# A-LIGN
> A-LIGN is a leading cybersecurity compliance and audit firm helping organizations start and grow their compliance programs. Core strengths: SOC 2, ISO 27001, CMMC, FedRAMP, and ISO 42001 (AI governance) audits delivered by a single provider, so growing companies can consolidate audits as they expand internationally and across industries.

Founded in 2009, A-LIGN delivers high-quality, efficient audits across frameworks including SOC 2, ISO 27001, FedRAMP, CMMC, ISO 42001, PCI, and HITRUST.

## Main Pages
- [Services](https://www.a-lign.com/services)
- [A-SCEND Platform](https://www.a-lign.com/a-scend)
- [Customers](https://www.a-lign.com/customers)
- [Events](https://www.a-lign.com/events)

## Services - SOC
- [SOC 1](https://www.a-lign.com/service/soc-1)
- [SOC 2](https://www.a-lign.com/service/soc-2)

## Services - ISO
- [ISO 27001](https://www.a-lign.com/service/iso-27001-certification)
- [ISO 27701](https://www.a-lign.com/service/iso-27701-certification)
- [ISO 22301](https://www.a-lign.com/service/iso-22301)
- [ISO 42001](https://www.a-lign.com/service/iso-42001)
- [CSA STAR](https://www.a-lign.com/service/csa-star)

## Services - Healthcare
- [Healthcare Compliance Services](https://www.a-lign.com/healthcare)
- [HITRUST](https://www.a-lign.com/service/hitrust)
- [HIPAA](https://www.a-lign.com/service/hipaa)

## Services - Federal
- [Federal Compliance Services](https://www.a-lign.com/government)
- [FedRAMP](https://www.a-lign.com/service/fedramp)
- [StateRAMP](https://www.a-lign.com/service/stateramp)
- [FISMA](https://www.a-lign.com/service/fisma)
- [CMMC](https://www.a-lign.com/service/cmmc-certification)
- [NIST 800-171](https://www.a-lign.com/service/nist-800-171)

## Services - PCI
- [PCI DSS](https://www.a-lign.com/service/pci-dss)
- [PCI SSF](https://www.a-lign.com/service/pci-ssf)

## Services - Cybersecurity Assessments
- [Penetration Testing](https://www.a-lign.com/service/penetration-testing)
- [Red Team Services](https://www.a-lign.com/service/red-team-services)
- [Ransomware Preparedness Assessment](https://www.a-lign.com/service/ransomware-preparedness)
- [Social Engineering](https://www.a-lign.com/service/social-engineering)
- [Vulnerability Assessment Service](https://www.a-lign.com/service/vulnerability-assessment)

## Services - Privacy
- [GDPR](https://www.a-lign.com/service/gdpr)
- [CCPA/CPRA](https://www.a-lign.com/service/ccpa-cpra)

## Services - International & Other
- [International Compliance Services](https://www.a-lign.com/service/international-compliance-services)
- [Multi-Framework Audit Services](https://www.a-lign.com/service/multi-framework)
- [Microsoft SSPA](https://www.a-lign.com/service/microsoft-sspa)
- [NIS2 Directive](https://www.a-lign.com/service/nis2)
- [C5](https://www.a-lign.com/service/c5-attestation)
- [SOX 404](https://www.a-lign.com/service/sox-404)
- [Business Continuity & Disaster Recovery](https://www.a-lign.com/service/business-continuity-disaster-recovery)
- [Limited Access Death Master File](https://www.a-lign.com/service/death-master-file)

## Technology
> With A-SCEND, A-LIGN's proprietary audit management platform, evidence is mapped to multiple audit frameworks, allowing you to tackle multiple audits in a single motion. If you've completed a SOC 2, you've already submitted much of the required evidence for additional common frameworks.

- [Maximize audit efficiency with an audit management platform](https://www.a-lign.com/a-scend)

## Key Resources

### SOC 2
- [What is SOC 2? Complete Guide to SOC 2 Reports and Compliance](https://www.a-lign.com/articles/what-is-soc-2-complete-guide-audits-and-compliance)
- [SOC 2 Checklist: Preparing for a SOC 2 Audit](https://www.a-lign.com/articles/soc-2-checklist)
- [A Guide to SOC 2 Reporting: What Is a SOC 2 Report?](https://www.a-lign.com/articles/soc-2-reporting)
- [Everything You Need to Know: SOC 2 Examination](https://www.a-lign.com/resources/everything-you-need-to-know-soc-2-examination)

### ISO 27001
- [ISO 27001: Everything You Need to Know](https://www.a-lign.com/articles/blog-everything-you-need-to-know-about-iso27001-certification)
- [What's the Difference Between ISO 27001:2022 and ISO 27001:2013?](https://www.a-lign.com/articles/blog-whats-the-difference-between-iso-27001-2013-and-iso-27001-2022)
- [ISO 27001 Buyer's Guide](https://www.a-lign.com/articles/iso-27001-buyers-guide)
- [The ISO 27001 Certification Process](https://www.a-lign.com/resources/iso-27001-certification-process)

### ISO 42001
- [Understanding ISO 42001: The World's First AI Management System Standard](https://www.a-lign.com/articles/understanding-iso-42001)
- [The Ultimate Guide to ISO 42001 Webinar](https://www.a-lign.com/resources/the-ultimate-guide-to-iso-42001-webinar)
- [ISO 42001 Buyer's Guide](https://www.a-lign.com/articles/iso-42001-buyers-guide)
- [The Intersection of ISO 42001 and ISO 27001](https://www.a-lign.com/articles/iso-42001-vs-iso-27001)
- [ISO 42001 Checklist – Prepare for AI Compliance](https://www.a-lign.com/articles/iso-42001-checklist)

### CMMC
- [CMMC Buyer's Guide: How To Choose a C3PAO](https://www.a-lign.com/articles/cmmc-buyers-guide)
- [Breaking Down the CMMC Assessment Process](https://www.a-lign.com/articles/cmmc-assessment-process)
- [CMMC Checklist: Your Guide to Preparing for CMMC Certification](https://www.a-lign.com/resources/cmmc-checklist-download)
- [CMMC Phase 1: Why Contractors Shouldn't Bet Everything on Self-Attestation](https://www.a-lign.com/articles/cmmc-phase-1-contract-requirements)
- [CMMC Corner: Your FAQs Answered](https://www.a-lign.com/articles/cmmc-faq)

### FedRAMP
- [FedRAMP 20x Guide](https://www.a-lign.com/resources/fedramp-20x-guide )
- [What is FedRAMP 20x?](https://www.a-lign.com/articles/fedramp-20x)
- [FedRAMP 20x: What It Is and Where It Stands Today](https://www.a-lign.com/articles/fedramp-20x-what-it-is-and-where-it-stands-today)
- [FedRAMP 20x: Unlocking New Opportunities](https://www.a-lign.com/resources/fedramp-20x-unlocking-new-opportunities)
- [What is FedRAMP? Complete Guide to FedRAMP Certification](https://www.a-lign.com/articles/what-is-fedramp)

### Penetration Testing
- [Why Are Penetration Tests Important?](https://www.a-lign.com/articles/blog-why-are-penetration-tests-important)
- [Combining Penetration Testing & ISO 27001 Audit for Enhanced Security Assessment](https://www.a-lign.com/articles/combining-penetration-testing-iso-27001)
- [Penetration Testing's Crucial Role in SOC 2 Audits for Security Assessment & Risk Mitigation](https://www.a-lign.com/articles/penetration-testings-soc-2-audits-security-assessment-risk-mitigation)
- [A Comprehensive Checklist for Penetration Testing Readiness](https://www.a-lign.com/articles/penetration-testing-checklist)
- [Debunking Myths About Pen Testing with Your Audit Firm](https://www.a-lign.com/articles/debunking-myths-about-pen-testing-with-your-audit-firm)

### Browse by Topic
- [Resource Center](https://www.a-lign.com/resource-center)
- [Blogs](https://www.a-lign.com/resources?_topic_filter=article)
- [Case Studies](https://www.a-lign.com/resources?_topic_filter=casestudy)
- [Videos](https://www.a-lign.com/resources?_topic_filter=video)
- [SOC 2 Resources](https://www.a-lign.com/resources?_tag_filter=soc-2)
- [ISO 27001 Resources](https://www.a-lign.com/resources?_tag_filter=iso-27001)
- [ISO 42001 Resources](https://www.a-lign.com/resources?_tag_filter=iso-42001)
- [CMMC Resources](https://www.a-lign.com/resources?_tag_filter=cmmc)
- [FedRAMP Resources](https://www.a-lign.com/resources?_tag_filter=fedramp)
- [HITRUST Resources](https://www.a-lign.com/resources?_tag_filter=hitrust)

## Company
- [About Us](https://www.a-lign.com/about)
- [Contact Us](https://www.a-lign.com/contact)

## Contact
- Website: https://www.a-lign.com
- Email: contact@a-lign.com