866.254.0000
Contact Us
Services
Services
View All Services
SOC & Attestations
SOC & Attestations
SOC 1 / SSAE 18 Examination
SOC 2 Examination
SOC 3 Examination
SOC for Supply Chain
SOC for Cybersecurity
SOC Essentials for Early-Stage Companies
C5 Attestation
CSA STAR Programs
Payment Card Assessments
Payment Card Assessments
PCI DSS Validation
PCI SSF
PCI P2PE Validation
PCI PIN Assessments
PCI 3DS Compliance
ISO Certifications
ISO Certifications
ISO 27001
ISO 42001
ISO 27701
ISO 9001
ISO 22301
ISO-20000-1
Privacy Assessments
Privacy Assessments
APEC Certification
GDPR Assessment
International Privacy Assessments
US State Privacy Assessments
Microsoft SSPA/DPR Assessment
Privacy Program Assessment
FERPA Assessment
EU Cloud Code of Conduct
Federal Assessments
Federal Assessments
FedRAMP®
CMMC / NIST SP 800-171
FISMA/NIST
ITAR
CJIS
IRAP
FTC Consent Decrees
DoD IL6
Healthcare Assessments
Healthcare Assessments
HITRUST Certification
HIPAA Compliance
HIPAA Express
EPCS-DEA Audits
Health Data Host (HDS) Certification
Penetration Testing
Penetration Testing
Application
Network
Mobile
Red Teaming
Social Engineering
Cloud
Physical
Hardware and IoT
Advanced Series
AI Red Teaming
Cybersecurity Assessments
Cybersecurity Assessments
Cloud Configuration Assessments
Ransomware Assessments
NIST Cybersecurity Framework Assessments
Schellman Software Security Assessment (S3A)
TISAX®
SWIFT Customer Security Programme
Internal Audit Co-Sourcing
Crypto and Digital Trust
Crypto and Digital Trust
Schellman Training
Schellman Training
Sustainability Services
Sustainability Services
AI Services
AI Services
Learning Center
Our Technology
About Us
About Us
About Us
Leadership Team
Leadership Team
Corporate Social Responsibility
Corporate Social Responsibility
Careers
Careers
Strategic Partnerships
Strategic Partnerships
ISO Certificate Directory
Contact Us

Learning Center

Discover the latest thought leadership from Schellman

Subscribe to Weekly Updates

Hide Filters
Sort by:
Clear Filters

Filter by Category:

Filter by Industry:

Filter by Type:

Done
Filter
Sort by:

Article

How to Navigate Your SOC and ISO Compliance Post-Merger or Acquisition

Discover options for navigating SOC reports and ISO certifications post-merger/acquisition and gain insight into how to adjust your compliance...

 Read More

Article

ISO 27001 Certification: How to Determine Your Scope

Learn about the scoping requirements of ISO 27001 certification so that you can be prepared as you build your information security management system...

 Read More

Article

Understanding External Network Penetration Testing

External network penetration tests strengthen your security posture. Learn what they involve including the process, timeline, costs, and preparation...

 Read More

Article

The Benefits of Consolidating Compliance Services with a Single Provider

Simplify compliance by consolidating under one provider. Reduce costs, streamline audits, and enhance security with Schellman's comprehensive...

 Read More

Article

Bridging Compliance: Where SOC 2 and C5 Overlap and How to Leverage Both

Learn about 2 compliance frameworks CSPs are commonly expected to comply with: SOC 2 and C5 reports, including how they overlap and how to leverage...

 Read More

Article

What You Need to Know About Internal Network Penetration Tests

If you're planning an internal penetration test, learn what to expect, how to prepare for the process, and 2 important decisions to consider ahead of...

 Read More

Article

Microsoft DPR v11: A Guide to the Latest Updates for Suppliers

Microsoft SSPA v11 launched April, 2025 adding 2 new requirements for suppliers to comply with. Learn about the SSPA program and the latest DPR...

 Read More

Article

Understanding TLS 1.3 Encryption and It’s Role in PCI DSS Compliance

Transport Layer Security (TLS) is a cryptographic protocol that encrypts and protects data in transmission. Learn what TLS 1.3 is and its role in PCI...

 Read More

Article

Building Trust in the Cloud: How SOC Reports Benefit CSPs

Cloud computing is an efficient and conducive model for on-demand network access. Learn more about how a SOC report can benefit CSPs and your...

 Read More

Article

Open Ports and Outdated Protocols: A Hacker’s Paradise Lost

Discover how open port and weak protocol practices can negatively impact your security and learn tips for identifying and assessing vulnerable...

 Read More

Video

An Overview of ISO 27001: Key Principles, Benefits, and Implementation

ISO 27001 helps you manage risks related to data security. Schellman provides an overview of ISO 27001, including why it matters and who should adopt...

 Watch Now

Article

AI Compliance Path: Mapping HITRUST AI Security Assessment to ISO 42001

Discover what the HITRUST AI Security Assessment is, including the scoring breakdown, how it differs from HITRUST AI RM, and how to map it to ISO...

 Read More
1 2 3 … 72 Next

4010 W Boy Scout Boulevard
Suite 600
Tampa, FL 33607

U.S. 1.866.254.0000

Outside the U.S.
1.813.288.8833

Resources
Company
Stay Up-to-Date

Sign up to receive Schellman's Weekly Read delivered every Friday morning.

© SchellmanPrivacy PolicyTerms of Use

“Schellman” is the brand name under which Schellman & Company, LLC and Schellman Compliance, LLC provide professional services. Schellman & Company, LLC and Schellman Compliance, LLC practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. Schellman & Company, LLC is a licensed certified public accounting firm (Florida license number AD62941) registered with the Public Company Accounting Oversight Board (PCAOB) that provides attest services to its clients, and Schellman Compliance, LLC provides nonattest cybersecurity and compliance professional services to its clients. Schellman Compliance, LLC is not a licensed CPA firm. Schellman & Company, LLC and Schellman Compliance, LLC are independently owned and are not liable for the services provided by any other entity providing services under the Schellman brand. Our use of the terms “our firm” and “we” and “us” and terms of similar import, denote the alternative practice structure conducted by Schellman & Company, LLC and Schellman Compliance, LLC.