These firms have a published office in Massachusetts. A firm may also have offices elsewhere. Listings are checked facts, not endorsements or rankings.
HQ: United StatesVerified
SOC 1SOC 2HITRUSTCMMC
CPA and advisory firm with offices across the US; performs SOC 1 and SOC 2 examinations and is listed as a HITRUST External Assessor and CMMC C3PAO.
Raleigh, North Carolina · Carlsbad, California · Torrance, California · +51 more
HQ: United StatesVerified
CMMC
Burlington, Massachusetts firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Burlington, Massachusetts
HQ: United StatesVerified
ISO 27001FedRAMPHITRUST
US member firm of the Deloitte network. ANAB-accredited ISO/IEC 27001 certification body, FedRAMP-recognized third-party assessor and HITRUST External Assessor.
New York, New York · Chicago, Illinois · Arlington, Virginia · +15 more
HQ: United StatesVerified
PCI DSSHITRUST
US member firm of the EY global network; listed as a PCI DSS Qualified Security Assessor and a HITRUST External Assessor.
New York, New York · Chicago, Illinois · San Francisco, California · +11 more
HQ: United StatesVerified
HITRUSTPCI DSSCMMC
US accounting and advisory firm with offices in many states; listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Charlotte, North Carolina · Appleton, Wisconsin · Asheville, North Carolina · +72 more
HQ: United StatesVerified
SOC 2HITRUSTPCI DSSHIPAA
Atlanta-based CPA and advisory firm whose cybersecurity practice covers SOC 2, HITRUST, HIPAA and PCI DSS; listed as a PCI QSA and HITRUST External Assessor.
Atlanta, Georgia · Alpharetta, Georgia · Auburn, Alabama · +12 more
HQ: United StatesVerified
PCI DSS
Peabody, Massachusetts IT, security and business consulting firm listed as a PCI Qualified Security Assessor (QSA) company.
Peabody, Massachusetts
HQ: United StatesVerified
ISO 27001
US business assurance entity of Intertek (UK), with offices in Kentwood, Michigan and Boxborough, Massachusetts; ANAB-accredited for ISO/IEC 27001 certification.
Kentwood, Michigan · Boxborough, Massachusetts
HQ: United StatesVerified
CMMC
Framingham, Massachusetts firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Framingham, Massachusetts
HQ: United StatesVerified
FedRAMPPCI DSS
US member firm of the KPMG network. FedRAMP-recognized third-party assessor and PCI Qualified Security Assessor company.
New York, New York · Chicago, Illinois · McLean, Virginia · +9 more
HQ: United StatesVerified
ISO 27001ISO 27701
US entity of the NQA certification group with its North American headquarters in Acton, Massachusetts, offering accredited ISO/IEC 27001 and ISO/IEC 27701 certification.
Acton, Massachusetts
HQ: United StatesVerified
SOC 1SOC 2HITRUSTPCI DSS
Accounting and advisory firm with offices in Michigan, Illinois, Colorado, Ohio and other states; its cybersecurity practice covers SOC 1 and SOC 2 reporting, PCI DSS and HITRUST.
Southfield, Michigan · Broomfield, Colorado · Denver, Colorado · +17 more
HQ: United StatesVerified
SOC 1SOC 2PCI DSS
Accounting, technology and advisory firm with US offices in the Midwest, Mid-Atlantic and New England and offices in India; its services include SOC reporting and PCI DSS assessments.
Chicago, Illinois · Alexandria, Virginia · Marlborough, Massachusetts · +13 more
HQ: United StatesVerified
ISO 27001ISO 27701ISO 42001
North American entity of the TÜV Rheinland group, based in Boxborough, Massachusetts; ANAB-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001 certification.
Boxborough, Massachusetts
HQ: United StatesVerified
ISO 27001
US subsidiary of the TÜV SÜD group (Germany), accredited by ANAB for ISO/IEC 27001 certification, headquartered in Wakefield, Massachusetts.
Wakefield, Massachusetts
HQ: United StatesVerified
HITRUSTPCI DSS
Boston-based firm offering HITRUST and PCI DSS assessment services.
Boston, Massachusetts · Springfield, Massachusetts · Miami, Florida · +1 more
FAQ
How many audit firms are listed in Massachusetts?
16 Verified firms have a published office in Massachusetts. Pages exist only where at least 3 Verified firms match. This is not a ranking.
Which registry listings do you check?
Firms on this page appear because an official registry listed them for at least one published framework (SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS, CMMC). Each firm page names the registry row and the date checked.
Which cities in Massachusetts have the most listed firms?
Chicago (7), Atlanta (6), Denver (6), Boston (5), Dallas (5), Houston (5).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement, and we do not email firms automatically. Get matched.