Auditor Directory
CSA CCM Auditors
Cloud Security Alliance Cloud Controls Matrix
Browse accredited firms offering CSA CCM audits. Filter by location, size, and budget.
34 firms — interactive filtering loads below.
BSI Group
London, United Kingdom
BSI Group is the world's leading standards and certification body, providing ISO 27001, ISO 22301, and other management system certifications globally.
Bureau Veritas
Paris, France
Bureau Veritas is a world-leading testing, inspection, and certification company providing ISO 27001 and management system certifications in 140+ countries.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
DarkMatter Group
Abu Dhabi, UAE
DarkMatter Group is a UAE cybersecurity firm offering ISO 27001, SOC 2, and NESA compliance assessments.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
DNV
Oslo, Norway
DNV is a global assurance and risk management company providing ISO 27001, ISO 22301, and management system certifications across 100+ countries worldwide.
Ensign InfoSecurity
Singapore
Ensign InfoSecurity is Singapore's largest cybersecurity firm offering ISO 27001, SOC 2, and MTCS assessments.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
EY Singapore
Singapore
EY Singapore provides Big Four audit, assurance, and advisory services with strong cybersecurity and regulatory compliance capabilities for the ASEAN market.
Help AG
Dubai, UAE
Help AG is one of the largest cybersecurity firms in the Middle East offering ISO 27001, SOC 2, and NESA assessments.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
KPMG China
Beijing, China
KPMG China is one of China's largest Big Four firms, providing audit, assurance, and advisory services with expertise in Chinese regulatory compliance.
KPMG Singapore
Singapore
KPMG Singapore is KPMG's ASEAN hub, providing Big Four audit, assurance, tax, and advisory services with strong regulatory and compliance expertise.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
LRQA
London, United Kingdom
LRQA is a global assurance and certification provider specializing in ISO 27001, ISO 22301, cybersecurity, and management system certifications worldwide.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC China
Shanghai, China
PwC China is the largest Big Four firm in China, providing audit, assurance, and advisory services with deep expertise in Chinese regulatory compliance.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
SGS
Geneva, Switzerland
SGS is the world's largest testing, inspection, and certification company, providing ISO 27001 and management system certifications across 140+ countries.
ST Engineering Cybersecurity
Singapore
ST Engineering Cybersecurity is a leading Singapore firm offering ISO 27001, SOC 2, and MTCS assessments.
TUV Rheinland
Cologne, Germany
TUV Rheinland is a world-leading German certification and testing body providing ISO 27001, TISAX, and management system certifications across 60+ countries.
TUV SUD
Munich, Germany
TUV SUD is a leading German testing, inspection, and certification body providing ISO 27001, TISAX, and management system certifications across 50+ countries.
Armanino
San Ramon, California
Armanino is a top-25 US CPA firm based in California with strong technology sector focus, offering SOC 2, ISO 27001, and cybersecurity assessments.
ControlCase
Fairfax, Virginia
ControlCase is a compliance and cybersecurity firm specializing in PCI DSS, SOC 2, ISO 27001, and HITRUST audits with a unified compliance approach.
Insight Assurance
Miami, Florida
Insight Assurance is a Florida-based CPA firm specializing in SOC 2, ISO 27001, and HITRUST audits for startups and growing technology companies.
Intertek
London, United Kingdom
Intertek is a global quality assurance provider offering ISO 27001, ISO 22301, and management system certifications through operations in 100+ countries.
ISS Consulting (Singapore)
Singapore
ISS Consulting offers ISO 27001, SOC 2, PCI DSS, and MTCS assessments in Singapore.
LGMS
Kuala Lumpur, Malaysia
LGMS is a Malaysian cybersecurity firm offering ISO 27001, SOC 2, and PCI DSS assessments.
NQA
Warwick, United Kingdom
NQA is a UKAS and ANAB accredited certification body providing affordable ISO 27001, ISO 22301, and management system certifications for organizations globally.
Prescient Assurance
Toronto, Canada
Prescient Assurance is a startup-friendly CPA firm offering affordable SOC 2, ISO 27001, and HIPAA audits with fast turnaround for growing companies.
Schellman (EU Office)
Frankfurt, Germany
Schellman EU is the European office of Schellman & Company, providing SOC 2, ISO 27001, GDPR, and C5 compliance audits for European technology companies.
Sensiba
San Jose, California
Sensiba (formerly SingerLewak) is a California-based CPA firm specializing in SOC 2, ISO 27001, and compliance audits for technology and SaaS companies.
Vista InfoSec
Mumbai, India
Vista InfoSec is a global cybersecurity and compliance firm offering PCI DSS, SOC 2, ISO 27001, and GDPR assessments at competitive international pricing.