Schellman is a leading provider of attestation and compliance services. We are the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, a FedRAMP 3PAO, and most recently, an APEC Accountability Agent. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single third-party assessor.
By:
Schellman
August 17th, 2021
Chris Smith from Schellman & Company, LLC Selected to Attend AICPA’s 2021 Leadership Academy Tampa, FL – August 3, 2021 – Schellman & Company, LLC, a leading provider of attestation and compliance services, is proud to announce that Chris Smith, CPA, CISSP, CISA, CIPP/US, ISO 27001 LA is one of only 30 CPAs to be honored by the American Institute of CPAs (AICPA) with a place as part of the Leadership Academy’s 13th graduating class. Chris was selected based on his exceptional leadership skills and professional experience for the four-day Leadership Academy program, which will take place virtually October 25-28, 2021.
By:
Schellman
June 28th, 2021
What is ISO 27001? At a basic level, ISO/IEC 27001:2022 (ISO 27001) is a management system framework for an information security management system (ISMS) that a company can be certified against by conforming to the ISO 27001 standard. Structured primarily around how a company manages information security and its related risk, this standard is a powerful one, as almost every company in the modern age now “manages information security” of some sort.
Cybersecurity Assessments | Penetration Testing
By:
Schellman
June 17th, 2021
During a penetration test, the Schellman team often works with development teams, administrators, risk and compliance professionals and information security personnel; however, the initial point of contact for a penetration test may be an individual that isn’t any of those. More and more, someone from the product or procurement team may have the responsibility—or shared responsibility—of having a penetration test performed. While these individuals may understand a timeline for a specific task, they likely do not have full visibility into the entire project. Such circumstances, among others, can trigger one of the biggest challenges frequently seen in planning pen tests—timing.
By:
Schellman
May 15th, 2020
Every time I look at a calendar, there seems to be a new day of celebration, observance, memorial, or holiday. Timeanddate.com includes 246 holidays and observances in the United States alone, but the third Saturday in May represents one of particular, personal significance to me—someone who joined the United States Army nearly ten years ago and continues to serve as a commissioned Officer in the Army National Guard.
By:
Schellman
July 15th, 2019
We are proud to announce that the HITRUST Alliance has appointed Schellman & Co. Principal Doug Kanney to the HITRUST CSF Assessor Council and Quality Subcommittee.