Kompleye

Attestation and compliance audits

Specialist CPA attestation and compliance work in Reston, Virginia, is the focus of Kompleye. The firm provides assurance and regulatory compliance services, and it says it designs each audit project to match a client's certification requirements. Its focus is cybersecurity examinations and audits, and its website also lists a Latin America contact office.

An audit approach built around the client

The firm describes an agile audit that reduces effort on the client side, coordinates compliance requirements and uses technology to cut audit fatigue without lowering quality. It says its auditors have completed more than 200 audits for data centers, SaaS companies, business process outsourcers, call centers, payment processors, printing firms and healthcare application providers. The firm says it adapts the approach to the core business of each company.

SOC, HITRUST and other frameworks

The firm runs SOC examinations, which are System and Organization Controls reports with a cybersecurity version, and HITRUST assessments for healthcare compliance and risk management. Its service list also covers ISO information security management, CMMC for defense suppliers, FedRAMP authorization for cloud products sold to federal agencies, StateRAMP for state and local government cloud security, and HIPAA.

Methodology drawn from practical experience

The firm says its team has spent long hours deploying software, planning, assessing risk, managing companies and being audited itself. It believes this helps it see the other side of an audit, and it says long standard questionnaires are not always the most efficient way to assess a company. Its method aims to identify each company's unique needs, whether it is a SaaS business, a BPO or a healthcare service provider.

Team and sector experience

The company says its team has more than thirty years of combined audit experience, including time with large accounting firms and across industries and company sizes. Its sector experience covers software as a service, data centers, business process outsourcing, call centers, payment processing and healthcare services.