# ControlCase

> ControlCase combines security assessments, certification services, proprietary GRC software and managed compliance services. Its OneAudit approach reuses evidence across multiple frameworks, while Continuous Compliance monitors controls between assessments. The Fairfax-based company serves organizations worldwide, from payment businesses and healthcare technology providers to MSPs and federal contractors.

- **Founded:** 2004
- **Headquarters:** Fairfax, United States
- **Founders:** Kishor Vaswani (Founder and Chief Strategy Officer), Mark Mercer (Co-founder (listed by Crunchbase)), Rohit Tripathy (Co-founder (listed by Crunchbase))
- **Products:** OneAudit, Compliance Hub, Continuous Compliance, Card Data Discovery, Assessments, certifications and attestations
- **Notable:** OneAudit publicly announced in April 2015., Homepage reports 400 client companies across 40+ countries., Recognized as a HITRUST CSF Assessor since 2014, according to a 2015 investor release.

## Products & services

- **OneAudit** — Collects evidence and risk controls once and maps them across multiple standards, combining software, hosted solutions and managed services.
- **Compliance Hub** — Free GRC platform for evidence collection, collaboration, control mapping and audit progress tracking.
- **Continuous Compliance** — Ongoing control-data analysis, quarterly reviews, reporting, escalation and remediation guidance between audits.
- **Card Data Discovery** — Scans files, databases and email systems for unencrypted payment-card and other sensitive data; provides location and remediation information.
- **Assessments, certifications and attestations** — Services spanning PCI DSS, ISO 27001, HITRUST, SOC reports, CMMC, FedRAMP and additional security and privacy frameworks; deliverables depend on the framework.
- **Cybersecurity testing** — Penetration testing, vulnerability scanning, code and firewall reviews, log monitoring and application security training.
- **ISO/IEC 42001 certification** — ControlCase Assessments announced ANAB accreditation effective August 13, 2026 for AI management system certification.

## Achievements

- OneAudit publicly announced in April 2015.
- Homepage reports 400 client companies across 40+ countries.
- Recognized as a HITRUST CSF Assessor since 2014, according to a 2015 investor release.
- Acquired CyberNINES in April 2026.
- Announced ANAB accreditation for ISO/IEC 42001 effective August 13, 2026.

## Latest updates

- **2026-04** — Announced acquisition of CyberNINES on April 7; Scott Singer became Federal President.
- **2026-08** — Announced ISO/IEC 42001 accreditation, effective August 13, for AI management system certification.

## Links

- Website: https://www.controlcase.com/
- LinkedIn: https://www.linkedin.com/company/controlcase
- Twitter/X: https://twitter.com/controlcase
- YouTube: https://www.youtube.com/channel/UCUJ4BpY8smhJN53I_PiCsiQ
- Instagram: https://www.instagram.com/controlcasehq/
- Facebook: https://www.facebook.com/ControlCase-163720957041259/

---

Profile page: https://yespress.io/controlcase
Published by YesPress — https://yespress.io
Last updated: 2026-10-02