RhymetecNew York, NY, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
SOC 1
SOC 1 is the AICPA's report on controls at a service organization that are relevant to its customers' internal control over financial reporting. It is performed under the attestation standards (SSAE No. 18, AT-C section 320) and is meant for two audiences: the customer organizations that outsource a process, and the CPA firms that audit those customers' financial statements.
Payroll, claims processing, fund accounting, transaction processing and hosting of financial systems are the usual subjects.
To get one, the service organization must write a description of its system, define control objectives, map the controls that achieve them, and sign a management assertion. A Type 1 report covers design at a point in time; a Type 2 report also covers operating effectiveness across a period.
Because the auditor tests exactly what is described, the written procedures, approval chains and control owners have to be current and evidenced.
Share
Ad from the publisher
SOC
help
help
Consultants Assessors Quotes
Matched3 quotesone form
The Shortlist is Yoursfrom this directory
Comply the Modern WayFind help with SOC 1
01
Listings sourced
A card shows a public register or the date we read the firm’s website
02
Published prices where they exist
“Quote only” where we confirmed it, “Not published” where we have not
03
Up to three quotes, one form
Firms don’t see you until you choose
House ad. This slot is open to firms listed for this page.
Get help →Advertise here →
Who has to comply
Voluntary and contractual. Any service organization whose service affects a customer's financial statements will be asked for it by customers or by the customer's financial statement auditor, especially where the customer is publicly traded or regulated.
What the assessor asks to see
System description and management assertion; control objectives and control matrix; organization chart with control owners; policies and procedures for the in-scope processes; population lists (transactions, changes, access grants, terminations); sampled evidence per control (approvals, reconciliations, tickets, logs, access reviews); subservice organization SOC reports and complementary user entity controls; management review and exception handling records.
Who helps with SOC 1
Yes. Readiness consultants (advisory firms, the consulting arms of CPA firms, GRC platform vendors) help write the system description, set control objectives, build the control matrix, and rehearse evidence collection. Typical engagement is a readiness assessment, remediation, then the examination, with the readiness firm kept independent from the signing firm.
Firms that name this framework in their own material. A listing is not a recommendation. Each firm can confirm its own.
Listed in random order, reshuffled each time the page loads. Firms that pay for a listing are shown at the top, labeled Sponsored.
CisoshareSan Clemente, CA, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
Coral EsecureNew Jersey, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
Neutral PartnersOrlando, Florida
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
Tranquility Cybersecurity (TCSA)Gurugram, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
VISTA InfoSecMumbai, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
IsecurionBengaluru, Karnataka, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
CitsapHouston, TX, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2, CMMC, NIST 800-171, PCI DSS and more.
- Standards
- Pricing
- Not published
Compass IT ComplianceNorth Providence, RI, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, CMMC, NIST 800-171, PCI DSS, GDPR and more.
- Standards
- Pricing
- Not published
Control LogicsTampa, FL, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, GDPR and more.
- Standards
- Pricing
- Not published
KratikalNoida, India, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
MuroSheridan, WY, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, HIPAA, PCI DSS, GDPR, NIST CSF and more.
- Standards
- Pricing
- Not published
Vertex11Ashburn, VA, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2, HIPAA, CMMC, GDPR and more.
- Standards
- Pricing
- Not published
Beranek Consulting Group, LLCSan Francisco, CA, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2.
- Standards
- Pricing
- Not published
Alchemi Advisory Group, LLCDallas, TX, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, HIPAA, CMMC, NIST 800-171, ISO 22301 and more.
- Standards
- Pricing
- Not published
Audit Liaison, LLCTampa, FL, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 9001, HIPAA, CMMC, PCI DSS and more.
- Standards
- Pricing
- Not published
CertvalueBangalore, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
QualitcertBengaluru, Karnataka, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
QCert360Bengaluru, Karnataka, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
Global Standards ConsortiumNovi Sad, Serbia
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
GQSSingapore
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
KCSUAE
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, ISO 14001 and more.
- Standards
- Pricing
- Not published
ProcessLOGIX Consulting Pvt. Ltd.Mumbai, Maharashtra, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
SurakshaNowDelhi, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
Veave Technologies Pvt. Ltd.Bangalore, Karnataka, India
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
Xcina ConsultingLondon, UK
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, GDPR, ISO 22301 and more.
- Standards
- Pricing
- Not published
CyberSapiensPort Melbourne VIC, Australia
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, PCI DSS, GDPR, NIST CSF, APRA CPS 234 and more.
- Standards
- Pricing
- Not published
Olux TechnologiesChicago, IL, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2, HIPAA, CMMC.
- Standards
- Pricing
- Not published
DevilDog CybersecurityDenver, CO, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, CMMC and more.
- Standards
- Pricing
- Not published
MalleumOttawa, ON, Canada
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, CMMC and more.
- Standards
- Pricing
- Not published
O-Lux TechnologiesNaperville, IL, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2, HIPAA, CMMC.
- Standards
- Pricing
- Not published
Pelican3 Consulting LLCColumbus, OH, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2, CMMC.
- Standards
- Pricing
- Not published
principia/RAIDWashington, DC, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, CMMC, NIST 800-171 and more.
- Standards
- Pricing
- Not published
ThriveonEden Prairie, MN, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, SOC 2, HIPAA, CMMC, NIST 800-171 and more.
- Standards
- Pricing
- Not published
Cyber Security Solutions (CSS)Tampa, FL, USA
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, CMMC and more.
- Standards
- Pricing
- Not published
SecurePoint 360, LLC
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
Security DecodedSingapore
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
TechVantage.ca
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for SOC 1, ISO 27001, SOC 2, HIPAA, CMMC and more.
- Standards
- Pricing
- Not published
Who assesses SOC 1
A licensed CPA firm (a firm of independent certified public accountants) that performs the examination and issues the service auditor's report. Accredited by AICPA membership and state board CPA licensure; firms performing attestation engagements are subject to the AICPA peer review program. No separate scheme accreditor.
Assessors
Be the first SOC 1 assessor listed here
This page is read by the organizations looking for someone to certify them.
Tools for SOC 1
Tools that name this framework in their own material.
Grouped by type. Inside each group the order is random, reshuffled each time the page loads.
GRC and compliance automation6 tools
Controls, evidence and audit workflows, with a policy module inside.
ThoropassNew York, United StatesCompliance automation platform and audit firm in oneNot publishedScrut AutomationNew Delhi, India, with a US entity in Palo AltoCompliance automation and risk platformNot publishedStrike GraphAI-native GRC and compliance automation platformPrice publishedComp AICompliance automation platformQuote onlyAnecdotesEnterprise GRC platform with agentic AINot publishedheygrcCompliance code review for pull requestsPrice published
Related reading
- What is a SOC 1 report and who needs one?A CPA firm explains control objectives, Type 1 versus Type 2, and the complementary user entity controls that trip clients up.Linford & Co
- SOC reports explained: building trust in the services you provideSets SOC 1 next to the other SOC reports so you can tell which one a customer's finance auditor is actually asking for.Warren Averett
Independent third-party explainers, chosen by hand. Not affiliated with this site and not paid placements. All links are nofollow.
Need a hand implementing it?
Find a Consultant for SOC 1
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
Not sure where to start?
Get Help with SOC 1
Tell us what you are trying to put in place. We will point you to the right tool, a consultant who can implement it, or both.