pa.taxFind help
Firm profile

RSM US, LLP

Listed in FedRAMP Marketplace, GovRAMP program participants, PCI SSC Qualified Security Assessors, PCI SSC Approved Scanning Vendors, Cyber AB CMMC Marketplace, HITRUST external assessor list, firm-site SOC 2 services. Chicago, IL.

FedRAMP 3PAOGovRAMP 3PAOPCI QSAPCI ASVCMMC C3PAOHITRUST assessorSOC 2 services sourced

About this firm

Listed in the FedRAMP Marketplace as a recognized third-party assessment organization (3PAO). The firm conducts independent security assessments of cloud services; a federal agency, not the assessor, decides whether to grant an Authorization to Operate (ATO).GovRAMP does not endorse or recommend any specific 3PAO.A QSA company assesses PCI DSS compliance. The PCI Security Standards Council does not endorse or recommend any QSA, and companies in remediation are not listed here.An ASV runs external vulnerability scans, not a full PCI DSS assessment. The PCI Security Standards Council does not endorse or recommend any ASV, and vendors in remediation are not listed here.A C3PAO conducts CMMC certification assessments for defense contractors. Check the Cyber AB Marketplace for each firm's current authorization status.HITRUST issues the certification after quality review; the external assessor performs the validated assessment. Readiness licensees on HITRUST's page are not included.

Locations

Source and verification

SOC 2 practice confirmed from each firm's own site; no official SOC 2 auditor registry exists. Firms are listed from official registries, each with its own as-of date. Locations are shown only where the registry or the firm's own site provides them. A listing records registry status, not an endorsement, and directory information may change. SOC 2 is a CPA attestation report, not a certificate. pa.tax is independent: listed firms pay nothing for inclusion, ranking or referrals, and firms are listed alphabetically.