Organization Security Certification Services

Security certification services are used to provide assurance that products and services meet minimum standards of due care related to security programs and practices. These services include certification and attestation against voluntary or mandated standards and guidance, the most common of which are the:
•	International Organization for Standardization (ISO) 27001
•	Payment Card Industry (PCI) Data Security Standard (DSS)
•	Health Information Trust Alliance (HITRUST)
•	Health Insurance Portability and Accountability Act (HIPAA)
•	Health Information Technology for Economic and Clinical Health (HITECH)
•	Cloud Security Alliance (CSA) Security, Trust and Assurance Registry (STAR)
•	System and Organization Control (SOC) 2

Schellman Compliance and Attestation Services

Schellman

MegaplanIT Organization Security Certification Services

MegaplanIT

BSI Professional Services

BSI Group

A2SECURE Organization Security Certification Services

A2SECURE

Grant Thornton Risk Advisory Services

Grant Thornton

KPMG IT Attestation Services

KPMG

Coalfire Certificate Program

Coalfire

ISO 27001 Compliance Audit Services

IARM Information Security

PwC Certification Consulting

A-LIGN Organization Security Certification Services

A-LIGN

Tohmatsu Evaluation and Certification Organization (TECO)

Deloitte

LRQA ISO Certification and Training

LRQA

Not meeting expectations for most of the audit services provided by KPMG. Among others were, missing delivery dates, re-work providing requested evidence, willful misconduct, lack of management involvement, inefficiencies collecting audit evidence, lack of quality controls, not using good audit methods while evaluating clients business process and controls.    

IT Governance & Processes Manager

They have good knowledge and experience in IT atestations. They are an intrnational company and can bring a consultant from another country if the local consultants has lack of experience.

Infosec Manager

The pre-engagment is a little complex. They are not very flexible with dates or anything else for that matter.
The engamenet and testing is really great. The testers during the years have been on-point, knowledgeable and great.
The draft and final report is always a challenge to get. Although the company has been notified of our payment workflow, there is always a hiccup here or there to get it to the finish line.
The post engamenent is smooth. They are flexible and fast to start the engamenet for the next year. Not very flexible with pricing. 
At this point, there are cheaper and easier vendors to work with. 

Principal, Risk Management

I can confidently say that Schellman is the gold standard in information security auditing services.  Their subject matter expertise is expansive and their work is exceptional.  The cherry on top is the genuine nature with which they carry out their work.  I truly enjoy my time with my Schellman team.

Principal Quality Manager

Schellman is very flexible for our challenging audit needs. Constantly working with us in our ever changing environment.

Schellman is a true partner in every sense of the word. They work closely with us on the required parts of assessments and certifications, and this is always solid and effective (as enjoyable as compliance work can be :)). But more importantly, they help us set strategy, providing expert feedback and advice on emerging standards and marketplace changes. Whether bread-and-butter ISO 27001 certifications and Type 2 SOC 2 examinations, or additional services such as NIST SP 800-171 / CMMC, or looking ahead to our possible work towards FedRAMP or ISO 42001, they are always happy to work with us to not only do the work, but also ensure that we do the right work at the right time. A genuine pleasure to work with.

CHIEF INFORMATION SECURITY OFFICER

They are hyper-focused on the customer. They have mature, streamlined, and effective delivery capabilities. The people performing the service and the people managing them have great communication skills. They also have a very easy to use user portal that is intuitive to use. 

Director of Security Compliance

Working with Schellman on the assessments services to date has been an exceptional experience.

VP, IT Security and Risk Management

We have used Schellman to perform our ISO 27001 certification for the last 6 years or so. 

Senior Director of Compliance

Schellman is an exemplary partner to help us achieve our business goals. Highly professional, ethical staff, easy to work with and fair in contract negotiations. Schellman has invested a lot of resources in maintaining a solid relationship with my company. 

VICE PRESIDENT

We have been working with Schellman for the last 8 years on various certifications and audits and we appreciate the professionalism and the quality of the auditors. The relationship is very good. Auditors really understand how the software and cloud services industry works and that makes audits fluid and interactions with interviewed employees easy.

Chief Information Security Officer

My elaborate and complex industry certifications needs are made simple and affordable. 

Director of Security

Couldn't be happier with the overall service and certification process.  

KPMG IT Attestation Services vs Schellman Compliance and Attestation Services

KPMG IT Attestation Services

Ratings breakdown

Likes and Dislikes

Top Alternatives

Categories

Schellman Compliance and Attestation Services

Ratings breakdown

Likes and Dislikes

Top Alternatives

Categories