Normalised provider profile

A-LIGN provides assessment, certification and cybersecurity services. Its portfolio includes SOC 1 and SOC 2 examinations, ISO certifications and assessments for FedRAMP, CMMC, HITRUST and PCI. Penetration testing, red-team services and other technical security assessments complement its compliance programs. Organisations can address several frameworks through a coordinated assessment program and organise evidence using the A-SCEND audit-management platform. Purchasing decisions depend on customer requirements, target markets, data types and the specific assessment scope. The distinction between preparation and independent assessment, the applicable accreditation and responsibilities require particular attention. A-LIGN partners with Drata, which provides software for control monitoring and evidence collection, while A-LIGN performs agreed audit services. They are separate providers with complementary responsibilities; a jointly published resource does not constitute a joint company.