Contact Us

Services

Suite of Services

Schellman began as a SOC audit firm 20+ years ago. While we still issue more than 2,000 SOC reports each year, our clients’ trust has propelled our expansion. Today, we offer nearly 60 types of audits and assessments delivered by full-time employees. No outsourcing. No compromises.

Download a PDF of All Services

Learning Center

Our Technology

About Us

About Us

Schellman is the only Top 50 CPA firm focused exclusively on IT Compliance and Cybersecurity, and we’re the #1 service provider for FedRAMP Assessments.Our industry-leading NPS scores, client retention, and employee retention (low-to-no team churn = less audit fatigue) mean our clients experience greater continuity and quality.We also understand how distracting unplanned work can be, so we focus on client-centric KPIs to help keep your business moving uninterrupted.

ISO Certificate Directory

Services

Services

View All Services

SOC & Attestations

SOC & Attestations

SOC 1 / SSAE 18 Examination

SOC 2 Examination

SOC 3 Examination

SOC for Supply Chain

SOC for Cybersecurity

C5 Attestation

CSA STAR Programs

Payment Card Assessments

Payment Card Assessments

PCI DSS Validation

PCI SSF

PCI P2PE Validation

PCI PIN Assessments

PCI 3DS Compliance

ISO Certifications

ISO Certifications

ISO 27001

ISO 42001

ISO 27701

ISO 9001

ISO 22301

ISO-20000-1

Privacy Assessments

Privacy Assessments

APEC Certification

GDPR Assessment

International Privacy Assessments

US State Privacy Assessments

Microsoft SSPA/DPR Assessment

Privacy Program Assessment

FERPA Assessment

EU Cloud Code of Conduct

Federal Assessments

Federal Assessments

FedRAMP®

CMMC / NIST SP 800-171

FISMA/NIST

ITAR

CJIS

IRAP

FTC Consent Decrees

Healthcare Assessments

Healthcare Assessments

HITRUST CSF Certification

HIPAA Compliance

HIPAA Express

EPCS-DEA Audits

Health Data Host (HDS) Certification

Penetration Testing

Penetration Testing

Application

Network

Mobile

Social Engineering

Cloud

Physical

Hardware and IoT

Advanced Series

Cybersecurity Assessments

Cybersecurity Assessments

Cloud Configuration Assessments

Ransomware Assessments

NIST Cybersecurity Framework Assessments

Schellman Software Security Assessment (S³A)

TISAX®

SWIFT Customer Security Programme

Internal Audit Co-Sourcing

Crypto and Digital Trust

Crypto and Digital Trust

Schellman Training

Schellman Training

Sustainability Services

Sustainability Services

AI Services

Learning Center

Our Technology

About Us

About Us

Leadership Team

Leadership Team

Corporate Social Responsibility

Corporate Social Responsibility

Careers

Strategic Partnerships

Strategic Partnerships

ISO Certificate Directory

Blog

The Schellman Blog

Stay up to date with the latest compliance news from the Schellman blog.

Jack Nguyen

Jack Nguyen is a Senior Associate with Schellman based in Atlanta, Georgia. Before joining the firm in 2021, Jack worked as a Senior Analyst for risk3sixty specializing in IT Audit & Cyber Risk Advisory, and as a Project Management Associate for Ernst & Young specializing in SAP projects. He now has over 5 years of experience serving clients in various industries—including high-growth tech companies' information security and compliance programs, IBM development/testing/incident resolution, SAP landscape management, and EY project management office—and holds the following relevant certifications: Certified Associate in Project Management, Certified Information System Auditor, CompTIA Security+, PECB Certified ISO/IEC 27001 Lead Auditor, Certificate of Cloud Security Knowledge, PECB Certified ISO/IEC 9001 Lead Auditor, PECB Certified ISO/IEC 42001 Provisional Auditor, and Certified Information Systems Security Professional. Jack Nguyen is now focused primarily on the ISO practice for organizations across various industries.

Blog Feature

ISO Certifications

ISO 27001 vs. ISO 22301

By: Jack Nguyen
November 21st, 2024

It’s no secret that ISO 27001 has become one of the most popular compliance initiatives globally for organizations wishing to prove the solidity of their information security. And though many have already reaped the benefits, some may not have, and others may want to take further advantage of ISO’s stellar reputation regarding their provided frameworks and stack more certifications. Among your options is ISO 22301—another international standard focused on business continuity management.

{