Contact Us

Services

Suite of Services

Schellman began as a SOC audit firm 20+ years ago. While we still issue more than 2,000 SOC reports each year, our clients’ trust has propelled our expansion. Today, we offer nearly 60 types of audits and assessments.

Download a PDF of All Services

Learning Center

About Us

About Us

Schellman is the only Top 50 CPA firm focused exclusively on IT Compliance and Cybersecurity, and we’re the #1 service provider for FedRAMP Assessments. Our industry-leading NPS scores, client retention, and employee retention mean our clients experience greater continuity and quality.

Leadership Team
In a sea of sameness, we consistently apply our core values to stand apart.
Corporate Social Responsibility
Our B Corp certification underscores our commitment to a more sustainable future for the marketplace, our people, the community, and the environment.
Careers
Join a team of the industry’s most talented individuals at a company where one of our core values is People First.
Strategic Partnerships
We’re proud to collaborate with a diverse set of providers while remaining steadfast in our commitment to impartiality and independence.

Schellman's 2025 People & Talent Report

2025 People & Talent Report

Certificate Directory

Services

Services

View All Services

SOC & Attestations

SOC & Attestations

SOC 1 / SSAE 18 Examination

SOC 2 Examination

SOC 3 Examination

SOC for Supply Chain

SOC for Cybersecurity

C5 Attestation

CSA STAR Programs

Payment Card Assessments

Payment Card Assessments

PCI DSS Validation

PCI SSF

PCI P2PE Validation

PCI PIN Assessments

PCI 3DS Compliance

ISO Certifications

ISO Certifications

ISO 27001

ISO 42001

ISO 27701

ISO 9001

ISO 22301

ISO 20000-1

ISO 14001

ISO 45001

ISO 50001

Privacy Assessments

Privacy Assessments

Global CBPR & PRP Certification

GDPR Assessment

International Privacy Assessments

US Privacy Assessments

Microsoft SSPA/DPR Assessment

EU Cloud Code of Conduct

Federal Assessments

Federal Assessments

FedRAMP®

CMMC / NIST SP 800-171

FISMA/NIST

ITAR

CJIS

IRAP

FTC Consent Decrees

DoD IL6

Healthcare Assessments

Healthcare Assessments

HITRUST Certification

HIPAA Compliance

HIPAA Express

EPCS-DEA Audits

Health Data Host (HDS) Certification

Penetration Testing

Penetration Testing

Application

Network

Mobile

Red Teaming

Social Engineering

Cloud

Physical

Hardware and IoT

Advanced Services

AI Red Teaming

Cybersecurity Assessments

Cybersecurity Assessments

Cloud Configuration Assessments

Ransomware Assessments

NIST Cybersecurity Framework Assessments

Schellman Software Security Assessment (S³A)

TISAX®

SWIFT Customer Security Programme

Internal Audit Co-Sourcing

MTCS Certification

ENS Certification

Crypto and Digital Trust

Crypto and Digital Trust

Schellman Training

Schellman Training

Sustainability Services

Sustainability Services

AI Governance

Learning Center

About Us

About Us

Leadership Team

Leadership Team

Corporate Social Responsibility

Corporate Social Responsibility

Careers

Strategic Partnerships

Strategic Partnerships

Certificate Directory

The Schellman Blog

Avani Desai

Avani Desai is the CEO at Schellman. Avani has more than 15 years of experience in IT attestation, risk management, compliance and privacy. Avani’s primary focus is on emerging healthcare issues and privacy concerns for organizations. Named as one of the 2017 Global Leaders in Consulting by Consulting Magazine she has also been featured and published in the ISSA Journal, ITSP Magazine, ISACA Journal, Information Security Buzz, Healthcare Tech Outlook, and many more. Avani also sits on the board of Catalist, a not for profit that empowers women by supporting the creation, development and expansion of collective giving through informed grantmaking. In addition, she is co-chair of 100 Women Strong, a female only venture philanthropic fund to solve problems related to women and children in the community.

Blog Feature

Addressing the Growing Imperative: Strengthen Your ESG Oversight Through Audit Committees and Independent Assessments

By: Avani Desai
June 9th, 2023

The Growing Pressure for Corporations to Embrace ESG In recent times, regulators at global and national levels have been advocating for greater disclosure of ESG (Environmental, Social, and Governance) issues and standards among organizations. Legal developments and demands for corporate transparency have encouraged the emergence of many rating agencies and reporting frameworks.

Blog Feature

The Fight Against Heart Disease: My Journey as a Woman of Impact

By: Avani Desai
February 3rd, 2023

In 2004, the campaign Go Red For Women was born to raise awareness among women about their greatest health threat—heart disease. Slowly, the campaign grew into a movement bringing together thousands of women.

Blog Feature

Shaping Compliance for 20 Years - A Letter From CEO Avani Desai

By: Avani Desai
May 2nd, 2022

Blog Feature

A Message from the CEO on International Women’s Day 2022

By: Avani Desai
March 8th, 2022

Today, the Schellman team joins the global community in celebrating this year’s International Women’s Day (IWD).

Blog Feature

Women in Technology

By: Avani Desai
March 15th, 2021

Blog Feature

Cybersecurity Assessments

Why Frequent Password-Changing Isn't Always Great

By: Avani Desai
May 7th, 2020

Blog Feature

Cybersecurity Assessments

What is the Internet of Things?

By: Avani Desai
January 27th, 2020

Blog Feature

The Bright Side of Technology: Tech Hacks That Have Improved Society

By: Avani Desai
June 4th, 2019

Even when the developments might’ve been considered fairly primitive by modern standards, technological progress has always been a definitive characteristic of humanity. Like any new tool, technology has infinite capacity to be used in all the wrong ways—in this, atomic and biological weapons come to mind. And even with better intentions, sometimes technological impact can still skew negatively, such as when society’s immense reliance on it harms our environment, health, or thought patterns.

{

Previous All posts Next