Schellman
Schellman is an independent assessment firm known for audit work across SOC, ISO, FedRAMP, and HITRUST. It appears on HITRUST's published external assessor list. The firm is assessment-only by posture — it does not sell the remediation it would later assess.
At a glance
| Headquarters | Tampa, Florida |
|---|---|
| Founded | 2002 |
| Firm type | Independent cybersecurity assessment firm |
| Planning range | Not published — request a scoped quote |
| Typical timeline | Varies — confirm in proposal |
| Frameworks (per firm) | HITRUST (authorized assessor), SOC 1/2, ISO 27001, FedRAMP (authorized 3PAO), PCI DSS |
| Official website | schellman.com |
Best fit
Buyers who want a strictly independent assessor for HITRUST r2 or multi-framework audits.
Before you engage
Independence cuts both ways: you'll need a separate party (or internal team) for remediation.
Questions about Schellman
Is Schellman affiliated with or endorsed by CISA?
No — and no private firm is. CISA does not certify, endorse, or accredit consultants. Schellman is listed here as a Independent cybersecurity assessment firm.
What services does Schellman offer?
Per the firm's public materials: HITRUST (authorized assessor), SOC 1/2, ISO 27001, FedRAMP (authorized 3PAO), PCI DSS.
How do I get pricing from this firm?
Consulting fees are scoped per engagement and not published by most firms. Use our quote request to get a scoped fee from Schellman and comparable firms.
Get a scoped quote
Consulting fees depend on your size, scope, and mission. Get comparable quotes from Schellman and similar firms.
Request quotes from Schellman & peersFree · No obligation · Takes 2 minutes
Alternatives to Schellman
Comparable firms buyers also evaluate — same buyer type, different trade-offs:
A-LIGN
Cybersecurity compliance and audit firm · pricing on request
Coalfire
Cybersecurity advisory and assessment firm · pricing on request
KirkpatrickPrice
Cybersecurity audit and assessment firm · pricing on request
Compare quotes from these firms
One request reaches the firms above — scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match licensed auditors to your size and scope → they send scoped quotes directly. Free, no obligation.