About this firm
The firm describes a SOC 2 service practice on its own website. Review the linked service page to confirm whether it provides readiness help, examination services, or both. A SOC 2 report is an independent CPA attestation, not a certificate.A QSA company assesses PCI DSS compliance. The PCI Security Standards Council does not endorse or recommend any QSA, and companies in remediation are not listed here.
Locations
Firm-listed office
Colorado Springs, CO
Source and verification
- PCI QSA: PCI SSC Qualified Security Assessors , as of October 3, 2026
- SOC 2 practice: Firm's service page
- Office locations: Firm contact page
- Firm site: https://www.johansonllp.com/