Vendor Directory
Explore SOC 2, ISO 27001, and HITRUST compliance resources and audit firm connections.
E2ECYBER Consulting
Securing Your Future with Tailored Insights
E2ECYBER Consulting (End to End Cyber Consulting, a division of PCSA Group LLC) offers consulting and assessment services for information security and privacy. Services referenced in the record include ISO 27001 gap assessment and certification support and privacy program development. The firm highlights CMMC capability: Val Stoyanov is a CMMC Certified Assessor with ability to support CMMC assessments up to Maturity Level 3. Consultants have worked with civilian agencies (HHS, NIH, NOAA, DHS), the Defense Industrial Base, hospitals, clinical research organizations, banks, federal financial organizations and law firms. Team certifications listed include CIPM, CIPP/E, CDPSE, CGEIT, ITIL v3 and PMP. Services are available in English and French; additional language support is noted.
Culminate Consulting
Transforming Businesses Through ISO Excellence
Culminate Consulting Ltd is a training and consulting firm in Lagos, Nigeria. According to the site, the company offers ISO 27001 (formally known as ISO/IEC 27001:2005) specification for an information security management system (ISMS) and ISO 27001:2013 ISMS implementation services. The firm promotes recruitment, training, outsourcing and outdoor advertisement, and provides training programs such as Production and Service Process Management. The training content listed includes topics like process overview, supply chain management, material requirement planning and practical tools for operational excellence. The record positions Culminate as a local consultant and training provider delivering ISO and process-management related services in Nigeria.
vciso.com
Cybersecurity leadership at your fingertips
vCISO.com delivers expert cybersecurity leadership through on-demand virtual CISO services. Targeted toward startups and SMBs, the platform offers strategic consultation and guidance in preparing for SOC 2 compliance. Clients benefit from real-time monitoring of their security posture, policy management, and audit readiness within an intuitive compliance dashboard. The services are designed to help organizations track their SOC 2 progress and implement international security standards within 8-12 weeks, ensuring adherence to compliance requirements and enhancing overall cybersecurity posture.
Cavendish Scott
Tailored ISO Solutions for Lasting Excellence
Cavendish Scott has over 35 years of full-service ISO experience, specializing in ISO consulting, internal auditing, and training. Their expert team delivers tailored solutions designed to strengthen management systems and drive organizational success. Whether organizations require precise auditing services or comprehensive training programs, Cavendish Scott provides the necessary support to achieve ISO compliance and operational excellence. Reach out to them to start building a path to excellence today.
ORIENT IT SERVICES
Navigating Your ISO 27001 Journey Together
Orient IT Services offers consulting and professional services focused on the implementation of Information Security Management Systems (ISMS) in accordance with ISO 27001 standards. They assist organizations in understanding ISMS concepts, planning, and implementing ISO 27001 with an emphasis on delivering quality services tailored to customer business needs. Their expertise allows clients to identify key requirements and explore various options for effective sustainability of their IT systems in compliance with industry standards.
Gain Compliance
Transforming Statutory Filings with Precision
Gain Compliance is dedicated to Annual Statement Filings for Insurers and is the first statutory reporting vendor approved by the NAIC since 2001. Their software offers a modern solution designed to address the pain points of the Statutory Financial Reporting process, ensuring total visibility and quick implementation. Gain Compliance's software stands out with a specialized user experience, real-time validations, and features designed collaboratively with financial reporting teams. Their platform empowers team leaders to manage statement access effectively, enhancing compliance and efficiency across filing processes.
Armanino
Navigate Compliance with Confidence and Clarity
Armanino LLP provides vCISO Services that focus on SOC Audits and Assessments. Their solutions are designed to take organizations forward by aligning business solutions with security compliance needs. They aim to enhance clients' compliance readiness through SOC Readiness Assessments and related services. With a strong footing as one of the top accounting and consulting firms in the U.S., Armanino leverages tailored problem-solving to address specific business and compliance challenges. They are committed to supporting organizations in navigating their compliance landscapes with expert guidance.
Jün Cyber
Securing Compliance, Shielding Your Business
Jn Cyber is a veteran-led cybersecurity firm specializing in SOC 2 compliance and CMMC readiness assessments. Their services include SOC 2 readiness assessments, initial gap analysis, risk assessment, and development of security policies and procedures. With a focus on providing solutions that protect businesses from evolving threats, Jn Cyber offers IT managed services, cybersecurity, and compliance solutions tailored to various industries. Their approach enables clients to augment their existing IT services, allowing them to prioritize their core business operations while ensuring compliance and security.
4C Consulting Pvt. Ltd.
Secure Your Future with ISO Mastery
4C Consulting is a trusted ISO certification consultant based in India, renowned for its expertise in ISO training and consulting services. Specializing in ISO 27001, 4C Consulting provides businesses with a comprehensive approach to management system certification, ensuring that adequate and proportionate security controls are implemented to protect information assets. The company offers a variety of strategic consulting and advisory services, including documentation kits in various editable formats to facilitate the certification process. Their goal is to enable clients to achieve sustainable business excellence through various ISO standards.
Heraklet
Navigating Compliance for Aerospace Excellence
Heraklet provides end-to-end consulting and training services to help aerospace and defense suppliers meet international certification standards like DO-178C, DO-254, ARP4754A, and ISO/IEC 27001. The company delivers software certification and R&D consultancy, and states it focuses on four essential pillars of aerospace and defense compliance: DO-254 hardware certification, DO-178C software qualification, ISO/IEC 27001 information security, and NIS2 cybersecurity governance. Heraklet says it supports engineering and quality teams with expertise in airborne systems, regulatory frameworks, and mission-critical assurance strategies. The homepage metadata also mentions embedded systems design & development and offices in Germany, UAE, and Trkiye. The record describes the firm as trusted by leading aerospace and defense suppliers and offering tailored certification and compliance services for regulated industries.
Kinverg
Guarding Your Data, Guiding Your Future
Kinverg is a cybersecurity and technology consulting firm offering ISO 27001 (ISMS) implementation consulting and broader cybersecurity compliance services. Their offerings include risk assessments, threat detection, and 24/7 monitoring alongside data privacy services such as data audits, encryption, and privacy impact assessments. Kinverg states support for privacy regulations including GDPR and CCPA. They also provide AI strategy and roadmap services, training and certification, digital transformation solutions, and resource augmentation to integrate expert talent with client teams. Kinverg positions these services to help organizations meet regulatory requirements and protect sensitive data, combining consulting, managed monitoring, privacy assessments, and training services for micro, small, and medium-sized enterprises and technology-driven startups.
Custom Information Services
Compliance made easy with expert guidance
Custom Information Services provides managed IT services focused on compliance solutions, including SOC 2 services such as readiness assessments, gap remediation, policy development, IT security, and audit preparation. With decades of experience, they cater to businesses in complex production environments including manufacturing, distribution, and wholesale. Offering 24/7 tech support, network monitoring, cloud services, and custom programming solutions, they leverage their expertise to meet unique business needs. Their team also specializes in ERP solutions, particularly Microsoft Dynamics GP, delivering tailored business management tools and comprehensive operational support.
Mindsec
Simplifying ISO 27001 with Intelligent Automation
Mindsec positions itself as an ISO 27001 compliance automation platform that combines software and advisory support to simplify certification. The site emphasizes an "ISO 27001 Certification Blueprint," predefined controls, and automation that "automate[s] audit evidence collection." Mindsec claims AI-powered risk and security compliance, says it can act as an "entire compliance department," and offers advice from cybersecurity experts through to the certification audit. The product promises compliance scores, automated security tasks, and tools to reduce manual procedures for ISO 27001 certification and maintenance. Messaging highlights saving time and cost on certification and providing clarity and transparency during audits.
MOD1 AG
Guarding Your Data, Guiding Your Compliance
MOD1 AG is a Basel-based advisory and consulting firm offering digital trust services including cybersecurity, data protection, quality management, regulatory, public policy, and artificial intelligence (AI) governance. The firm provides advisory, consulting, and flexible staffing services to establish information security management systems (ISMS), implement risk management and internal audit processes, and prepare organisations for certification to ISO27001, ISO27017, ISO27018, or ISO27701. MOD1 delivers information security risk management and compliance consulting aimed at protecting sensitive personal data in the cloud and helping clients navigate global privacy regulations. Its data protection advisory services include guidance on protecting sensitive health information and ethical research practices when handling patient data. MOD1 highlights experience working in highly regulated business sectors.
The Cyber Assurance
Secure your future with tailored compliance solutions
The Cyber Assurance offers a suite of cybersecurity services focused on ISO 27001 and SOC2-related work and broader compliance. Offerings include ISO 27001 ISMS registers (templates for asset, risk, audit and security incident registers), a free ISO 27001 ISMS register plus one hour consultancy, and virtual CISO (vCISO) services to provide security leadership, risk identification and governance. The firm says it helps enforce compliance with standards like ISO 27001, GDPR and HIPAA, and delivers employee training, simulated phishing tests and executive-level security workshops. The company advertises regular assessments and advisory meetings and invites organisations to register as reseller/referral partners.
ISOPlanner
Compliance made seamless within Microsoft 365
ISOPlanner positions itself as ISO 27001 compliance software built for organisations using Microsoft 365. The site describes full compliance management inside Outlook, SharePoint and Teams and promotes features for the PDCA cycle, audit support and automation. ISOPlanner includes an AI Assistant (disabled by default) with features listed such as project plan creation, control suggestions for risk mitigation and integrated conversations in the text editor. The product claims tight Microsoft 365 integration to schedule tasks, share knowledge and manage required documentation, and states it is trusted by over 500 companies. ISOPlanner also states it will not use customer data for AI training and uses Microsoft AI Services with GDPR compliance.
Abacode, a Thrive company
Navigate Compliance with Confidence and Clarity
Abacode Cybersecurity offers managed cybersecurity and compliance services that are tailored for mid-market companies. Their comprehensive solutions assist businesses in achieving SOC 2 compliance along with a strong cybersecurity posture. The company provides expert-led webinars and whitepapers to aid organizations in navigating complex compliance landscapes, including CMMC and NIST 800-171 standards. With 24/7/365 managed SOC monitoring, Abacode ensures continuous support and strategic insights to mitigate evolving cyber threats and enhance compliance readiness.
GSDC - Global Skill Development Council
Mastering Compliance Through Expert Certification
Global Skill Development Council (GSDC) is a recognized authority in the professional certification space, specializing in ISO 27001 consulting among other areas. GSDC's programs prepare individuals for certifications that are essential for demonstrating competency in information security management, especially within organizations aiming for ISO 27001 compliance. The organization focuses on equipping professionals with the skills and knowledge to meet stringent regulatory standards and industry best practices. GSDC serves various global companies seeking to enhance their compliance and governance frameworks.
Actionabl
Orchestrate operations with confidence and clarity
Actionabl is an end-to-end Business Orchestration platform that emphasizes security, availability, and confidentiality, demonstrated by its SOC 2 Type II compliance. The platform enhances enterprise operations by harmonizing automation with human intervention to achieve safe and agile workflows. It provides full visibility into operations for effective monitoring and decision-making, ensuring accountability through detailed records. With dynamic user interfaces and adaptable policies, Actionabl facilitates error resolution and process management, making it particularly suited for enterprises seeking to elevate efficiency and maintain compliance with industry standards.
Regulativ
Compliance Simplified with Intelligent Automation
Regulativ offers an Automated Regulatory Compliance Platform that simplifies compliance management and risk mitigation through automation, AI, and expert support. The platform supports a variety of frameworks including ISO, NIST, HIPAA, SOC 1, SOC 2, GDPR, and others. Regulativ ensures organizations can manage their regulatory obligations from a single intelligent platform, analyze compliance standards, and audit their AI systems for adherence to global regulations. It aims to significantly speed up the compliance process, reducing timelines from months to weeks.