SOC 2 Auditors

LBMC (Lattimore Black Morgan & Cain, PC)

Established CPA firm issuing SOC 1, SOC 2, and SOC 3 attestation reports under SSAE 18.

National firmSaaSFintechHealthcareGovTech

Overview

LBMC, PC is a licensed CPA firm that provides SOC 1, SOC 2, SOC 3, and SOC for Cybersecurity examinations to service organizations nationwide, conducted under SSAE 18 by CPAs and information security professionals. SOC 2 engagements evaluate the AICPA Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, and Privacy) and conclude with an independent attestation report. The firm also offers HITRUST, ISO 27001/27701, HIPAA, PCI DSS, GDPR, and NIST-based services, serving healthcare, government, technology/SaaS, manufacturing, and other industries from Brentwood, TN.

Strengths

  • Licensed CPA firm (LBMC, PC) issuing full SOC 1/2/3 and SOC for Cybersecurity reports under SSAE 18
  • Large multi-service practice combining CPAs and information security professionals
  • Deep healthcare and HITRUST expertise alongside broad framework coverage

Consider

  • Founding year not stated on the reviewed pages
  • Primarily US-focused; regional/national firm rather than a SaaS-native boutique

Frameworks covered

SOC 1SOC 2 Type 1SOC 2 Type 2ISO 27001HIPAAPCI DSSGDPR

Regions served

United States

Sources: LBMC (Lattimore Black Morgan & Cain, PC) — SOC services

Get 3 quotes that fit.

Tell us your stage, framework, and timeline once. We match you with three firms that fit — one short call, not five sales pitches.

Free for buyers · No spam · Independent of every firm listed