Auditor Directory
NIST 800-171 Auditors
NIST Special Publication 800-171 Revision 3: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Browse accredited firms offering NIST 800-171 audits. Filter by location, size, and budget.
29 firms — interactive filtering loads below.
Abacode
Tampa, FL
Abacode is a Tampa-based managed cybersecurity and compliance provider aligning clients to CMMC, SOC 2, ISO 27001, and HIPAA frameworks.
ACI Federal
Alexandria, VA
ACI Federal is a FedRAMP 3PAO and CMMC C3PAO serving federal agencies and government contractors.
ASM Research
Fairfax, VA
ASM Research is a FedRAMP 3PAO and CMMC assessor for federal government contractors.
ATX Defense
Austin, TX
ATX Defense is the first Google Partner to become a CMMC C3PAO, specializing in FedRAMP and CMMC assessments for defense contractors in Austin, TX.
Beryllium InfoSec
Minneapolis, MN
Beryllium InfoSec is a Minneapolis-based compliance consultancy helping DoD contractors meet CMMC, NIST 800-171, and DFARS requirements via its Cuick Trac platform.
BlueVoyant
New York, NY
BlueVoyant is a New York-based cyber defense company and CMMC RPO providing NIST 800-171 and CMMC compliance services to defense contractors.
CRI Advantage
Virginia Beach, VA
CRI Advantage specializes in FedRAMP, CMMC, and NIST compliance assessments for government contractors.
CSP & Associates
Reston, VA
CSP & Associates is a FedRAMP 3PAO and CMMC assessment firm serving government contractors.
CyberGuard360
Orlando, FL
CyberGuard360 provides SOC 2, CMMC, and NIST compliance assessments for SMBs and government contractors.
CyberSheath
Reston, VA
CyberSheath is a Reston, VA compliance firm dedicated to DoD contractor requirements, delivering CMMC, NIST 800-171, and DFARS assessment and managed services.
FTI Consulting
Washington, DC
FTI Consulting is a global expert firm founded in 1982, headquartered in Washington, DC, offering cybersecurity, risk, and regulatory compliance advisory.
IBSS Corporation
San Antonio, TX
IBSS Corporation is a 30+ year federal cybersecurity provider and CMMC C3PAO maintaining strict separation between assessment and consulting services.
Kratos Defense
San Diego, CA
Kratos Defense is one of the largest FedRAMP 3PAOs and among the first authorized CMMC C3PAOs, assessing cloud providers and defense contractors.
MindPoint Group
Alexandria, VA
MindPoint Group, a Tyto Athene company, is an Alexandria, VA FedRAMP 3PAO providing FedRAMP, FISMA, SOC 2, and ISO 27001 assessment services.
Norse Consulting Group
Raleigh, NC
Norse Consulting Group offers SOC 2, ISO 27001, and CMMC assessments for mid-market companies.
Norse Shield
Washington, DC
Norse Shield specializes in CMMC, FedRAMP, and NIST compliance for defense contractors.
OCD Tech
Braintree, MA
OCD Tech is a Braintree, MA IT audit and cybersecurity firm delivering SOC 2 reporting, CMMC readiness, and IT security assessments across New England.
Pondurance
Indianapolis, IN
Pondurance provides managed detection and compliance assessments including SOC 2, ISO 27001, and CMMC.
RedPoint Cybersecurity
San Antonio, TX
RedPoint Cybersecurity offers CMMC, SOC 2, and NIST compliance assessments in Texas.
Redspin
Duluth, GA
Redspin is the first authorized CMMC C3PAO in the US, conducting ~25% of all CMMC Level 2 assessments with former DoD cybersecurity professionals.
RISCPoint
Richmond, VA
RISCPoint is a security and compliance advisory firm and FedRAMP/StateRAMP 3PAO covering SOC 2, ISO 27001, CMMC, HITRUST, and federal frameworks.
Seiso
Pittsburgh, PA
Seiso is a Pittsburgh-based cybersecurity and GRC consultancy guiding growing companies through ISO 27001, SOC 2, CMMC, and NIST compliance.
Sera-Brynn
Chesapeake, VA
Sera-Brynn is a veteran-owned Virginia firm operating as an authorized CMMC C3PAO and FedRAMP 3PAO for defense and government cloud assessments.
Silent Sector
Scottsdale, AZ
Silent Sector is a Scottsdale, AZ cybersecurity firm guiding mid-market companies through SOC 2, ISO 27001, CMMC, and HIPAA compliance.
StackArmor
Tysons, VA
StackArmor specializes in FedRAMP and CMMC compliance for government cloud deployments.
Summit 7 Systems
Huntsville, AL
Summit 7 Systems specializes in CMMC and NIST compliance for defense industrial base contractors.
System 1 Inc.
Denver, CO
System 1 Inc. is a Denver-area cybersecurity consultancy advising government and critical infrastructure clients on IT audit and NIST-based compliance.
TechGuard Security
Chesterfield, MO
TechGuard Security is a woman-owned Chesterfield, MO cybersecurity firm providing CMMC readiness, NIST 800-171 assessments, and IT audit services.
Telos Compliance
Ashburn, VA
Telos provides FedRAMP, CMMC, and NIST compliance assessment services for government contractors.