866.254.0000
Contact Us
Services
Services
View All Services
SOC & Attestations
SOC & Attestations
SOC 1 / SSAE 18 Examination
SOC 2 Examination
SOC 3 Examination
SOC for Supply Chain
SOC for Cybersecurity
SOC Essentials for Early-Stage Companies
C5 Attestation
CSA STAR Programs
Payment Card Assessments
Payment Card Assessments
PCI DSS Validation
PCI SSF
PCI P2PE Validation
PCI PIN Assessments
PCI 3DS Compliance
ISO Certifications
ISO Certifications
ISO 27001
ISO 42001
ISO 27701
ISO 9001
ISO 22301
ISO-20000-1
Privacy Assessments
Privacy Assessments
APEC Certification
GDPR Assessment
International Privacy Assessments
US State Privacy Assessments
Microsoft SSPA/DPR Assessment
Privacy Program Assessment
FERPA Assessment
EU Cloud Code of Conduct
Federal Assessments
Federal Assessments
FedRAMP®
CMMC / NIST SP 800-171
FISMA/NIST
ITAR
CJIS
IRAP
FTC Consent Decrees
DoD IL6
Healthcare Assessments
Healthcare Assessments
HITRUST Certification
HIPAA Compliance
HIPAA Express
EPCS-DEA Audits
Health Data Host (HDS) Certification
Penetration Testing
Penetration Testing
Application
Network
Mobile
Red Teaming
Social Engineering
Cloud
Physical
Hardware and IoT
Advanced Series
Cybersecurity Assessments
Cybersecurity Assessments
Cloud Configuration Assessments
Ransomware Assessments
NIST Cybersecurity Framework Assessments
Schellman Software Security Assessment (S3A)
TISAX®
SWIFT Customer Security Programme
Internal Audit Co-Sourcing
Crypto and Digital Trust
Crypto and Digital Trust
Schellman Training
Schellman Training
Sustainability Services
Sustainability Services
AI Services
AI Services
Learning Center
Our Technology
About Us
About Us
About Us
Leadership Team
Leadership Team
Corporate Social Responsibility
Corporate Social Responsibility
Careers
Careers
Strategic Partnerships
Strategic Partnerships
ISO Certificate Directory
Contact Us

Learning Center

Discover the latest thought leadership from Schellman

Subscribe to Weekly Updates

Hide Filters
Sort by:
Clear Filters

Filter by Category:

Filter by Industry:

Filter by Type:

Done
Filter
Sort by:

Article

What You Need to Know About Internal Network Penetration Tests

If you're planning an internal penetration test, learn what to expect, how to prepare for the process, and 2 important decisions to consider ahead of...

 Read More

Article

Microsoft DPR v11: A Guide to the Latest Updates for Suppliers

Microsoft SSPA v11 launched April, 2025 adding 2 new requirements for suppliers to comply with. Learn about the SSPA program and the latest DPR...

 Read More

Article

Understanding TLS 1.3 Encryption and It’s Role in PCI DSS Compliance

Transport Layer Security (TLS) is a cryptographic protocol that encrypts and protects data in transmission. Learn what TLS 1.3 is and its role in PCI...

 Read More

Article

Building Trust in the Cloud: How SOC Reports Benefit CSPs

Cloud computing is an efficient and conducive model for on-demand network access. Learn more about how a SOC report can benefit CSPs and your...

 Read More

Article

Open Ports and Outdated Protocols: A Hacker’s Paradise Lost

Discover how open port and weak protocol practices can negatively impact your security and learn tips for identifying and assessing vulnerable...

 Read More

Video

An Overview of ISO 27001: Key Principles, Benefits, and Implementation

ISO 27001 helps you manage risks related to data security. Schellman provides an overview of ISO 27001, including why it matters and who should adopt...

 Watch Now

Article

AI Compliance Path: Mapping HITRUST AI Security Assessment to ISO 42001

Discover what the HITRUST AI Security Assessment is, including the scoring breakdown, how it differs from HITRUST AI RM, and how to map it to ISO...

 Read More

Article

ISO 27001: Internal Audit Requirements

One of the core facets of ISO 27001 is routine and independent internal audits. We detail this requirement so you can comply more easily with the...

 Read More

Article

Sustainability Reporting: Key Insights for Businesses

Learn insights into sustainability reports including which standards and frameworks you should align your report to and which metrics you should...

 Read More

Article

Schellman's Year in Penetration Testing: Key Statistics Revealed

Schellman shares an overview of the type of penetration tests we perform and stats around the security vulnerabilities we've discovered over the past...

 Read More

Article

The Proposed HIPAA Security Rule Changes You Need to Know

Schellman explains changes to the HIPAA Security Rule for 3 key categories: general and administrative, technical safeguards, and compliance time...

 Read More

Article

ISO 42001: Lessons Learned from Auditing and Implementing the Framework

Uncover Schellman and risk3sixty's insights from auditing and implementing the ISO 42001 framework for responsible AI use, risk mitigation, and...

 Read More
1 2 3 … 72 Next

4010 W Boy Scout Boulevard
Suite 600
Tampa, FL 33607

U.S. 1.866.254.0000

Outside the U.S.
1.813.288.8833

Resources
Company
Stay Up-to-Date

Sign up to receive Schellman's Weekly Read delivered every Friday morning.

© SchellmanPrivacy PolicyTerms of Use

“Schellman” is the brand name under which Schellman & Company, LLC and Schellman Compliance, LLC provide professional services. Schellman & Company, LLC and Schellman Compliance, LLC practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. Schellman & Company, LLC is a licensed certified public accounting firm (Florida license number AD62941) registered with the Public Company Accounting Oversight Board (PCAOB) that provides attest services to its clients, and Schellman Compliance, LLC provides nonattest cybersecurity and compliance professional services to its clients. Schellman Compliance, LLC is not a licensed CPA firm. Schellman & Company, LLC and Schellman Compliance, LLC are independently owned and are not liable for the services provided by any other entity providing services under the Schellman brand. Our use of the terms “our firm” and “we” and “us” and terms of similar import, denote the alternative practice structure conducted by Schellman & Company, LLC and Schellman Compliance, LLC.