Services
- - - SOC Assessments
    - SOC 1
    - SOC 2
    - ISO Certifications
    - ISO 27001
    - ISO 27701
    - ISO 22301
    - ISO 42001
    - ISO 45001
    - ISO 14001
    - ISO 9001
  - - Federal Assessments
    - All Government
    - FedRAMP
    - GovRAMP
    - FISMA
    - CMMC
    - NIST 800-171
    - Healthcare Assessments
    - All Healthcare
    - HITRUST
    - HIPAA
  - - Cybersecurity
    - Penetration testing
    - Red team services
    - Ransomware preparedness assessment
    - Social engineering
    - Vulnerability assessment service
    - Privacy
    - GDPR
    - CCPA/CPRA
    - PCI Assessments
    - PCI DSS
    - PCI SSF
  - - Additional Services
    - International Services
    - Multi-Framework
    - AI Governance
    - AS9100
    - Microsoft SSPA
    - NIS2
    - C5
    - SOX 404
    - CSA STAR
    - Business Continuity & Disaster Recovery
    - Limited Access Death Master File
    - All Services
Platform
Company
- - - Veteran-owned elite cybersecurity team expands A-LIGN’s ability to help organizations move beyond compliance and stay…
      Learn more
Customers
Resources
- - - Quick links
    - Resource Center
    - Blogs
    - Case Studies
    - Videos
    - Events
  - - By service
    - SOC 2
    - ISO 27001
    - ISO 42001
    - CMMC
    - FedRAMP
    - HITRUST
    - PenTest
  - - Featured Resources

A-SCEND Login
Careers

Resource Center

2026 Compliance Benchmark Report

2026 Compliance Benchmark Report

A-LIGN’s Compliance Benchmark Report includes insights from over 1,000 compliance professionals and highlights industry benchmarks.

See More

SAS improves audit harmonization and efficiency with A-LIGN

SAS improves audit harmonization and efficiency with A-LIGN

A-SCEND Audit Consolidation FedRAMP ISO 27001 SOC 2

FedRAMP 20x Compliance Checklist

FedRAMP 20x Compliance Checklist

FedRAMP

ISO 42001 Virtual Workshop: From AI Adoption to AI Assurance

ISO 42001 Virtual Workshop: From AI Adoption to AI Assurance

ISO 42001

Compliance Center

Discover key insights, educational articles, helpful guides & more

SOC 2 ISO 27001 ISO 42001 CMMC FedRAMP

What is SOC 2? Definition, Requirements, and How the Audit Works

What is SOC 2? Definition, Requirements, and How the Audit Works

SOC 2

SOC 2 Checklist: Preparing for a SOC 2 Audit

SOC 2 Checklist: Preparing for a SOC 2 Audit 

SOC 2

Boomi showcases cybersecurity dedication with 10+ compliance certifications and attestations

Boomi showcases cybersecurity dedication with 10+ compliance certifications and attestations

FedRAMP HIPAA ISO 22301 ISO 27001

A Guide to SOC 2 Reporting: What Is a SOC 2 Report?

A Guide to SOC 2 Reporting: What Is a SOC 2 Report?

SOC 2

Everything You Need to Know: SOC 2 Examination

Everything You Need to Know: SOC 2 Examination

SOC 2

SOC 2 Framework: What You Need to Know

SOC 2 Framework: What You Need to Know

SOC 2

SEE ALL SOC 2 RESOURCES

ISO 27001: Everything You Need to Know

ISO 27001: Everything You Need to Know

ISO 27001

Explaining the ISO 27001 Certification Process

Explaining the ISO 27001 Certification Process

ISO 27001

ISO 27001 Buyer’s Guide

ISO 27001 Buyer’s Guide

Audit Quality Efficient Audits ISO 27001

What’s the Difference Between ISO 27001:2022 and ISO 27001:2013?

What’s the Difference Between ISO 27001:2022 and ISO 27001:2013?

ISO 27001

Butterfly Network embraces audit harmonization to strengthen global compliance program

Butterfly Network embraces audit harmonization to strengthen global compliance program

ISO 27001 StateRAMP

5 Steps to ISO Certification

5 Steps to ISO Certification

ISO 27001

SEE ALL ISO 27001 RESOURCES

What Is ISO 42001? The AI Management System Standard Explained

What Is ISO 42001? The AI Management System Standard Explained

ISO 42001

ISO 42001 Virtual Workshop: From AI Adoption to AI Assurance

ISO 42001 Virtual Workshop: From AI Adoption to AI Assurance

ISO 42001

Synthesia becomes first AI video platform to earn ISO 42001 certification

Synthesia becomes first AI video platform to earn ISO 42001 certification

ISO 42001

ISO 42001 Buyer’s Guide

ISO 42001 Buyer’s Guide

ISO 42001

ISO 42001 vs. ISO 27001

ISO 42001 vs. ISO 27001

ISO 27001 ISO 42001

Atoro becomes Europe’s first ISO 42001-certified cyber compliance agency with A-LIGN & Vanta

Atoro becomes Europe’s first ISO 42001-certified cyber compliance agency with A-LIGN & Vanta

ISO 42001

SEE ALL ISO 42001 RESOURCES

CMMC Buyer’s Guide: How To Choose a C3PAO

CMMC Buyer’s Guide: How To Choose a C3PAO

CMMC

What the CMMC Phase II Suspension Means for Defense Contractors

What the CMMC Phase II Suspension Means for Defense Contractors

CMMC

Breaking Down the CMMC Assessment Process

Breaking Down the CMMC Assessment Process

CMMC

Behind the Scenes of a CMMC Assessment

Behind the Scenes of a CMMC Assessment

CMMC

CMMC Checklist

CMMC

Island consolidates federal compliance with trusted audit provider A-LIGN

Island consolidates federal compliance with trusted audit provider A-LIGN

CMMC FedRAMP

SEE ALL CMMC RESOURCES

What is FedRAMP 20x?

What is FedRAMP 20x?

FedRAMP

FedRAMP 20x Compliance Checklist

FedRAMP 20x Compliance Checklist

FedRAMP

Already Have a SOC 2? You’re Closer to FedRAMP Than You Think

Already Have a SOC 2? You’re Closer to FedRAMP Than You Think

FedRAMP

Your FedRAMP Certification Profile: A Practical Guide for CSPs

FedRAMP

FedRAMP 20x Buyer’s Guide

FedRAMP 20x Buyer’s Guide

FedRAMP

FedRAMP 20x: Unlocking New Opportunities

FedRAMP 20x: Unlocking New Opportunities

FedRAMP

SEE ALL FedRAMP RESOURCES

Topics

SOC 2
ISO 27001
ISO 42001
HITRUST
FedRAMP
CMMC
Pen Test
PCI DSS
PCI SSF
SOC 1
HIPAA

Type

Blog
Case Study
Press Release
Video

All Resources

What Is ISO 42001? The AI Management System Standard Explained

ISO 42001

Inside FedRAMP 20x: What It Really Takes to Get Ready

FedRAMP

CMMC Third-Party Certification Is Paused. Your Affirmation Isn't.

CMMC

The Status of CMMC Phase II at the 60-Day Mark

CMMC

ISO 42001 Virtual Workshop: From AI Adoption to AI Assurance

ISO 42001

A-LIGN expands IRAP assessment capabilities and enters the Australian market with acquisition of AssurePoint

A-LIGN News Press Releases

How Cross-Service EvidenceIQ Expands Compliance Programs Without Adding Complexity

A-SCEND

ISO 42001 and AIUC-1: How Two AI Assurance Standards Work Together

AI Governance ISO 42001

The FedRAMP SSP Replacement: Security Decision Record

FedRAMP

FedRAMP 20x Buyer's Guide

FedRAMP

What Still Applies: Navigating CMMC Reform Without Losing Momentum

CMMC

Transitioning from Rev 5 to FedRAMP 20x: What You Need to Know

FedRAMP

No resources found.

Upcoming Webinars

View All

The future of CMMC: What organizations need to know

Join A-LIGN and Rhymetec for a practical discussion on what organizations should be doing now.

Oct 13, 2026

Virtual Webinar

save your spot

Client Testimonials

“We have a very strong security DNA at the company. We decided very early on that it was critical to establish a robust security and governance program. We wanted to use our program to manage enterprise risk for the company and the product, but also to establish trust with our customers and in the marketplace.”

Client Image

Alfredo Hickman

CISO at Obsidian Security

“A-LIGN has proven to be a trusted partner and has become our go-to professional services firm for our audit and advisory needs. They consistently deliver expert and reliable services to help us manage risks and grow our business.”

Client Image

Jason Wheeler

VP of Cyber and Network Security at HealthBridge

“Holistically, this experience stands out from all the other experiences I’ve had in my career with compliance audits. I think that there’s some little magic sauce happening at A-LIGN that just makes it work.”

Client Image

Noe Ramos

VP of Operations at Agiloft

A lign Convergence background

Get the latest from A-LIGN

Sign up to our newsletter and don’t miss out!

A-LIGN is the leading cybersecurity compliance partner, trusted by over 6,400 organizations worldwide to navigate the complexities of compliance, audit, and risk. With a tech-enabled delivery model and deep domain expertise, A-LIGN delivers high-quality, efficient audits across frameworks including SOC 2, ISO 27001, FedRAMP, CMMC, ISO 42001, PCI, and HITRUST.

Services
SOC 1
SOC 2
ISO 27001
ISO 42001
CMMC
HITRUST
FedRAMP
Penetration Testing
PCI DSS
HIPAA
International Services
Multi-Framework
AI Governance
All Services

Company
About us
Partners
Platform
Careers
Our Team
Community
Trust Center
Contact Us

Customers
Customer Stories

Resources
Resource Center
Blogs
Case Studies
Videos
Events
Newsletter Sign-up

Guides
SOC 2 Compliance
ISO 27001 Certification
CMMC Compliance
ISO 42001 Compliance
HITRUST Certification

ISO Certificate Directory
Privacy Policy
Cookie Policy
Impartiality and Inquiries
Acceptable Use Policy
Sitemap
AI Information

Price and Associates CPAs, LLC dba A-LIGN ASSURANCE is a licensed certified public accounting firm registered with the Public Company Accounting Oversight Board (PCAOB). A-LIGN Compliance and Security, Inc. dba A-LIGN is a leading cybersecurity and compliance professional services firm.

A-LIGN 2026. All rights reserved.

Services
Platform
Company
Customers
Resources
- Resource Center
- Blogs
- Case Studies
- Videos
- Events
- By Service
  - SOC 2
  - ISO 27001
  - ISO 42001
  - CMMC
  - FedRAMP
  - HITRUST
  - PenTest

A-SCEND Login
Careers