Assessor profile

Schellman

Schellman is a top-50 CPA firm running an audit-only practice — no consulting conflicts — with HIPAA assessments, HITRUST validated assessments, SOC examinations, and ISO 27001 certification audits. Its independence-first model appeals to buyers who want the assessor kept strictly separate from any implementation help.

Firm typeTop-50 CPA and assessment firm (audit-only practice)
HeadquartersTampa, Florida
Fee bandNot published — request a scoped quote
FrameworksHIPAA, HITRUST, SOC 1, SOC 2, ISO 27001, PCI DSS
Website verifiedHTTP 200 · 2026-09-24
Official sitewww.schellman.com
Best for

Organizations that want an audit-only firm with no consulting conflicts, especially for combined HIPAA/HITRUST/SOC 2 programs.

Watch for

Premium-tier firm — get a scoped quote and confirm scheduling lead times before committing to a compliance deadline.

What to ask Schellman

  1. Who is my named assessment team, and what's their healthcare experience?
  2. What's your committed fieldwork window this quarter?
  3. Fixed fee or variable — and exactly what breaks the fixed fee?
  4. How do you price remediation support, separately from the assessment?
  5. Can I talk to two reference clients my size?
Assessment independence. Ask whether this firm also sells implementation services for the gaps it would assess — and get the independence answer in writing.

Frequently asked

How much does Schellman charge for a HIPAA assessment?

Schellman publishes no fee bands publicly — assessment fees are scoped per engagement, so request a scoped quote for an exact figure.

Is Schellman accredited to assess HIPAA?

There is no government accreditation for HIPAA assessors, so no firm can hold one. What matters is healthcare assessment experience — ask for references and the named assessment team.

Does Schellman cover what my organization needs?

They describe themselves as: Top-50 CPA and assessment firm (audit-only practice). They state they support HIPAA, HITRUST, SOC 1, SOC 2, ISO 27001, PCI DSS — confirm scope, team, and fee in a written engagement before committing.

Similar firms

Clearwater

Healthcare-exclusive cybersecurity and compliance firm

Coalfire

Cybersecurity advisory and assessment firm

A-LIGN

Technology-enabled audit and assessment practice

Compare Schellman against alternatives

Get 2–3 scoped quotes from experienced HIPAA assessors matched to your size, setting, and timeline. Free, 2 minutes.

Get a free quote