Registered Alliance Member
Drummond Group, LLC
Durham, NC, United States of America
Resources
Ideal Client Size
- SMB (1-300 FTE)
- Mid Market (301-1,000 FTE)
- Enterprise (1,000+ FTE)
Industry Specialization
- Finance and Insurance
- Government
- Healthcare
- Hospitality
- Manufacturing
- Retail
- SaaS
- Start-ups
- Technology
Regions Covered
- United States
- Canada
- United Kingdom
- Western Europe
- Australia
- Caribbean
- Mexico
Supported Languages
- English
Additional Services Offered
- CISO Advisory
- Penetration Testing
- Privacy Assessments
- Risk Advisory
Frameworks Supported
- SOC 2 Type 1
- SOC 2 Type 2
- ISO 27001 - Internal
- PCI
- CCPA
- CPRA
- NIST 800-53
- NIST AI RMF
- FFIEC
- FISMA
- GDPR
- HIPAA
- NIST CSF
- NIST 800-171
- DORA
About Drummond Group, LLC
Drummond is a trusted leader with a 25+ year history providing Certification, Risk Assessments, and Cybersecurity services across all industries. We have been a Payment Card Industries (PCI) QSA nearly 20 years and Certification Bodies for numerous government initiatives including the DEA's EPCS program and HHS's Electronic Health Records. We provide full cybersecurity GRC/audit services including Risk Assessments, vCISO, Penetration Testing, and Red Teaming.
Schedule your free PCI, HIPAA, or Cybersecurity consultation and get answers to your most pressing conformance or security questions.
Media
Introduction to Drummond Compliance Services
Drummond PCI DSS Compliance Checklist
Drummond PCI Continuous Compliance Service
Comprehensive Healthcare Risk Assessment & HIPAA Gap Assessment Guides
Seven Deadly Sins of PCI
Videos
Are you ready for PCI DSS v4.0? Drummond is here to help!
Artificial Intelligence: Mitigating Risk while Maximizing Efficiency
Clients
Reviews
Write a review
Hired Drummond as QSA to conduct PCI DSS V4.0 Audit and it was worth
Jul 22, 2025
“Our recent experience with Drummond for our PCI DSS v4.0 audit was exceptional. Their QSAs demonstrated outstanding expertise and professionalism throughout the entire process. The project management was organized, with clear timelines and expectations established from the beginning. What truly set Drummond apart was their communication - they maintained consistent contact, providing timely updates and addressing our questions promptly. Their team took a collaborative approach rather than point