Services

Suite of Services

Schellman began as a SOC audit firm 20+ years ago. While we still issue more than 2,000 SOC reports each year, our clients’ trust has propelled our expansion. Today, we offer nearly 60 types of audits and assessments.

Download a PDF of All Services

Learning Center

Our Technology

About Us

Schellman is the only Top 50 CPA firm focused exclusively on IT Compliance and Cybersecurity, and we’re the #1 service provider for FedRAMP Assessments.Our industry-leading NPS scores, client retention, and employee retention (low-to-no team churn = less audit fatigue) mean our clients experience greater continuity and quality.We also understand how distracting unplanned work can be, so we focus on client-centric KPIs to help keep your business moving uninterrupted.

Download the Story of '24

ISO Certificate Directory

Services

View All Services

SOC & Attestations

SOC 1 / SSAE 18 Examination

SOC 2 Examination

SOC 3 Examination

SOC for Supply Chain

SOC for Cybersecurity

SOC Essentials for Early-Stage Companies

C5 Attestation

CSA STAR Programs

Payment Card Assessments

PCI DSS Validation

PCI SSF

PCI P2PE Validation

PCI PIN Assessments

PCI 3DS Compliance

ISO Certifications

ISO 27001

ISO 42001

ISO 27701

ISO 9001

ISO 22301

ISO-20000-1

Privacy Assessments

APEC Certification

GDPR Assessment

International Privacy Assessments

US State Privacy Assessments

Microsoft SSPA/DPR Assessment

Privacy Program Assessment

FERPA Assessment

EU Cloud Code of Conduct

Federal Assessments

FedRAMP®

CMMC / NIST SP 800-171

FISMA/NIST

ITAR

CJIS

IRAP

FTC Consent Decrees

DoD IL6

Healthcare Assessments

HITRUST Certification

HIPAA Compliance

HIPAA Express

EPCS-DEA Audits

Health Data Host (HDS) Certification

Penetration Testing

Application

Network

Mobile

Red Teaming

Social Engineering

Cloud

Physical

Hardware and IoT

Advanced Series

Cybersecurity Assessments

Cloud Configuration Assessments

Ransomware Assessments

NIST Cybersecurity Framework Assessments

Schellman Software Security Assessment (S³A)

TISAX®

SWIFT Customer Security Programme

Internal Audit Co-Sourcing

Crypto and Digital Trust

Schellman Training

Sustainability Services

AI Services

Learning Center

Our Technology

About Us

Leadership Team

Corporate Social Responsibility

Careers

Strategic Partnerships

ISO Certificate Directory

SchellmanCon 2025 Speaker

Keifer Blandon

Keifer Blandon, the esteemed Cloud Engineer at bladestack.io, stands as a paragon in the realm of FedRAMP-compliant cloud crafting. With over 14 years of immersion in compliance-focused landscapes, Keifer has honed his expertise in accelerating organizations towards the coveted Federal Authority to Operate (ATO) through his expertly designed cloud architectures. His mastery isn't just confined to FedRAMP; it spans across other critical frameworks like StateRAMP, HIPAA, and FISMA, showcasing his versatile command in the field.

As the Lead Enjinia Daimyo within the Cyber Cloud Blade division of bladestack.io, Keifer's role is a tapestry of diverse and critical responsibilities. His dominion includes bolstering cloud fortresses like AWS, GCP, and Azure, weaving in robust security measures, and ensuring an unwavering commitment to the stringent standards set by federal IT and cloud security directives. His deep understanding and adept application of frameworks such as RMF, FISMA, and FedRAMP are testament to his profound insights into the pillars of effective cloud security architecture. In his role, Keifer Blandon is not just a guardian of current cloud landscapes; he is a visionary architect, shaping the evolving horizon of cloud security.