A-LIGN
HQ: United StatesVerified
Tampa-headquartered cybersecurity compliance firm covering ISO certification, HITRUST, FedRAMP, PCI DSS and CMMC assessments.
ISO 42001 auditors in the United States
15 Verified · ISO 42001 · office in United States · Verified first · All ISO 42001 firms · All firms in the United States
These firms have a current official-registry listing for ISO 42001 (the official registry named on each listing) and a published office in United States. Listings are checked facts, not endorsements or rankings.
Aprio
HQ: United StatesVerified
Atlanta-based CPA and advisory firm listed across SOC, ISO, FedRAMP, HITRUST, PCI DSS and CMMC assessor registries.
Armanino
HQ: United StatesVerified
US accounting and consulting firm (first-listed office San Ramon, CA); listed as a PCI Qualified Security Assessor company and HITRUST External Assessor, with an ANAB-accredited ISO certification body (Armanino Certified, LLC).
San Ramon, California · Chicago, Illinois · New York, New York · +2 more
Baker Tilly US
HQ: United StatesVerified
US advisory and accounting firm; listed as a PCI Qualified Security Assessor company, HITRUST External Assessor and FedRAMP-recognized assessor, with an ANAB-accredited ISO certification body (Baker Tilly Certifications LLC).
Coalfire
HQ: United StatesVerified
Cybersecurity advisory and assessment firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST assessor, ISO certification body and (via Coalfire Federal) CMMC C3PAO.
Chicago, Illinois · Alpharetta, Georgia · Bellevue, Washington · +2 more
ControlCase
HQ: United StatesVerified
Compliance assessment firm based in Fairfax, Virginia with an Indian entity in Mumbai; listed as PCI QSA, FedRAMP 3PAO, HITRUST assessor, C3PAO and CERT-In empanelled auditor. The Indian entity is NABCB-accredited for ISO/IEC 27001.
DEKRA Certification, Inc. (DEKRA US)
HQ: United StatesVerified
US management system certification body of the DEKRA group, based in Atlanta, Georgia; ANAB-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001 certification.
DQS Inc. (DQS US)
HQ: United StatesVerified
US entity of the DQS certification group, based in Schaumburg, Illinois; ANAB-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.
Palindrome Technologies
HQ: United StatesVerified
Princeton, New Jersey cybersecurity firm listed as a HITRUST External Assessor and an ANAB-accredited ISO/IEC 42001 certification body.
Perry Johnson Registrars, Inc.
HQ: United StatesVerified
Certification body headquartered in Troy, Michigan, offering accredited ISO/IEC 42001 AI management system certification among other standards.
Schellman
HQ: United StatesVerified
Tampa-based attestation and certification firm offering ISO certification, FedRAMP, PCI DSS, HITRUST and CMMC assessments.
Securisea
HQ: United StatesVerified
Security assessment firm with an Annapolis, Maryland address listed as a FedRAMP 3PAO, PCI QSA and HITRUST External Assessor, with an ANAB-accredited affiliate for ISO 27001 and ISO 42001.
Sensiba
HQ: United StatesVerified
California accounting and consulting firm whose GRC practice performs SOC, ISO and HITRUST engagements; its Drata directory listing describes its audits as remote-first.
San Jose, California · San Mateo, California · San Ramon, California · +3 more
SGS North America
HQ: United StatesVerified
US entity of the SGS group (Switzerland), accredited by ANAB for ISO/IEC 27001, 27701 and 42001 certification, with its local head office in Bloomfield, New Jersey.
TÜV Rheinland of North America
HQ: United StatesVerified
North American entity of the TÜV Rheinland group, based in Boxborough, Massachusetts; ANAB-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001 certification.
Other frameworks in the United States: PCI DSS (83) · CMMC (75) · HITRUST (63) · FedRAMP (43) · ISO 27001 (39) · GovRAMP (29) · SOC 2 (25) · SOC 1 (21) · ISO 27701 (20) · HIPAA (12) · CERT-In (6)
Other ISO 42001 locations: Illinois · Chicago · Georgia
FAQ
How many ISO 42001 firms are listed in the United States?
15 Verified firms are listed for ISO 42001 with an office in United States. This is not a ranking.
Which registry do you check for ISO 42001?
We check the official registry named on each listing. A framework tag appears only when that registry listed the firm at last check.
Which cities have the most listed firms?
Chicago (3), Atlanta (2), New York (2), San Ramon (2), Tampa (2), Alpharetta (1).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms match both the framework and the location.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Request received
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.