SOC 2 audit firms and ISO 27001 certification bodies
Clients arrive for an audit without a program to audit. I get them ready, and they come back to you for the examination or certification.
- Home
- Partners
Your clients need a program built before you can audit, insure, or support it.
I build it. You keep the relationship. Referral partnerships for audit firms, certification bodies, CPA firms, MSPs, compliance platforms, and cyber insurance brokers.
- CISSP
- CISA
- GSLC
- CISO and vCISO
- USMC veteran
- 30 years in IT and security
01 — Who I partner with
Firms whose clients hit a wall before your work can start
Each of these partners regularly meets clients who aren’t ready yet. That gap is the work I do.
Compliance automation platforms and their partners
The platform collects evidence; someone still has to set scope, write policies, and fix failing controls. Clients who get unstuck stay on the platform.
CPA firms
Your clients face SOC 2, IT general controls, and the FTC Safeguards Rule. I handle the security program while you keep the advisory relationship.
MSPs and IT providers
Your clients need a security leader and a compliance program on top of the operations you run. I provide the program; the managed services stay with you.
Cyber insurance brokers
Clients facing tough applications or renewals need controls in place, documented, and defensible. I build them; you place the coverage.
02 — How referrals work
Simple, written down, and fair
No obligation to refer, and no pressure on your client.
01
Introduction call
We spend 30 minutes on the clients you serve and where a built program would help them.
02
Introduce a client
Make a warm introduction. If referral compensation applies, register the client with me by email first; I confirm in writing within five business days.
03
I scope directly with the client
A fixed-fee proposal agreed in writing. You don’t have to sell anything or answer technical questions on my behalf.
04
The client comes back to you
When the program is built, the client returns to you for the audit, the certificate, the platform, the managed services, or the policy.
03 — Terms
Partner terms
A summary. Referral compensation is set out in a written agreement, and that agreement governs.
- Referral compensation, where your profession allows it: 10% of the fees I collect from a referred client during the first 24 months of the engagement, paid quarterly with a statement.
- Audit firms, certification bodies, and CPA firms: no referral fees in either direction. Your independence stays intact, and referrals go both ways on merit.
- I never compete with your service. I don’t perform audits, issue certificates, or place insurance, and clients go back to you for the work you do.
- Accurate representation. Partners describe my services in general terms and leave scope, pricing, and timelines to me, which protects you as much as me.
Next step
Book a partner introduction
Thirty minutes to compare notes on the clients you serve and where a built program would help them. Pick a time below.
Loading available times… If nothing appears, open the calendar in a new tab.
Prefer email? jason@ineedaciso.com