Schellman Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security certification services are used to provide assurance that products and services meet minimum standards of due care related to security programs and practices. These services include certification and attestation against voluntary or mandated standards and guidance, the most common of which are the:
•	International Organization for Standardization (ISO) 27001
•	Payment Card Industry (PCI) Data Security Standard (DSS)
•	Health Information Trust Alliance (HITRUST)
•	Health Insurance Portability and Accountability Act (HIPAA)
•	Health Information Technology for Economic and Clinical Health (HITECH)
•	Cloud Security Alliance (CSA) Security, Trust and Assurance Registry (STAR)
•	System and Organization Control (SOC) 2

Active

Find the top Organization Security Certification Services with Gartner. Compare and filter by verified Offering reviews and choose the service that’s right for your organization.

Organization Security Certification Services

Schellman Compliance and Attestation Services

Schellman

Principal Quality Manager

Schellman is very flexible for our challenging audit needs. Constantly working with us in our ever changing environment.

<50M USD

50M - 250M USD

1B - 3B USD

500M - 1B USD

250M - 500M USD

3B - 10B USD

30B + USD

10B - 30B USD

Infosec Manager

The pre-engagment is a little complex. They are not very flexible with dates or anything else for that matter.
The engamenet and testing is really great. The testers during the years have been on-point, knowledgeable and great.
The draft and final report is always a challenge to get. Although the company has been notified of our payment workflow, there is always a hiccup here or there to get it to the finish line.
The post engamenent is smooth. They are flexible and fast to start the engamenet for the next year. Not very flexible with pricing. 
At this point, there are cheaper and easier vendors to work with. 

Principal, Risk Management

I can confidently say that Schellman is the gold standard in information security auditing services.  Their subject matter expertise is expansive and their work is exceptional.  The cherry on top is the genuine nature with which they carry out their work.  I truly enjoy my time with my Schellman team.

Other...

A-LIGN

BSI Group

Coalfire

Deloitte

KPMG

Protiviti

Grant Thornton

LRQA

Schellman offers attestation and compliance services worldwide. The company holds numerous professional accreditations such as PCI Qualified Security Assessor, ISO Certification Body, HITRUST CSF Assessor, and FedRAMP 3PAO. Schellman focuses on blending specialized knowledge with real-world experience, providing high-quality service while ensuring independence. Its method is designed to foster enduring relationships, allowing clients to fulfill varied compliance objectives under one project team.

Schellman is a leading provider of attestation and compliance services. We are a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, and a FedRAMP 3PAO. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single project team.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Come to Schellman for their Expertise and Excellence....Stay for their Customer Service

Critical Review

Easy, not easy to work with

Likes and dislikes about

likes

dislikes