Schellman offers attestation and compliance services worldwide. The company holds numerous professional accreditations such as PCI Qualified Security Assessor, ISO Certification Body, HITRUST CSF Assessor, and FedRAMP 3PAO. Schellman focuses on blending specialized knowledge with real-world experience, providing high-quality service while ensuring independence. Its method is designed to foster enduring relationships, allowing clients to fulfill varied compliance objectives under one project team.
Do You Manage Peer Insights at Schellman?
Access Vendor Portal to update and manage your profile.
Their expertise shines through it both their deliverables and the way they continually push our organization to mature year after year.
It is cheap and the testers are knowledgeable and reasonable.
Schellman conducts all 6 audit simultaneously and allows one upload of one piece evidence can be used across all 6 audits, by 6 different auditors. If there is a question on a piece of evidence, they will coordinate their question(s) and only 1 auditor would reach out to us. This is instead of up to 6 different auditors all asking the same questions. As we are becoming a global organization, I am finding out from our teammates in the rest of the world that other certification bodies do not do this. I also like the online application. It paints a really good picture of our audits and allows for communication with the auditor directly on a piece of evidence or on a specific request. Also, it will show both the auditor and auditee previous years communication/evidence for each control. So really there isn't a lot of back and forth as all parties have the necessary information available to them with a click. In the tool, there is what I term as an Executive Management dashboard. Breaking everything our in multiple ways. Either by audit, evidence request and department. It allows me to share the high level picture with all departments management as to the status of each audit and requests. It shows all requests that have been accepted, submitted and not reviewed, kicked back to us for more clarification or ones we haven't started working on yet.
Nothing comes to mind.
They are busy this time of the year and the over allocate resources. So the draft and final report delivery is always a challenge.
They do not cover all ISO standards currently, although are working on obtaining the ones that are important for us. For billing purposes, there are two separate companies, so twice the paperwork up front. Occasionally will take a little longer to send final reports out.