Eastern Province", "city": "Dammam" }, { "country": "Saudi Arabia", "state": "Riyadh", "city": "Riyadh" }, { "country": "Saudi Arabia", "state": "Makkah", "city": "Jeddah" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Saudi Accreditation Center (SAAC) - accredited bodies", "registry_url": "https://www.saac.gov.sa/en/accredited-bodies/?appid=n-isms-00004", "status_text": "Active: National Inspection & Technical Testing Company (FAHSS), certificate N-ISMS-00004, ISO 27001:2022 (ISMS), ISO/IEC 17021-1:2015 / ISO/IEC 27006-1:2024, valid 2025-11-27 to 2028-11-26, Dammam", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Dammam-headquartered testing, inspection and certification company, founded in 1986 by TASNEE and TÜV NORD, accredited by the Saudi Accreditation Center for ISO/IEC 27001 certification, with offices in Riyadh and Jeddah.", "sources": [ "https://www.fahss.com/", "https://www.fahss.com/Contact-Us", "https://www.fahss.com/Services/Certification-and-Training-Services", "https://www.saac.gov.sa/en/accredited-bodies/?appid=n-isms-00004" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Amtivo (Ireland) Limited", "slug": "amtivo-ireland", "website": "https://amtivo.com/ie/", "hq_country": "Ireland", "offices": [ { "country": "Ireland", "state": "Dublin", "city": "Dublin" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "INAB (Irish National Accreditation Board) directory - management systems certification bodies", "registry_url": "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/amtivo-ireland/", "status_text": "Accredited: Amtivo (Ireland) Limited t/a Amtivo (INAB Reg No 5006), EN ISO/IEC 17021-1:2015; scope includes ISO/IEC 27001; awarded 24/09/2008, last renewed 27/07/2023, certificate expires 27/07/2028; schedule edition 25, 15/10/2026; services available to the public: Yes; head office Block 20A, Beckett Way, Park West Business Park, Dublin 12", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Irish company of the Amtivo certification group (formerly Certification Europe), accredited by INAB for ISO/IEC 27001 certification, based in Park West, Dublin 12.", "sources": [ "https://amtivo.com/ie/", "https://amtivo.com/ie/contact-us/", "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/", "https://www.inab.ie/inab-directory/certification-bodies/management-systems-certification/amtivo-ireland/", "https://www.inab.ie/media/fdbfnlcm/5006-sc.pdf", "https://www.inab.ie/media/wncna1z1/5006-ac-copy-1.pdf" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Fundação Carlos Alberto Vanzolini (FCAV)", "slug": "fundacao-vanzolini", "website": "https://vanzolini.org.br/", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "São Paulo", "city": "São Paulo" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)", "registry_url": "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "status_text": "Listed as OTS 0001, FCAV - Fundação Carlos Alberto Vanzolini, São Paulo/SP, Alto da Lapa, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Private non-profit foundation in São Paulo accredited by Inmetro/Cgcre to certify information security management systems to ISO/IEC 27001.", "sources": [ "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "https://vanzolini.org.br/contato/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TÜV NORD Brasil", "slug": "tuv-nord-brasil", "website": "https://www.tuv-nord.com/br/pt/", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "São Paulo", "city": "Barueri" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)", "registry_url": "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "status_text": "Listed as OTS 0002, TÜV Nord Brasil Avaliações da Qualidade LTDA, Barueri/SP, Alphaville, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Brazilian company of the TÜV NORD Group, based in Alphaville, Barueri, accredited by Inmetro/Cgcre for ISO/IEC 27001 certification.", "sources": [ "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "https://www.tuv-nord.com/br/pt/", "https://www.tuv-nord.com/br/pt/nossos-servicos/sistema-de-gestao/iso-27001-seguranca-da-informacao/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CBG Certificadora Brasileira de Gestão", "slug": "cbg-certificadora", "website": "https://www.cbgcertificadora.com.br/", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "Santa Catarina", "city": "Joinville" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)", "registry_url": "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "status_text": "Listed as OTS 0007, CBG CERTIFICADORA BRASILEIRA DE GESTAO LTDA ME, Joinville/SC, Centro, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body based in Joinville, Santa Catarina, accredited by Inmetro/Cgcre for ISO/IEC 27001 certification.", "sources": [ "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "https://www.cbgcertificadora.com.br/", "https://www.cbgcertificadora.com.br/certificacoes/iso-27001" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Normatizas Certificadora", "slug": "normatizas-certificadora", "website": "https://normatizas.com.br/", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "Distrito Federal", "city": "Brasília" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)", "registry_url": "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "status_text": "Listed as OTS 0009, NORMATIZAS CERTIFICADORA LTDA., Brasília/DF, Asa Norte, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body based in Brasília accredited by Inmetro/Cgcre for ISO/IEC 27001 certification.", "sources": [ "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "https://normatizas.com.br/", "https://normatizas.com.br/normas/iso-27001/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Bureau Veritas Brasil (BVQI do Brasil)", "slug": "bureau-veritas-brasil", "website": "https://www.bureauveritas.com.br/pt-br", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "São Paulo", "city": "Barueri" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)", "registry_url": "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "status_text": "Listed as OTS 0010, BVQI do Brasil Sociedade Certificadora Ltda, Barueri/SP, Alphaville Centro Ind. e Empresarial, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Brazilian certification company of the Bureau Veritas group, based in Barueri, accredited by Inmetro/Cgcre for ISO/IEC 27001 certification.", "sources": [ "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "https://www.bureauveritas.com.br/pt-br", "https://www.bureauveritas.com.br/pt-br/mercados-servicos/certificacoes/contatos" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SAS Certificadora", "slug": "sas-certificadora", "website": "https://www.sascertificadora.com.br/", "hq_country": "Brazil", "offices": [ { "country": "Brazil", "state": "Minas Gerais", "city": "Nova Lima" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)", "registry_url": "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "status_text": "Listed as OTS 0011, SAS Certificadora Ltda., Nova Lima/MG, Vale do Sereno, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body based in Nova Lima, Minas Gerais, accredited by Inmetro/Cgcre for ISO/IEC 27001 certification.", "sources": [ "http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA", "https://www.sascertificadora.com.br/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NKKKQA (Nippon Kaiji Kentei Quality Assurance)", "slug": "nkkkqa", "website": "https://www.nkkkqa.co.jp/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" }, { "country": "Japan", "state": "Osaka", "city": "Osaka" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ISMS-AC (Information Management System Accreditation Center, Japan) - accredited ISMS certification bodies", "registry_url": "https://isms.jp/lst/isr/CR_ISR023.html", "status_text": "Accredited ISMS certification body 日本海事検定キューエイ株式会社 (NKKKQA), accreditation no. ISR023, first registered 2006-12-18, valid until 2029-12-17 (JIP-ISAC100-5.0), Shibaura 2-14-9, Minato-ku, Tokyo", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification, with a Kansai branch in Osaka.", "sources": [ "https://isms.jp/lst/isr/index.html", "https://isms.jp/lst/isr/CR_ISR023.html", "https://www.nkkkqa.co.jp/about/company/", "https://www.nkkkqa.co.jp/about/access/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Amtivo (USA), Inc.", "slug": "amtivo-usa", "website": "https://amtivo.com/us/", "hq_country": "US", "offices": [ { "country": "US", "state": "CO", "city": "Arvada" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Amtivo-MS-3993 - Amtivo (USA), Inc. (Colorado); accredited to include ISO/IEC 27001 (formerly Orion Registrar, Inc.)", "checked": "2026-10-22" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "US certification body of the Amtivo group, based in Arvada, Colorado, offering accredited ISO/IEC 27001 certification among other management-system standards.", "sources": [ "https://amtivo.com/us/contact-us/", "https://amtivo.com/us/accreditations/", "https://anabdirectory.remoteauditor.com/", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ISOQAR Inc.", "slug": "isoqar-inc", "website": "https://isoqarinc.com", "hq_country": "US", "offices": [ { "country": "US", "state": "FL", "city": "Bonita Springs" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: ISOQAR-MS-8976 - ISOQAR Inc. (Florida); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body in Bonita Springs, Florida, offering accredited ISO/IEC 27001 certification alongside quality, environmental and aerospace standards.", "sources": [ "https://isoqarinc.com/contact/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "National Quality Assurance, USA (NQA USA)", "slug": "nqa-usa", "website": "https://www.nqa.com/en-us", "hq_country": "US", "offices": [ { "country": "US", "state": "MA", "city": "Acton" } ], "frameworks": [ "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: NQA USA-MS-4126 - National Quality Assurance, USA (Massachusetts); accredited to include ISO/IEC 27001 and ISO/IEC 27701", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "US entity of the NQA certification group with its North American headquarters in Acton, Massachusetts, offering accredited ISO/IEC 27001 and ISO/IEC 27701 certification.", "sources": [ "https://www.nqa.com/en-us/contact-us", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Perry Johnson Registrars, Inc.", "slug": "perry-johnson-registrars", "website": "https://www.pjr.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MI", "city": "Troy" } ], "frameworks": [ "ISO 42001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: PJR-MS-3912 - Perry Johnson Registrars, Inc. (Michigan); accredited to include ISO/IEC 42001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body headquartered in Troy, Michigan, offering accredited ISO/IEC 42001 AI management system certification among other standards.", "sources": [ "https://www.pjr.com/contact-us", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ABS Quality Evaluations, Inc.", "slug": "abs-quality-evaluations", "website": "https://www.abs-qe.com", "hq_country": "US", "offices": [ { "country": "US", "state": "TX", "city": "Spring" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: ABS QE-MS-4771 - ABS Quality Evaluations, Inc. (Texas); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body in Spring, Texas, offering accredited ISO/IEC 27001 certification alongside quality, environmental and asset-management standards.", "sources": [ "https://www.abs-qe.com/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "IAPMO SCB", "slug": "iapmo-scb", "website": "https://iapmoscb.org", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Ontario" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: SCB-MS-9202 - IAPMO R&T DBA IAPMO SCB (California); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Management-system certification body of IAPMO R&T with its US office in Ontario, California, offering accredited ISO/IEC 27001 certification.", "sources": [ "https://iapmoscb.org/contact-us/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PRI Certification (Performance Review Institute)", "slug": "pri-certification", "website": "https://www.p-r-i.org/certification/", "hq_country": "US", "offices": [ { "country": "US", "state": "PA", "city": "Warrendale" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: PRI-MS-3829 - Performance Review Institute dba PRI Certification (Pennsylvania); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification program of the Performance Review Institute, headquartered in Warrendale, Pennsylvania, offering accredited ISO/IEC 27001 certification alongside aerospace and quality standards.", "sources": [ "https://www.p-r-i.org/about-us/", "https://www.p-r-i.org/certification/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "ASACB (Aviation Suppliers Association)", "slug": "asacb", "website": "https://www.aviationsuppliers.org", "hq_country": "US", "offices": [ { "country": "US", "state": "DC", "city": "Washington" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: ASA-MS-9669 - Aviation Suppliers Association dba ASACB (District of Columbia); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Certification body of the Aviation Suppliers Association in Washington, DC, offering accredited ISO/IEC 27001 certification alongside aviation-sector quality standards.", "sources": [ "https://www.aviationsuppliers.org/contact-us", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Frank, Rimerman + Co.", "slug": "frank-rimerman", "website": "https://www.frankrimerman.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "Palo Alto" }, { "country": "US", "state": "CA", "city": "Sacramento" }, { "country": "US", "state": "CA", "city": "San Diego" }, { "country": "US", "state": "CA", "city": "San Francisco" }, { "country": "US", "state": "CA", "city": "San Jose" }, { "country": "US", "state": "CA", "city": "St. Helena" }, { "country": "US", "state": "UT", "city": "Lehi" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "CPAverify (NASBA) - CA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Frank%20Rimerman", "status_text": "FRANK RIMERMAN & CO LLP - CA PAR 1246, Clear; UT 13049969-2603 and 13796257-2603 Active; no actions reported on participating boards", "checked": "2026-10-22" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: FRIS-MS-2829 - Frank, Rimerman Information Security, LLC (California); accredited to include ISO/IEC 27001 and ISO/IEC 27701", "checked": "2026-10-22" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "Licensed CPA firm with offices in California and Utah performing SOC 1 and SOC 2 examinations, with an affiliated ANAB-accredited entity for ISO/IEC 27001 and ISO/IEC 27701 certification.", "sources": [ "https://www.frankrimerman.com/locations/", "https://www.frankrimerman.com/risk-advisory-and-assurance/", "https://www.frankrimerman.com/risk-advisory-and-assurance/soc-examination/", "https://ald.nasba.org/search/firm/results?firmName=Frank%20Rimerman", "https://anabdirectory.remoteauditor.com/", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Smith + Howard", "slug": "smith-and-howard", "website": "https://www.smith-howard.com", "hq_country": "US", "offices": [ { "country": "US", "state": "GA", "city": "Atlanta" }, { "country": "US", "state": "NC", "city": "Cary" }, { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "SC", "city": "Columbia" }, { "country": "US", "state": "SC", "city": "Charleston" }, { "country": "US", "state": "SC", "city": "Spartanburg" }, { "country": "US", "state": "TN", "city": "Chattanooga" } ], "frameworks": [ "SOC 1", "SOC 2", "ISO 27001" ], "accreditations": [ { "registry": "CPAverify (NASBA) - GA board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Smith%20and%20Howard", "status_text": "SMITH AND HOWARD PC - GA ACF000936 Active; SMITH & HOWARD P.C NC 35973, SC AFI.10763, TN 4979 Active; no actions reported", "checked": "2026-10-22" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Smith & Howard-MS-2666 - Smith & Howard, P.C. (Georgia); accredited to include ISO/IEC 27001", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Licensed CPA firm with offices in Georgia, North Carolina, South Carolina and Tennessee providing SOC 1 and SOC 2 reporting and accredited ISO/IEC 27001 certification.", "sources": [ "https://www.smith-howard.com/company-locations/", "https://www.smith-howard.com/locations/raleigh-durham/", "https://www.smith-howard.com/service/assurance-services/soc-reporting/", "https://www.smith-howard.com/service/cyber-risk-management-compliance/iso-27001-certification-services/", "https://ald.nasba.org/search/firm/results?firmName=Smith%20and%20Howard", "https://ald.nasba.org/search/firm/results?firmName=Smith%20%26%20Howard", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Pease Bell", "slug": "pease-bell", "website": "https://www.peasebell.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Cleveland" }, { "country": "US", "state": "OH", "city": "Akron" }, { "country": "US", "state": "NJ", "city": "Lakewood" } ], "frameworks": [ "SOC 1", "SOC 2" ], "accreditations": [ { "registry": "CPAverify (NASBA) - OH board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Pease%20Bell", "status_text": "PEASE BELL CPAS - OH 44115173.PR Active; PEASE BELL CPAS LLC NJ 20CZ00043100 Active; no actions reported", "checked": "2026-10-22" } ], "partner_tools": [ { "tool": "Vanta", "source_url": "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" } ], "summary": "Licensed CPA firm headquartered in Cleveland, Ohio, performing SOC 1 and SOC 2 examinations, with offices in Ohio and New Jersey.", "sources": [ "https://www.peasebell.com/locations/", "https://www.peasebell.com/accounting-services/risk-advisory-services/", "https://ald.nasba.org/search/firm/results?firmName=Pease%20Bell", "https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Elliott Davis", "slug": "elliott-davis", "website": "https://www.elliottdavis.com", "hq_country": "US", "offices": [ { "country": "US", "state": "SC", "city": "Greenville" }, { "country": "US", "state": "SC", "city": "Columbia" }, { "country": "US", "state": "SC", "city": "Charleston" }, { "country": "US", "state": "NC", "city": "Charlotte" }, { "country": "US", "state": "NC", "city": "Raleigh" } ], "frameworks": [ "SOC 1", "SOC 2" ], "accreditations": [ { "registry": "CPAverify (NASBA) - SC board of accountancy", "registry_url": "https://ald.nasba.org/search/firm/results?firmName=Elliott%20Davis", "status_text": "ELLIOTT DAVIS LLC - SC AFI.1273 Active; ELLIOTT DAVIS, PLLC NC 31051 and 32910 Active; no actions reported", "checked": "2026-10-22" } ], "partner_tools": [], "summary": "Licensed CPA firm with offices in South Carolina and North Carolina providing SOC 1 and SOC 2 reports.", "sources": [ "https://www.elliottdavis.com/locations", "https://www.elliottdavis.com/solution/soc-reporting", "https://ald.nasba.org/search/firm/results?firmName=Elliott%20Davis" ], "last_checked": "2026-10-22", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "NSF International Strategic Registrations, Ltd. (NSF-ISR)", "slug": "nsf-isr", "website": "https://www.nsf.org/about-nsf/nsf-international-companies/nsf-international-strategic-registrations", "hq_country": "US", "offices": [ { "country": "US", "state": "MI", "city": "Ann Arbor" } ], "frameworks": [ "ISO 27001" ], "accreditations": [ { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: ISR-MS-6620 - NSF International Strategic Registrations, Ltd. (Michigan, United States); ANAB scope document (789 North Dixboro Road, Ann Arbor, MI 48105) issued 15 September 2026 lists ISO/IEC 27001:2022 accreditation as of 03 August 2023; accreditation expires 01 February 2030", "checked": "2026-10-23" } ], "partner_tools": [], "summary": "Management systems certification body of the NSF group, based in Ann Arbor, Michigan, accredited by ANAB to certify information security management systems to ISO/IEC 27001.", "sources": [ "https://www.nsf.org/about-nsf/nsf-international-companies/nsf-international-strategic-registrations", "https://www.nsf.org/management-systems/iso-iec-27001", "https://www.nsf.org/locations/north-america/nsf-international-world-headquarters", "https://anabdirectory.remoteauditor.com/", "https://anab.jadian.com/Certificate.mvc?PKey=BFEDA3BE-E683-4926-9C12-C5031B854F83&useId=true&OrgId=115f5ea3-026b-4074-8d2c-302edc05e24c" ], "last_checked": "2026-10-23", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RSM US LLP", "slug": "rsm-us", "website": "https://rsmus.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "PCI DSS", "HITRUST", "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: RSM US LLP (place of business USA, not in remediation)", "checked": "2026-10-24" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: RSM US LLP", "checked": "2026-10-24" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: RSM US, LLP (recognized Nov 30, 2016; 1 S Wacker Drive, Chicago, IL)", "checked": "2026-10-24" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: RSM", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Chicago-headquartered US member of the RSM network; listed as a PCI Qualified Security Assessor company, HITRUST External Assessor and FedRAMP-recognized third-party assessor.", "sources": [ "https://rsmus.com/about.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.fedramp.gov/marketplace/assessors/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "RSM" } ] }, { "name": "Crowe LLP", "slug": "crowe-llp", "website": "https://www.crowe.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Crowe LLP (place of business USA, not in remediation)", "checked": "2026-10-24" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Crowe LLP", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "US accounting and advisory firm whose Chicago office is its national headquarters; listed as a PCI Qualified Security Assessor company and HITRUST External Assessor.", "sources": [ "https://www.crowe.com/about-us/our-offices/chicago", "https://www.crowe.com/about-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Baker Tilly US", "slug": "baker-tilly-us", "website": "https://www.bakertilly.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "PCI DSS", "HITRUST", "FedRAMP", "ISO 27001", "ISO 27701", "ISO 42001", "GovRAMP" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Baker Tilly Advisory Group, LP (place of business USA, not in remediation)", "checked": "2026-10-24" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Baker Tilly", "checked": "2026-10-24" }, { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Baker Tilly (recognized Sep 26, 2024; 311 N. Green Street, Suite 600, Chicago, IL)", "checked": "2026-10-24" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Baker Tilly Certifications LLC (BakerT-MS-2966) - ISO/IEC 27001, 27701, 42001 (and others); ANAB notes Moss Adams Certifications LLC changed its name to Baker Tilly Certifications LLC on Jan 7, 2026", "checked": "2026-10-24" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Baker Tilly", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "US advisory and accounting firm; listed as a PCI Qualified Security Assessor company, HITRUST External Assessor and FedRAMP-recognized assessor, with an ANAB-accredited ISO certification body (Baker Tilly Certifications LLC).", "sources": [ "https://www.bakertilly.com/about-us", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://www.fedramp.gov/marketplace/assessors/", "https://anabdirectory.remoteauditor.com/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Baker Tilly" } ] }, { "name": "CliftonLarsonAllen LLP (CLA)", "slug": "cliftonlarsonallen", "website": "https://www.claconnect.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MN", "city": "Minneapolis" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CliftonLarsonAllen LLP (place of business USA, not in remediation)", "checked": "2026-10-24" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: CliftonLarsonAllen LLP", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "US accounting and advisory firm with a Minneapolis office (220 South Sixth Street); listed as a PCI Qualified Security Assessor company and HITRUST External Assessor.", "sources": [ "https://www.claconnect.com/en/locations/minnesota/offices/cla-minneapolis", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CBIZ", "slug": "cbiz", "website": "https://www.cbiz.com", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Cleveland" }, { "country": "US", "state": "FL", "city": "Tampa" } ], "frameworks": [ "PCI DSS", "ISO 27001", "ISO 27701" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: CBIZ Security & Compliance, LLC (place of business USA, not in remediation)", "checked": "2026-10-24" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: CBIZ Security & Compliance, LLC (CBIZ SC-MS-8529, Florida) - ISO/IEC 27001, 27701; ANAB notes Marcum RAS, LLC changed its name to CBIZ Security and Compliance, LLC on Apr 3, 2026", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "Cleveland-headquartered professional services company; its CBIZ Security & Compliance, LLC unit is a PCI Qualified Security Assessor company and an ANAB-accredited ISO/IEC 27001 and 27701 certification body.", "sources": [ "https://www.cbiz.com/locations/cleveland-rockside-woods-ohio", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "BDO USA, LLP", "slug": "bdo-usa", "website": "https://www.bdo.com", "hq_country": "US", "offices": [ { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: BDO USA, LLP (place of business USA, not in remediation)", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "US member of the BDO network with its national headquarters in Chicago; listed as a PCI Qualified Security Assessor company.", "sources": [ "https://www.bdo.com/locations/bdo-chicago-office", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Eide Bailly LLP", "slug": "eide-bailly", "website": "https://www.eidebailly.com", "hq_country": "US", "offices": [ { "country": "US", "state": "ND", "city": "Fargo" } ], "frameworks": [ "HITRUST" ], "accreditations": [ { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Eide Bailly LLP", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "US accounting and advisory firm with an office in Fargo, North Dakota; listed as a HITRUST External Assessor.", "sources": [ "https://www.eidebailly.com/locations/fargo", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Armanino", "slug": "armanino", "website": "https://www.armanino.com", "hq_country": "US", "offices": [ { "country": "US", "state": "CA", "city": "San Ramon" }, { "country": "US", "state": "IL", "city": "Chicago" }, { "country": "US", "state": "NY", "city": "New York" }, { "country": "US", "state": "TX", "city": "Dallas" }, { "country": "US", "state": "MO", "city": "St. Louis" } ], "frameworks": [ "PCI DSS", "HITRUST", "ISO 27001", "ISO 27701", "ISO 42001" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Armanino Advisory LLC (place of business USA, not in remediation)", "checked": "2026-10-24" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Armanino LLP", "checked": "2026-10-24" }, { "registry": "ANAB Management Systems CB Directory", "registry_url": "https://anabdirectory.remoteauditor.com/", "status_text": "Accredited: Armanino Certified, LLC (Armanino-MS-1028, California) - ISO/IEC 27001, 27701, 42001", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "US accounting and consulting firm (first-listed office San Ramon, CA); listed as a PCI Qualified Security Assessor company and HITRUST External Assessor, with an ANAB-accredited ISO certification body (Armanino Certified, LLC).", "sources": [ "https://www.armanino.com/locations/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor", "https://anabdirectory.remoteauditor.com/" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "RubinBrown LLP", "slug": "rubinbrown", "website": "https://www.rubinbrown.com", "hq_country": "US", "offices": [ { "country": "US", "state": "MO", "city": "St. Louis" }, { "country": "US", "state": "CO", "city": "Denver" }, { "country": "US", "state": "IL", "city": "Chicago" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: RubinBrown LLP (place of business USA, not in remediation)", "checked": "2026-10-24" } ], "partner_tools": [], "summary": "US accounting and consulting firm with offices including St. Louis, Denver and Chicago; listed as a PCI Qualified Security Assessor company.", "sources": [ "https://www.rubinbrown.com/about/", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-24", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "PricewaterhouseCoopers LLP (PwC US)", "slug": "pwc-us", "website": "https://www.pwc.com/us/en.html", "hq_country": "US", "offices": [ { "country": "US", "state": "NY", "city": "New York" } ], "frameworks": [ "PCI DSS" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: PricewaterhouseCoopers LLP - USA (website www.pwc.com/us/security, place of business USA, not in remediation)", "checked": "2026-10-25" } ], "partner_tools": [], "summary": "US member firm of the PwC network; its site gives a registered address at 300 Madison Avenue, New York. Listed by the PCI Security Standards Council as a Qualified Security Assessor company.", "sources": [ "https://www.pwc.com/us/en/site/provider.html", "https://www.pwc.com/us/en/about-us/pwc-office-locations.html", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/" ], "last_checked": "2026-10-25", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "Wipfli LLP", "slug": "wipfli", "website": "https://www.wipfli.com/", "hq_country": "US", "offices": [ { "country": "US", "state": "WI", "city": "Milwaukee" } ], "frameworks": [ "PCI DSS", "HITRUST" ], "accreditations": [ { "registry": "PCI SSC Qualified Security Assessor list", "registry_url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "status_text": "Listed as QSA company: Wipfli Advisory LLC (previously CompliancePoint, Inc.; place of business USA, not in remediation)", "checked": "2026-10-25" }, { "registry": "HITRUST Authorized External Assessor list", "registry_url": "https://hitrustalliance.net/find-an-external-assessor", "status_text": "Listed as External Assessor: Wipfli LLP", "checked": "2026-10-25" } ], "partner_tools": [], "summary": "US accounting and advisory firm headquartered in Milwaukee, Wisconsin; its Wipfli Advisory LLC entity (formerly CompliancePoint) is a PCI Qualified Security Assessor company and Wipfli LLP is a HITRUST External Assessor.", "sources": [ "https://www.wipfli.com/about-wipfli/locations/wisconsin", "https://www.wipfli.com/about-wipfli/locations", "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/", "https://hitrustalliance.net/find-an-external-assessor" ], "last_checked": "2026-10-25", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "CyberQRT", "slug": "cyberqrt", "website": "https://cyberqrt.com/", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Severna Park" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: CyberQRT (accredited since Feb 27, 2026; location Maryland)", "checked": "2026-10-26" } ], "partner_tools": [], "summary": "Service-disabled veteran-owned security and IT firm based in Severna Park, Maryland; listed on the FedRAMP Marketplace as a recognized third-party assessment organization (3PAO) since February 2026.", "sources": [ "https://cyberqrt.com/", "https://cyberqrt.com/about-us/", "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json" ], "last_checked": "2026-10-26", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "SecureIT", "slug": "secureit", "website": "https://secureit.com/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Reston" } ], "frameworks": [ "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: SecureIT (recognized since Oct 28, 2013; 12110 Sunset Hills Road, Suite 600, Reston, VA 20190)", "checked": "2026-10-27" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: SecureIT", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Reston, Virginia-based cybersecurity advisory and assessment firm; listed on the FedRAMP Marketplace as a recognized independent assessor (3PAO) since October 2013.", "sources": [ "https://secureit.com/", "https://secureit.com/services/audit-assessment/", "https://secureit.com/wp-content/uploads/2025/11/Rizkly-Case-Study-SecureIT.pdf", "https://www.fedramp.gov/marketplace/assessors/138819/", "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [ { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "SecureIT" } ] }, { "name": "SteelToad", "slug": "steeltoad", "website": "https://www.steeltoad.com/", "hq_country": "US", "offices": [ { "country": "US", "state": "MD", "city": "Baltimore" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: SteelToad (recognized since Jun 18, 2025; 5520 Research Park Dr, Suite 100, Baltimore, MD)", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Baltimore, Maryland-based cybersecurity assessment firm; listed on the FedRAMP Marketplace as a recognized third-party assessment organization (3PAO) since June 2025.", "sources": [ "https://www.steeltoad.com/", "https://www.steeltoad.com/contact", "https://www.steeltoad.com/fedramp", "https://www.fedramp.gov/marketplace/assessors/203203/", "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "verified", "registry_listings": [] }, { "name": "TalaTek", "slug": "talatek", "website": "https://www.fedramp.gov/marketplace/assessors/136573/", "hq_country": "US", "offices": [ { "country": "US", "state": "AZ", "city": "Scottsdale" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: TalaTek, LLC (marketplace id 136573; recognized 2015-02-03)", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "TalaTek appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/136573/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/136573/", "as_of": "2026-10-27", "status": "listed", "registry_id": "136573", "legal_name": "TalaTek, LLC" } ] }, { "name": "DataLock Consulting Group", "slug": "datalock-consulting-group", "website": "https://www.fedramp.gov/marketplace/assessors/200883/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Fairfax" } ], "frameworks": [ "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: DataLock Consulting Group (marketplace id 200883; recognized 2021-06-30)", "checked": "2026-10-27" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Datalock Consulting Group", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "DataLock Consulting Group appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/200883/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/200883/", "as_of": "2026-10-27", "status": "listed", "registry_id": "200883", "legal_name": "DataLock Consulting Group" }, { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Datalock Consulting Group" } ] }, { "name": "Earthling Security", "slug": "earthling-security", "website": "https://www.fedramp.gov/marketplace/assessors/137339/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Potomac Falls" } ], "frameworks": [ "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Earthling Security, LLC (marketplace id 137339; recognized 2012-08-20)", "checked": "2026-10-27" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Earthling Security", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Earthling Security appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/137339/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/137339/", "as_of": "2026-10-27", "status": "listed", "registry_id": "137339", "legal_name": "Earthling Security, LLC" }, { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Earthling Security" } ] }, { "name": "Excentium", "slug": "excentium", "website": "https://www.fedramp.gov/marketplace/assessors/138266/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Reston" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Excentium, Inc. (marketplace id 138266; recognized 2015-06-15)", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Excentium appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/138266/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/138266/", "as_of": "2026-10-27", "status": "listed", "registry_id": "138266", "legal_name": "Excentium, Inc." } ] }, { "name": "GMS Registrar", "slug": "gms-registrar", "website": "https://www.fedramp.gov/marketplace/assessors/137012/", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Highland Heights" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: GMS Registrar Ltd (marketplace id 137012; recognized 2015-03-02)", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "GMS Registrar appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/137012/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/137012/", "as_of": "2026-10-27", "status": "listed", "registry_id": "137012", "legal_name": "GMS Registrar Ltd" } ] }, { "name": "Accenture Federal Services", "slug": "accenture-federal-services", "website": "https://www.fedramp.gov/marketplace/assessors/140508/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Chantilly" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Accenture Federal Services (marketplace id 140508; recognized 2020-02-13)", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Accenture Federal Services appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/140508/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/140508/", "as_of": "2026-10-27", "status": "listed", "registry_id": "140508", "legal_name": "Accenture Federal Services" } ] }, { "name": "Information Technology Company", "slug": "information-technology-company", "website": "https://www.fedramp.gov/marketplace/assessors/137644/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "Falls Church" } ], "frameworks": [ "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: Information Technology Company, LLC (marketplace id 137644; recognized 2015-07-15)", "checked": "2026-10-27" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: Information Technology Company", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Information Technology Company appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/137644/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/137644/", "as_of": "2026-10-27", "status": "listed", "registry_id": "137644", "legal_name": "Information Technology Company, LLC" }, { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "Information Technology Company" } ] }, { "name": "MindPoint Group", "slug": "mindpoint-group", "website": "https://www.fedramp.gov/marketplace/assessors/137724/", "hq_country": "US", "offices": [ { "country": "US", "state": "VA", "city": "McLean" } ], "frameworks": [ "FedRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: MindPoint Group, A Tyto Athene Company (marketplace id 137724; recognized 2015-02-25)", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "MindPoint Group appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/137724/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/137724/", "as_of": "2026-10-27", "status": "listed", "registry_id": "137724", "legal_name": "MindPoint Group, A Tyto Athene Company" } ] }, { "name": "RISC Point", "slug": "risc-point", "website": "https://www.fedramp.gov/marketplace/assessors/201825/", "hq_country": "US", "offices": [ { "country": "US", "state": "OH", "city": "Cleveland" } ], "frameworks": [ "FedRAMP", "GovRAMP" ], "accreditations": [ { "registry": "FedRAMP Marketplace - recognized assessors (3PAO)", "registry_url": "https://www.fedramp.gov/marketplace/assessors/", "status_text": "Listed as FedRAMP-recognized assessor: RISC Point (marketplace id 201825; recognized 2023-08-24)", "checked": "2026-10-27" }, { "registry": "GovRAMP accredited 3PAO list", "registry_url": "https://govramp.org/third-party-assessors", "status_text": "Listed as GovRAMP A2LA-accredited 3PAO: RISCPoint", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "RISC Point appears on the FedRAMP Marketplace — recognized assessors (3PAO) as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.fedramp.gov/marketplace/assessors/", "https://raw.githubusercontent.com/FedRAMP/marketplace-fedramp-gov-data/main/data.json", "https://www.fedramp.gov/marketplace/assessors/201825/", "https://govramp.org/third-party-assessors" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "fedramp-3pao", "registry_label": "FedRAMP Marketplace — recognized assessors (3PAO)", "source_url": "https://www.fedramp.gov/marketplace/assessors/201825/", "as_of": "2026-10-27", "status": "listed", "registry_id": "201825", "legal_name": "RISC Point" }, { "registry": "govramp-3pao", "registry_label": "GovRAMP accredited 3PAO list", "source_url": "https://govramp.org/third-party-assessors", "as_of": "2026-10-27", "status": "listed", "legal_name": "RISCPoint" } ] }, { "name": "Ark LLC (アーク有限責任監査法人)", "slug": "ark-llc", "website": "https://www.ark-audit.com/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution アーク有限責任監査法人, registration no. A25-0006, registered 2025-12-22, registration valid until 2027-12-21", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Ark LLC (アーク有限責任監査法人) appears on the ISMAP audit institution list as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.ark-audit.com/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A25-0006", "legal_name": "アーク有限責任監査法人", "valid_until": "2027-12-21" } ] }, { "name": "Grant Thornton Taiyo LLC (太陽有限責任監査法人)", "slug": "taiyo-llc", "website": "https://www.grantthornton.jp/en/aboutus/audit/", "hq_country": "Japan", "offices": [ { "country": "Japan", "state": "Tokyo", "city": "Tokyo" } ], "frameworks": [ "ISMAP" ], "accreditations": [ { "registry": "ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list", "registry_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "status_text": "Registered ISMAP audit institution 太陽有限責任監査法人, registration no. A26-0007, registered 2026-04-24, registration valid until 2028-04-23", "checked": "2026-10-27" } ], "partner_tools": [], "summary": "Grant Thornton Taiyo LLC (太陽有限責任監査法人) appears on the ISMAP audit institution list as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.", "sources": [ "https://www.ismap.go.jp/csm?id=audit_institution_list", "https://www.grantthornton.jp/en/aboutus/audit/" ], "last_checked": "2026-10-27", "government_body": false, "listing_tier": "registry_listed", "registry_listings": [ { "registry": "ismap", "registry_label": "ISMAP audit institution list", "source_url": "https://www.ismap.go.jp/csm?id=audit_institution_list", "as_of": "2026-10-27", "status": "listed", "registry_id": "A26-0007", "legal_name": "太陽有限責任監査法人", "valid_until": "2028-04-23" } ] } ] }