Cherry Bekaert
Full-spectrum SOC reporting from a national CPA firm, including SOC 2+ mapped to additional security frameworks.
National firmSaaSFintechHealthcare
Overview
Cherry Bekaert LLP is a licensed independent CPA firm that issues attest reports, providing SOC 1, SOC 2/2+, SOC 3, SOC for Cybersecurity, and SOC for Supply Chain examinations. Its SOC 2+ engagements can layer in additional frameworks such as NIST 800-53/171, ISO 27001, HITRUST/HIPAA, PCI, CSA, and CMMC. Advisory work is delivered through a separate non-attest entity, Cherry Bekaert Advisory LLC.
Strengths
- ✓Licensed CPA firm issuing the full SOC report family directly
- ✓SOC 2+ option maps controls to ISO 27001, HIPAA/HITRUST, PCI, and other frameworks
- ✓National multi-office firm serving financial services, technology, healthcare, and data centers
Consider
- •Attest and advisory services are split across two legal entities, so engagement scope should be clarified upfront
- •Founding year and office footprint not stated on the SOC services page
Frameworks covered
SOC 1SOC 2 Type 1SOC 2 Type 2ISO 27001HIPAAPCI DSS
Regions served
United States
Sources: Cherry Bekaert — SOC services