RSM US LLP

RSM US LLP is a Cyber AB Marketplace-listed C3PAO based in McLean, VA.

Headquarters

McLean, VA

Region

McLean, VA

Founded

1926

Last verified

May 14, 2026

Sources

3 cited

Listing position

Editorial · unranked

Vendor website

Visit ↗

Plain-English description

What this provider does

RSM US LLP appears on the Cyber AB Marketplace. The marketplace listing is the basis of every claim on this page. We have not independently visited the vendor's own website or evaluated their services beyond the Cyber AB listing. Certified Third-Party Assessment Organizations (C3PAOs) are authorized to conduct CMMC Level 2 certification assessments.

Registered as / claimed status

Stated affiliations and certifications

What the vendor (or a third party) states about their formal status. Each line is anchored to its source.

Listed on the Cyber AB Marketplace as a C3PAO[01]

Why buyers hire them

What this provider is commonly used for

Formal CMMC Level 2 certification assessments (provider's own scope and authorization should be verified on their own site).
[01]
Formal CMMC Level 2 certification assessments under their C3PAO authorization.
[02]

Stated services

Services the vendor claims

CMMC Level 2 third-party assessments[01]
PCI DSS Assessment[03]
HITRUST Assessment[03]
FedRAMP Assessment[03]
CMMC Assessment[03]
CMMC Advisory[03]
ISO 27001 Audit[03]
NIST Compliance Consulting[03]
Privacy Program Consulting[03]
GDPR Compliance[03]
CCPA Compliance[03]
Third-Party Risk Management[03]
Governance Risk and Compliance Advisory[03]
eGRC Tool Implementation[03]
Business Continuity and Disaster Recovery Consulting[03]
FFIEC Compliance[03]
NERC CIP Compliance[03]

What we don't know

Gaps in this record

Facts that could not be confirmed against a public source on the retrieval date. If you can point to an authoritative source for any of these, we'll update the record.

·This record is derived from the Cyber AB Marketplace listing. We have not independently verified the vendor's own CMMC page, pricing, or current engagement capacity.
·Vendor self-description and detailed service mix are not captured here — see the linked Cyber AB profile for the vendor's own narrative.
·We have not independently verified the vendor's own website. Cyber AB Marketplace listing is the basis of every claim on this page.
·Vendor pricing, current capacity, and engagement model are not captured here.

Sources

[01]Cyber AB · Cyber AB Marketplace listing — C3PAO
“RSM US LLP appears on the Cyber AB Marketplace with the address McLean, VA. Role(s): C3PAO.”
Retrieved May 14, 2026 · high confidence
[02]The Cyber AB · RSM US LLP | Cyber AB Marketplace
“RSM US LLP, is the fifth largest audit, tax and consulting firm in the United States and the First Choice Advisor in the middle market with over 50,000 team members globally. Additionally, RSM is a global leader of cybersecurity and privacy services to the middle market organizations that span the entire defense industrial base across a myriad of industries, including aerospace and defense, manufacturing, consumer products, technology and more. As a professional services firm with the following designations, CMMC Certified Third Party Assessor Organization (C3PAO), Federal Risk and Authorization Management Program (FedRAMP) Third-Party Assessment Organization (3PAO), ISO 27001 consulting advisor, Payment Card Industry (PCI) Qualified Security Assessor (QSA) and HITRUST/HIPAA provider, RSM's cybersecurity services are designed to elevate security programs within complex environments, enabling organizations to deliver on their brand promises. We are the largest authorized C3PAO within the ecosystem and maintain the depth and breadth of skillsets to support the entire cybersecurity governance, risk, compliance and transformation agenda through both consulting and assessment-related...”
Retrieved May 14, 2026 · high confidence
[03]RSM US LLP · RSM US - Cyber Compliance and Governance
“RSM US LLP is the U.S. member firm of RSM International, a global network of independent assurance, tax and consulting firms. The Cyber Compliance and Governance practice covers frameworks including PCI DSS, NIST, ISO 27001, HIPAA, HITRUST, FedRAMP, FISMA, NERC CIP, FFIEC, DFARS, CMMC, GDPR, CCPA, and NYDFS. Service offerings include Advisory & Authorization (readiness through formal authorization for PCI DSS QSA, HITRUST External Assessor, FedRAMP and CMMC Third-Party Assessor, Business Continuity/Disaster Recovery, Certified Information Privacy Professional, ISO 27001 Lead Auditor), Third-Party Risk Management (designing and operating third-party cyber risk programs with risk identification, prioritization, and ongoing monitoring), Governance Risk and Compliance (common controls framework, eGRC tool implementation, three-lines-of-defense), and Privacy (GDPR, CCPA, GDPL, PIPEDA programs and gap assessments). RSM also offers a dedicated CMMC service line for DoD contractors.”
Retrieved May 14, 2026 · high confidence

Sources are the basis of every factual claim on this page. If the vendor has updated their site, the “last verified” date will lag. Re-check the vendor URL before relying on it.