CERT-In empanelled auditors in the United States

6 Verified · CERT-In · office in United States · Verified first · All CERT-In firms · All firms in the United States

These firms appear on CERT-In’s public empanelled-auditor list and have a published office in United States. Listings are checked facts, not endorsements or rankings.

ControlCase

HQ: United StatesVerified

ISO 27001ISO 27701ISO 42001HITRUST +5

Compliance assessment firm based in Fairfax, Virginia with an Indian entity in Mumbai; listed as PCI QSA, FedRAMP 3PAO, HITRUST assessor, C3PAO and CERT-In empanelled auditor. The Indian entity is NABCB-accredited for ISO/IEC 27001.

Fairfax, Virginia · Mumbai, Maharashtra

SISA

HQ: IndiaVerified

CERT-InPCI DSSHITRUST

Bengaluru-headquartered information security firm listed as a CERT-In empanelled auditor, PCI QSA and HITRUST External Assessor.

Bengaluru, Karnataka · Irving, Texas

Other frameworks in the United States: PCI DSS (83) · CMMC (75) · HITRUST (63) · FedRAMP (43) · ISO 27001 (39) · GovRAMP (29) · SOC 2 (25) · SOC 1 (21) · ISO 27701 (20) · ISO 42001 (15) · HIPAA (12)

Other CERT-In locations: Texas

FAQ

How many CERT-In firms are listed in the United States?

6 Verified firms are listed for CERT-In with an office in United States. This is not a ranking.

Which registry do you check for CERT-In?

We check CERT-In empanelled information security auditing organisations. A framework tag appears only when that registry listed the firm at last check.

Which cities have the most listed firms?

Cupertino (1), Dallas (1), Fairfax (1), Irving (1), Plano (1), Wilmington (1).

How do I get matched with a listed firm?

Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement. Get matched.

See the listing method. Pages exist only where at least 3 Verified firms match both the framework and the location.

Related guides: CERT-In empanelled auditors

Get matched with verified auditors

We'll review your request; no automatic emails. Introductions start later. This does not send a message to any firm and does not include prices. Not a ranking.

Framework(s) (select all that apply)