Auditor Directory
NIST CSF Auditors
NIST Cybersecurity Framework (CSF) 2.0
Browse accredited firms offering NIST CSF audits. Filter by location, size, and budget.
325 firms — interactive filtering loads below.
Baker Tilly
Chicago, Illinois
Baker Tilly is a top-10 global advisory CPA firm network with 43,000+ professionals in 141 countries, serving mid-market and growth companies.
BDO International
Brussels, Belgium
BDO is the fifth-largest professional services network globally, providing audit, tax, and advisory services through member firms in over 160 countries.
Bridewell Consulting
Reading, United Kingdom
Bridewell Consulting is a UK cybersecurity firm offering ISO 27001, SOC 2, PCI DSS, and NIS2 assessments.
BSI Group
London, UK
BSI Group is the world's first national standards body and largest ISO certification body, offering ISO 27001, ISO 27701, SOC 2, and Cyber Essentials audits globally.
BSI Group
London, United Kingdom
BSI Group is the world's leading standards and certification body, providing ISO 27001, ISO 22301, and other management system certifications globally.
Bureau Veritas
Paris, France
Bureau Veritas is a world-leading testing, inspection, and certification company providing ISO 27001 and management system certifications in 140+ countries.
CliftonLarsonAllen LLP
Minneapolis, MN
CliftonLarsonAllen (CLA) is a top-eight US CPA firm headquartered in Minneapolis, offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, and CMMC audit services nationally.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
Crowe Global
New York, United States
Crowe Global is a top-10 global accounting network providing audit, tax, and advisory services through member firms in over 145 countries worldwide.
DarkMatter Group
Abu Dhabi, UAE
DarkMatter Group is a UAE cybersecurity firm offering ISO 27001, SOC 2, and NESA compliance assessments.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Deloitte Australia
Sydney, Australia
Deloitte Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services to Australia's largest organizations across government, financial services, and technology.
Deloitte Canada
Toronto, Canada
Deloitte Canada is the country's largest Big Four professional services firm, providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services across financial services, technology, energy, and government sectors.
Deloitte Haskins & Sells LLP
Mumbai, India
Deloitte Haskins & Sells is Deloitte's primary India affiliate, offering SOC 1, SOC 2, ISO 27001, DPDPA, and compliance audit services across India.
Deloitte India
Mumbai, India
Deloitte India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services to India's largest corporations and multinational subsidiaries.
Deloitte Middle East
Dubai, UAE
Deloitte Middle East is the region's largest professional services firm, providing Big Four audit, assurance, and advisory services across the MENA region.
Deloitte Singapore
Singapore
Deloitte Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to major corporations and government agencies across Singapore and Southeast Asia.
Deloitte Tohmatsu
Tokyo, Japan
Deloitte Tohmatsu is Deloitte's Japanese member firm and one of Japan's largest audit firms, providing Big Four services including J-SOX and ISMAP compliance.
Deloitte Touche Tohmatsu Brazil
Sao Paulo, Brazil
Deloitte Brazil is the largest professional services firm in Latin America, offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services.
DNV
Oslo, Norway
DNV is a global assurance and risk management company providing ISO 27001, ISO 22301, and management system certifications across 100+ countries worldwide.
ElevenPaths (Telefonica Cyber)
Madrid, Spain
ElevenPaths (Telefonica Cyber) offers ISO 27001, PCI DSS, and ENS compliance across Europe and Latin America.
Ensign InfoSecurity
Singapore
Ensign InfoSecurity is Singapore's largest cybersecurity firm offering ISO 27001, SOC 2, and MTCS assessments.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
Ernst & Young Brazil
Sao Paulo, Brazil
EY Brazil is Ernst & Young's Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services across Brazil.
EY Australia
Sydney, Australia
EY Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services across financial services, technology, and government sectors in Australia.
EY France
Paris, France
EY France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, and manufacturing.
EY Germany
Stuttgart, Germany
EY Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises, automotive companies, and financial institutions.
EY India
Mumbai, India
EY India is the largest Big Four operation in India by headcount, providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services across all major industries.
EY Japan
Tokyo, Japan
EY Japan (EY ShinNihon) provides Big Four audit, assurance, and advisory services with expertise in J-SOX, ISMAP, and Japanese regulatory compliance.
EY MENA
Dubai, UAE
EY MENA provides Big Four audit, assurance, tax, and advisory services across the Middle East and North Africa with offices in 15+ MENA countries.
EY Singapore
Singapore
EY Singapore provides Big Four audit, assurance, and advisory services with strong cybersecurity and regulatory compliance capabilities for the ASEAN market.
Forvis Mazars (US)
Springfield, Missouri
Forvis Mazars is a top-10 US professional services firm formed from the merger of BKD and Dixon Hughes Goodman, now part of the Mazars global network.
Grant Thornton
London, United Kingdom
Grant Thornton is a leading global professional services network providing audit, tax, and advisory services through member firms in over 140 countries.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
GuidePoint Security
Herndon, VA
GuidePoint Security offers SOC 2, ISO 27001, FedRAMP, and CMMC compliance assessments.
HCLTech Cybersecurity
Noida, India
HCLTech Cybersecurity provides enterprise compliance services across ISO 27001, SOC, PCI DSS, and NIST.
Help AG
Dubai, UAE
Help AG is one of the largest cybersecurity firms in the Middle East offering ISO 27001, SOC 2, and NESA assessments.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
KPMG Australia
Sydney, Australia
KPMG Australia provides Big Four audit, assurance, and cybersecurity services with deep expertise in APRA, CPS 234, and Australian regulatory compliance.
KPMG AZSA LLC
Tokyo, Japan
KPMG AZSA (KPMG Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's largest corporations across technology, manufacturing, and financial services.
KPMG Brazil
Sao Paulo, Brazil
KPMG Brazil is KPMG's Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services for enterprises and mid-market companies.
KPMG Canada
Toronto, Canada
KPMG Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canadian organizations across financial services, technology, energy, and government.
KPMG China
Beijing, China
KPMG China is one of China's largest Big Four firms, providing audit, assurance, and advisory services with expertise in Chinese regulatory compliance.
KPMG India
Mumbai, India
KPMG India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, and enterprise risk advisory services to India's largest organizations across financial services, technology, and government sectors.
KPMG Lower Gulf
Dubai, UAE
KPMG Lower Gulf is KPMG's UAE and Oman practice, providing Big Four audit, assurance, tax, and advisory services across the Gulf region.
KPMG Singapore
Singapore
KPMG Singapore is KPMG's ASEAN hub, providing Big Four audit, assurance, tax, and advisory services with strong regulatory and compliance expertise.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
Kudelski Security
Lausanne, Switzerland
Kudelski Security is a Swiss cybersecurity firm offering ISO 27001, SOC 2, and PCI DSS assessments globally.
LAC Co., Ltd.
Tokyo, Japan
LAC is one of Japan's largest cybersecurity firms offering ISO 27001, ISMS, and PCI DSS assessments.
LRQA
London, United Kingdom
LRQA is a global assurance and certification provider specializing in ISO 27001, ISO 22301, cybersecurity, and management system certifications worldwide.
LTIMindtree Cybersecurity
Mumbai, India
LTIMindtree Cybersecurity offers enterprise-grade ISO 27001, SOC 2, and PCI DSS compliance services.
Mandiant Germany
Munich, Germany
Mandiant Germany offers ISO 27001, BSI C5, and NIS2 compliance for enterprise clients.
Mazars
Paris, France
Mazars is an international audit, tax, and advisory firm operating as an integrated partnership across 95+ countries with 47,000+ professionals.
McGrathNicol Cyber
Sydney, Australia
McGrathNicol Cyber offers IRAP, ISO 27001, and SOC 2 assessments for Australian enterprises and government agencies.
mnemonic AS
Oslo, Norway
mnemonic is Norway's largest cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
NCC Group (US)
New York, NY
NCC Group is a global cybersecurity consultancy offering SOC 2, ISO 27001, PCI DSS, and FedRAMP assessments.
Nixu Oyj
Helsinki, Finland
Nixu Oyj is a leading Nordic cybersecurity firm offering ISO 27001, SOC 2, NIS2, and GDPR compliance assessments.
NRI SecureTechnologies
Tokyo, Japan
NRI SecureTechnologies is a leading Japanese cybersecurity firm offering ISO 27001, PCI DSS, and ISMS assessments.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
PricewaterhouseCoopers Brazil
Sao Paulo, Brazil
PwC Brazil is PricewaterhouseCoopers' Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services for Latin America's largest market.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC Aarata LLC
Tokyo, Japan
PwC Aarata (PwC Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's leading corporations across financial services, technology, and manufacturing.
PwC Australia
Sydney, Australia
PwC Australia is one of Australia's largest professional services firms, providing Big Four audit, assurance, and cybersecurity services across Oceania.
PwC Canada
Toronto, Canada
PwC Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canada's largest organizations across financial services, technology, energy, and government.
PwC China
Shanghai, China
PwC China is the largest Big Four firm in China, providing audit, assurance, and advisory services with deep expertise in Chinese regulatory compliance.
PwC France
Paris, France
PwC France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, healthcare, and government.
PwC Germany
Frankfurt, Germany
PwC Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises across automotive, manufacturing, technology, and financial services.
PwC India
Mumbai, India
PwC India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and enterprise risk advisory services to India's largest corporations and multinational subsidiaries.
PwC Middle East
Dubai, UAE
PwC Middle East is a Big Four professional services firm providing SOC 2, ISO 27001, NESA, PDPL, and enterprise risk advisory services across the UAE, Saudi Arabia, and the broader Middle East region.
PwC Singapore
Singapore
PwC Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to financial institutions, technology companies, and government agencies in Singapore and the APAC region.
QI-ANXIN Technology
Beijing, China
QI-ANXIN is one of China's largest cybersecurity firms offering ISO 27001, MLPS, and PIPL compliance.
RSM International
London, United Kingdom
RSM International is the sixth-largest global professional services network, delivering audit, tax, and consulting services across 120+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Samil PricewaterhouseCoopers
Seoul, South Korea
Samil PwC is PricewaterhouseCoopers' South Korean member firm offering SOC 1, SOC 2, ISO 27001, ISMS-P, and compliance audit services for Korean enterprises.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
secunet Security Networks
Essen, Germany
secunet is Germany's leading IT security company offering ISO 27001, BSI C5, and NIS2 compliance for enterprises.
SGS
Geneva, Switzerland
SGS is the world's largest testing, inspection, and certification company, providing ISO 27001 and management system certifications across 140+ countries.
Sirar by STC
Riyadh, Saudi Arabia
Sirar by STC is Saudi Arabia's leading cybersecurity firm offering ISO 27001, NCA-ECC, and PDPL assessments.
SISA Information Security
Bangalore, India
SISA is India's largest PCI QSA company offering PCI DSS, ISO 27001, and SOC 2 assessments globally.
SK shieldus
Seoul, South Korea
SK shieldus is South Korea's largest cybersecurity firm offering ISO 27001, ISMS-P, and SOC 2 assessments.
ST Engineering Cybersecurity
Singapore
ST Engineering Cybersecurity is a leading Singapore firm offering ISO 27001, SOC 2, and MTCS assessments.
Stroz Friedberg (Aon)
New York, NY
Stroz Friedberg (Aon Cyber Solutions) offers SOC 2, ISO 27001, and cyber risk compliance services.
TCS (Tata Consultancy Services)
Mumbai, India
TCS is India's largest IT services company offering cybersecurity, compliance audit, and risk advisory services to enterprises across 46 countries worldwide.
TCS Cybersecurity
Mumbai, India
TCS Cybersecurity provides enterprise-grade compliance services across SOC, ISO 27001, PCI DSS, and more.
Tech Mahindra Cybersecurity
Pune, India
Tech Mahindra Cybersecurity offers ISO 27001, SOC 2, and PCI DSS compliance for enterprises globally.
Telstra Purple (Cybersecurity)
Melbourne, Australia
Telstra Purple is a leading Australian cybersecurity firm offering IRAP, ISO 27001, and SOC 2 assessments.
Truesec
Stockholm, Sweden
Truesec is a leading Swedish cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
Trustwave
Chicago, IL
Trustwave is a global cybersecurity firm specializing in PCI DSS, SOC 2, and ISO 27001 assessments.
TUV Rheinland
Cologne, Germany
TUV Rheinland is a world-leading German certification and testing body providing ISO 27001, TISAX, and management system certifications across 60+ countries.
TUV SUD
Munich, Germany
TUV SUD is a leading German testing, inspection, and certification body providing ISO 27001, TISAX, and management system certifications across 50+ countries.
Wipro Cybersecurity
Bangalore, India
Wipro Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC, and PCI DSS.
WithSecure
Helsinki, Finland
WithSecure (formerly F-Secure Business) is a Finnish cybersecurity firm offering ISO 27001 and NIS2 compliance.
24By7Security
Coral Springs, FL
24By7Security is a Coral Springs, FL cybersecurity consultancy and PCI QSA specializing in HIPAA, PCI DSS, SOC 2, and CMMC compliance.
360 Advanced
Nashville, TN
360 Advanced is a US-based compliance audit firm offering SOC 2, PCI DSS, HITRUST, ISO 27001, and HIPAA audits with a focus on technology and healthcare companies.
Abacus Group
New York, NY
Abacus Group is a New York-based IT and cybersecurity provider delivering compliance and risk services to hedge funds and private equity firms.
ACA Group
New York, NY
ACA Group is a global GRC advisory firm whose ACA Aponix division provides cybersecurity assessments and compliance support for financial services.
ACIS Professional Center
Bangkok, Thailand
ACIS Professional Center is Thailand's leading cybersecurity firm offering ISO 27001 and PCI DSS assessments.
Acuity Risk Management
London, United Kingdom
Acuity Risk Management offers ISO 27001, SOC 2, and NIS2 compliance assessments with integrated risk management.
Agio
New York, NY
Agio is a New York-based managed IT and cybersecurity firm providing SOC, ISO 27001, and SEC compliance support to financial services firms.
AhnLab Cybersecurity
Seongnam, South Korea
AhnLab is South Korea's leading cybersecurity company offering ISO 27001 and ISMS-P assessments.
Align
New York, NY
Align is a New York-based technology infrastructure and managed services firm offering cybersecurity advisory and compliance services since 1986.
Alvarez & Marsal
New York, NY
Alvarez & Marsal is a global professional services firm founded in 1983 in New York, offering cyber risk, resilience, and compliance advisory services.
AMARU
Wellington, New Zealand
AMARU is a New Zealand cybersecurity firm offering ISO 27001, SOC 2, and NIST compliance services for ANZ technology companies expanding globally.
Anchin Block & Anchin LLP
New York, NY
Anchin Block & Anchin is a New York-based CPA firm offering SOC 1, SOC 2, HIPAA, and cybersecurity audit services for mid-market companies.
Apogee IT Services
Sewickley, PA
Apogee IT Services is a Pennsylvania-based managed IT provider offering security and compliance support to small and midsize businesses.
Aprio
Atlanta, Georgia
Aprio is a top-25 US CPA and advisory firm offering SOC 2, ISO 27001, HITRUST, and cybersecurity assessments with strong technology sector expertise.
Ariente Advisors
Boston, MA
Ariente Advisors offers affordable SOC 2, ISO 27001, and PCI DSS assessments for startups.
Armanino
San Ramon, California
Armanino is a top-25 US CPA firm based in California with strong technology sector focus, offering SOC 2, ISO 27001, and cybersecurity assessments.
ASGN Cybersecurity
Glen Allen, VA
ASGN Cybersecurity is a boutique US cybersecurity and compliance firm specializing in SOC 2, FedRAMP, CMMC, and HITRUST assessments for government contractors and technology companies.
Auditmacs
Jacksonville, FL
Auditmacs is a Jacksonville, FL firm founded in 2003 providing technology expense, asset, and lifecycle management audits for mid-sized and large enterprises.
Aujas Cybersecurity
Bangalore, India
Aujas Cybersecurity is a Bangalore-based firm offering ISO 27001, SOC 2, and PCI DSS compliance services.
Avertium
Phoenix, AZ
Avertium is a managed security and compliance firm offering PCI DSS, HIPAA, CMMC, and SOC 2 assessment services from Arizona and Tennessee.
BDO Australia
Melbourne, Australia
BDO Australia is a leading mid-market audit and advisory firm providing SOC 2, ISO 27001, Essential Eight, and Privacy Act compliance services to Australian businesses across technology, financial services, and healthcare.
BDO Germany
Hamburg, Germany
BDO Germany is a leading mid-market audit and advisory firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German mid-market companies and the Mittelstand.
BDO Japan
Tokyo, Japan
BDO Japan is a mid-market audit and advisory firm providing ISO 27001, SOC 2, APPI, and P-Mark compliance services to mid-market companies and foreign-invested businesses operating in Japan.
BDO Singapore
Singapore
BDO Singapore is a mid-market audit and advisory firm providing SOC 2, ISO 27001, PDPA, and MTCS compliance services to SMEs, mid-market firms, and listed companies in Singapore.
BDO UAE
Dubai, UAE
BDO UAE is BDO International's member firm in the UAE, providing audit, tax, and advisory services with strong compliance capabilities for Gulf businesses.
BDO UK LLP
London, United Kingdom
BDO UK is one of the UK's largest accountancy and business advisory firms, providing SOC 2, ISO 27001, GDPR, and Cyber Essentials audit services to mid-market and enterprise organizations.
Berdon LLP
New York, NY
Berdon LLP is a New York-based CPA firm offering SOC 1, SOC 2, HIPAA, and IT audit services for mid-market real estate and financial services companies.