ARM Standard
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
Compliance audit firms in Japan: ISO 27001, ISO 27701, PCI DSS, ISMAP
47 Verified · 2 registry-listed firms with an office in Japan · Verified first · All auditors
These firms have a published office in Japan. A firm may also have offices elsewhere. Listings are checked facts, not endorsements or rankings.
ASR
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
BDO Sanyu & Co.
HQ: JapanVerified
Tokyo-based audit firm (BDO member firm in Japan) registered as an ISMAP audit institution for Japanese government cloud security assessments.
BL-QE
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.
BroadBand Security (BBSec)
HQ: JapanVerified
Tokyo-based security services firm listed by the PCI SSC as a QSA company.
BSI Group Japan
HQ: JapanVerified
Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 27701 and ISO 22301 (business continuity) certification, also listed by the PCI SSC as a QSA company.
Bureau Veritas Japan
HQ: JapanVerified
Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO 22301 (business continuity) certification.
Deloitte Tohmatsu Cyber LLC
HQ: JapanVerified
Tokyo-based cybersecurity firm of the Deloitte Tohmatsu Group listed by the PCI SSC as a QSA company.
Deloitte Touche Tohmatsu LLC
HQ: JapanVerified
Tokyo-based audit firm of the Deloitte Tohmatsu Group registered as an ISMAP audit institution for Japanese government cloud security assessments.
DFEII System Certification Center
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
DNV Business Assurance Japan
HQ: JapanVerified
Kobe-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
DQS Japan
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
Ernst & Young ShinNihon LLC (EY ShinNihon)
HQ: JapanVerified
Tokyo-based audit firm of the EY network registered as an ISMAP audit institution for Japanese government cloud security assessments.
GRCS
HQ: JapanVerified
Tokyo-based governance, risk and security services firm listed by the PCI SSC as a QSA company, with an office in Yokohama.
ICMS
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification, also listed by the PCI SSC as a QSA company.
ICMS Solutions
HQ: JapanVerified
Tokyo-based information security services firm listed by the PCI SSC as a QSA company.
IMJ
HQ: JapanVerified
Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.
IS Certification
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
ISA
HQ: JapanVerified
Nagoya-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
J-VAC
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
JACO
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 27701 and ISO 22301 (business continuity) certification.
Japan Security Rating Organization (JaSRO)
HQ: JapanVerified
Tokyo-based general incorporated association registered as an ISMAP audit institution, offering ISMAP information security audits.
JATE ISMS Registration Center
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
JCQA
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
JET (Japan Electrical Safety & Environment Technology Laboratories)
HQ: JapanVerified
Tokyo-based testing and certification foundation whose ISO Registration Center is accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification.
JICQA
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
JMAQA
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
JQA (Japan Quality Assurance Organization)
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 27701 and ISO 22301 (business continuity) certification.
JSA Solutions
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
JUSE ISO Center
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.
KPMG AZSA LLC
HQ: JapanVerified
Tokyo-based audit firm of the KPMG network registered as an ISMAP audit institution for Japanese government cloud security assessments.
LAP
HQ: JapanVerified
Osaka-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
Leon Technology
HQ: JapanVerified
Tokyo-based security firm listed by the PCI SSC as a QSA company, with offices in Osaka, Fukuoka and Takaoka.
Tokyo, Tokyo · Osaka, Osaka · Fukuoka, Fukuoka · +1 more
MSA
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 27701 certification.
NEC Security
HQ: JapanVerified
Tokyo-based security services company of the NEC group listed by the PCI SSC as a QSA company.
Net One Systems
HQ: JapanVerified
Tokyo-based network and IT systems integrator listed by the PCI SSC as a QSA company.
NKKKQA (Nippon Kaiji Kentei Quality Assurance)
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) certification, with a Kansai branch in Osaka.
NRI SecureTechnologies
HQ: JapanVerified
Tokyo-based security services firm listed by the PCI SSC as a QSA company, with offices in Yokohama, Osaka and Irvine, California.
Tokyo, Tokyo · Yokohama, Kanagawa · Osaka, Osaka · +1 more
NTT DATA INTELLILINK
HQ: JapanVerified
Tokyo-based IT and security services company listed by the PCI SSC as a QSA company, with an office in Osaka.
Perry Johnson Registrar Japan
HQ: JapanVerified
Tokyo-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS) and ISMS cloud security (ISO/IEC 27017) certification.
PwC Japan LLC
HQ: JapanVerified
Tokyo-based audit firm of the PwC network registered as an ISMAP audit institution for Japanese government cloud security assessments, with offices in Nagoya, Kyoto, Osaka and Fukuoka.
Tokyo, Tokyo · Nagoya, Aichi · Kyoto, Kyoto · +2 more
Secure Pro
HQ: JapanVerified
Tokyo-based payment security firm listed by the PCI SSC as a QSA company.
SGS Japan
HQ: JapanVerified
Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017), ISO/IEC 42001 (AI management) and ISO 22301 (business continuity) certification.
SP Compliance
HQ: JapanVerified
Tokyo-based firm providing PCI DSS assessments, listed by the PCI SSC as a QSA company.
TISI Inc.
HQ: JapanVerified
Tokyo-based IT services company (TISI Inc., formed by the July 2026 merger of TIS and INTEC) listed by the PCI SSC as a QSA company.
TÜV Rheinland Japan
HQ: JapanVerified
Yokohama-based certification body accredited by ISMS-AC for ISO/IEC 27001 (ISMS), ISMS cloud security (ISO/IEC 27017) and ISO/IEC 42001 (AI management) certification.
UBsecure, Inc.
HQ: JapanVerified
Tokyo-based security assessment firm listed by the PCI SSC as a QSA company.
Ark LLC (アーク有限責任監査法人)
HQ: JapanRegistry-listed
Ark LLC (アーク有限責任監査法人) appears on the ISMAP audit institution list as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.
Grant Thornton Taiyo LLC (太陽有限責任監査法人)
HQ: JapanRegistry-listed
Grant Thornton Taiyo LLC (太陽有限責任監査法人) appears on the ISMAP audit institution list as of 2026-10-27. This firm appears on the official registry, not independently verified by Agent Index.
Framework pages for this location
Related locations: Tokyo city, Japan · Tokyo prefecture, Japan · Kanagawa, Japan · Yokohama, Kanagawa · Osaka city, Japan · Osaka prefecture, Japan
FAQ
How many audit firms are listed in Japan?
47 Verified · 2 registry-listed firms have a published office in Japan. Pages exist only where at least 3 Verified firms match. This is not a ranking.
Which registry listings do you check?
Firms on this page appear because an official registry listed them for at least one published framework (ISO 27001, ISO 27701, PCI DSS, ISMAP). Each firm page names the registry row and the date checked.
Which cities in Japan have the most listed firms?
Tokyo (41), Yokohama (7), Osaka (6), Fukuoka (2), Nagoya (2), Kobe (1).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement, and we do not email firms automatically. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms have an office. Related: ISMAP audit institutions.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Request received
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.