Schellman is a leading provider of attestation and compliance services. We are the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, a FedRAMP 3PAO, and most recently, an APEC Accountability Agent. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single third-party assessor.
By:
Schellman
November 12th, 2024
TAMPA, Fla. – November 12, 2024 – Schellman Compliance, a leading provider of compliance services, is pleased to announce the successful acquisition of Sustas, LLC practice, a firm specializing in sustainability reporting services. As part of the transaction, Sustas’s clients and personnel will join Schellman, further strengthening the firm’s ability to deliver tailored, industry-leading sustainability compliance, consulting, and assurance solutions.
By:
Schellman
October 16th, 2024
When the COVID-19 pandemic spread across the globe in 2020, the need for social distancing and isolation impacted the availability of in-person, non-emergency healthcare appointments. As a result, telehealth became a common way for healthcare providers to serve their patients without seeing them in-person, and with its rise came related HIPAA compliance concerns.
By:
Schellman
October 9th, 2024
These days, with recent ransomware attacks disrupting healthcare providers and affecting millions of Americans, it’s become painfully clear that cybersecurity in this sector is no longer just an IT issue—it’s a patient safety issue, and the stakes are higher than ever. The proposed Health Infrastructure Security and Accountability Act of 2024 (HISAA), spearheaded by Senators Ron Wyden and Mark Warner, aims to address these vulnerabilities head-on.
Artificial Intelligence | ISO 42001
By:
Schellman
September 30th, 2024
ISO/IEC 42001:2023 is rapidly becoming the global standard for Artificial Intelligence (AI ) governance. While it is a close cousin of ISO/IEC 27001:2022, ISO 42001—rather than focusing primarily on cyber and information security—takes a more holistic approach to risk management for AI systems.
Privacy Assessments | ISO Certifications | ISO 42001
By:
Schellman
September 26th, 2024
Within a few months of their latest update to their Data Protection Requirements (DPR) to address a coding incident (version 9.1), Microsoft released a draft or “pre-read” for their version 10 requirements that will be utilized for its Supplier Security and Privacy Assurance (SSPA) process as of the 2025 fiscal year. Arguably the largest update to the DPR since September 2018, v10’s new mandates address artificial intelligence (AI) and include important references to ISO 42001 that suppliers may want to take advantage of during their next compliance cycle.
News | ISO Certifications | Artificial Intelligence
By:
Schellman
September 24th, 2024
Underscoring the firm's commitment to responsible AI, this accreditation enables Schellman to certify organizations against the first global AI standard of its kind
By:
Schellman
September 10th, 2024
Maybe you’ve seen the recent headlines—recent ones include “AI’s Energy Demands Are Out Of Control” (Wired), “AI brings soaring emissions for Google and Microsoft” (NPR), “AI emissions are fueling a new doomerism. This time it’s climate change” (Fortune), and “Artificial Intelligence Can Make Companies Greener, but It Also Guzzles Energy” (Wall Street Journal). Given the abundance of such press, it certainly seems as if the growing prevalence of AI across all platforms has sparked some climate controversy.
By:
Schellman
August 21st, 2024
TAMPA, Fla. – August 21, 2024 – Schellman, a leading provider of attestation and compliance services and a top 50 CPA firm, is excited to welcome six distinguished leaders to its inaugural Advisory Board, marking a significant move to bolster leadership.