ControlCase

ControlCase is a compliance firm that certifies and audits organisations holding regulated or sensitive data. It covers more than sixty frameworks, including PCI DSS, ISO 27001, HITRUST, SOC 2, FedRAMP and CMMC.

What ControlCase offers

• One Audit approach: a single audit intended to satisfy several standards at once, such as PCI DSS, ISO 27001, GDPR, HIPAA and SOC 2, collecting evidence once and mapping it across regulations.
• Continuous compliance service: keeps an organisation prepared for audit all year instead of only when certification is due.
• PCI quarterly scanning: required scans for merchants, service providers and financial institutions.
• GDPR data impact assessments: a first step for implementing a GDPR programme.
• Sensitive data discovery: finds card numbers and other sensitive information held in servers, databases, emails and many file formats.

Customers and markets

Works with merchants, service providers and financial institutions, including as a qualified security assessor for some PCI DSS clients.

Key facts

• Based in: United States
• Other: reports around 400 companies across more than 40 countries