About this firm
The firm describes a SOC 2 service practice on its own website. Review the linked service page to confirm whether it provides readiness help, examination services, or both. A SOC 2 report is an independent CPA attestation, not a certificate.A QSA company assesses PCI DSS compliance. The PCI Security Standards Council does not endorse or recommend any QSA, and companies in remediation are not listed here.A C3PAO conducts CMMC certification assessments for defense contractors. Check the Cyber AB Marketplace for each firm's current authorization status.HITRUST issues the certification after quality review; the external assessor performs the validated assessment. Readiness licensees on HITRUST's page are not included.
Location note: No office address found on the firm service or contact page. Ask the firm whether it serves your location remotely.
Locations
Firm-listed office
KS
Source and verification
- PCI QSA: PCI SSC Qualified Security Assessors , as of October 3, 2026
- CMMC C3PAO: Cyber AB CMMC Marketplace , as of October 3, 2026
- HITRUST assessor: HITRUST external assessor list , as of October 3, 2026
- SOC 2 practice: Firm's service page
- Firm site: https://www.barradvisory.com/