Ampcus Cyber
HQ: United StatesVerified
Chantilly, Virginia cybersecurity firm listed as a PCI QSA (places of business include USA, UK and India) and HITRUST External Assessor.
HITRUST External Assessors in Virginia
13 Verified · HITRUST · office in Virginia · Verified first · All HITRUST firms · All firms in Virginia
These firms have a current official-registry listing for HITRUST (HITRUST External Assessor list) and a published office in Virginia. Listings are checked facts, not endorsements or rankings.
Cherry Bekaert
HQ: United StatesVerified
CPA and advisory firm with offices across the US; performs SOC 1 and SOC 2 examinations and is listed as a HITRUST External Assessor and CMMC C3PAO.
Raleigh, North Carolina · Carlsbad, California · Torrance, California · +51 more
Coalfire
HQ: United StatesVerified
Cybersecurity advisory and assessment firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST assessor, ISO certification body and (via Coalfire Federal) CMMC C3PAO.
Chicago, Illinois · Alpharetta, Georgia · Bellevue, Washington · +2 more
ControlCase
HQ: United StatesVerified
Compliance assessment firm based in Fairfax, Virginia with an Indian entity in Mumbai; listed as PCI QSA, FedRAMP 3PAO, HITRUST assessor, C3PAO and CERT-In empanelled auditor. The Indian entity is NABCB-accredited for ISO/IEC 27001.
Crimson Security
HQ: United StatesVerified
Reston, Virginia security compliance and assessment firm listed as a PCI Qualified Security Assessor (QSA) company and a HITRUST External Assessor; its site offers HIPAA-based assessments.
Deloitte & Touche LLP (Deloitte US)
HQ: United StatesVerified
US member firm of the Deloitte network. ANAB-accredited ISO/IEC 27001 certification body, FedRAMP-recognized third-party assessor and HITRUST External Assessor.
New York, New York · Chicago, Illinois · Arlington, Virginia · +15 more
Ernst & Young LLP (EY US)
HQ: United StatesVerified
US member firm of the EY global network; listed as a PCI DSS Qualified Security Assessor and a HITRUST External Assessor.
New York, New York · Chicago, Illinois · San Francisco, California · +11 more
Forvis Mazars
HQ: United StatesVerified
US accounting and advisory firm with offices in many states; listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Charlotte, North Carolina · Appleton, Wisconsin · Asheville, North Carolina · +72 more
Intraprise Health
HQ: United StatesVerified
Reston, Virginia healthcare cybersecurity firm listed as a HITRUST External Assessor; offers HIPAA security and privacy assessments.
Kompleye
HQ: United StatesVerified
Reston, Virginia attestation firm listed for SOC, ISO certification, FedRAMP, HITRUST and CMMC assessments.
Kratos
HQ: United StatesVerified
Defense and technology company listed (as Kratos / Kratos Technology & Training Solutions) as a FedRAMP 3PAO, HITRUST External Assessor and CMMC C3PAO.
Schneider Downs
HQ: United StatesVerified
Pittsburgh-based CPA and advisory firm with offices in Columbus and McLean; performs SOC examinations and is listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Pittsburgh, Pennsylvania · Columbus, Ohio · McLean, Virginia
Tevora
HQ: United StatesVerified
Irvine, California cybersecurity firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Irvine, California · Fairfax, Virginia · Scottsdale, Arizona
Other frameworks in Virginia: CMMC (25) · FedRAMP (20) · PCI DSS (13) · GovRAMP (12) · ISO 27001 (5) · ISO 27701 (4) · SOC 1 (4) · SOC 2 (4)
Other HITRUST locations: the United States · California · Florida · Chicago · Georgia · Illinois · Texas · Atlanta · Pennsylvania · Tennessee
FAQ
How many HITRUST firms are listed in Virginia?
13 Verified firms are listed for HITRUST with an office in Virginia. This is not a ranking.
Which registry do you check for HITRUST?
We check HITRUST External Assessor list. A framework tag appears only when that registry listed the firm at last check.
Which cities have the most listed firms?
Chicago (5), Atlanta (4), Dallas (4), Denver (4), Houston (4), Boston (3).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms match both the framework and the location.
Related guides: HITRUST External Assessors · PCI DSS QSA companies
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Request received
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.