Back to Directory
Registered Alliance Member

MHM Professional Corporation

Calgary, Canada
5.0 (3)
Certifications
Ideal Client Size
  • SMB (1-300 FTE)
  • Mid Market (301-1,000 FTE)
Industry Specialization
  • Construction
  • Finance and Insurance
  • Government
  • Healthcare
  • Hospitality
  • Manufacturing
  • Privacy
  • SaaS
  • Start-ups
  • Technology
  • Transportation
Regions Covered
  • United States
  • Canada
  • United Kingdom
  • Western Europe
  • Australia
  • Caribbean
  • Eastern Europe
Supported Languages
  • English
Additional Services Offered
  • Privacy Assessments
  • Risk Advisory
Frameworks Supported
  • SOC 1 Type 1
  • SOC 1 Type 2
  • SOC 2 Type 1
  • SOC 2 Type 2
  • ISO 27001
  • ISO 27001:2013
  • ISO 27001:2022
  • ISO 27001 - Internal
  • ISO 27017 & 18
  • ISO 27701
  • ISO 42001
  • Cyber Essentials
  • CCPA
  • COBIT
  • GDPR
  • HIPAA
  • Microsoft SSPA
  • NIST CSF
  • SOX ITGC
  • SOC 3

About MHM Professional Corporation

MHM Professional Corporation is a boutique CPA firm of ex-Big 4 senior professionals providing Digital Trust audit & consulting for clients in North America, Europe and Israel. Our mandate is to deliver professional, technology enabled IT Security & Compliance services with pricing tailored for small and mid-sized organizations.

Our areas of practice & expertise include:

  • SOC1 / SOC2 / SOC2+ (HIPAA, NIST, ISO27001) / SOC3 audits
  • ISO27001:2022 and ISO27701 certifications
  • ISO27001:2022 and ISO27701 internal audit (for non certification clients)
  • Privacy assessments (HIPAA, GDPR, etc.)
  • Readiness assessments & support (SOC1/SOC2, PCI, etc.)
  • IT Security Governance, Risk & Controls & Internal Audit

MHM is based in Calgary, Alberta and led by Mark Mandel and Jose Costa, ex-PwC Partners with over 50 years of experience between them. Collectively, our team has over 100 years of Big 4 IT/Security audit and consulting experience. This level of expertise and working knowledge of the standards allows us to scope and deliver projects focused on your key risks and compliance requirements.

Reviews
5.0 (3)
Write a review
Reliable and trusted audit partner
5.0
Jun 05, 2025
I've worked with MHM for five years on SOC 1, SOC 2, and NIST CSF engagements, and they've consistently delivered a great experience. They're highly responsive and easy to work with. Their process is clear, efficient, and reliable—making simultaneous audits across across multiple products feel manageable. I highly recommend them to any organization looking for a trusted audit partner.
Excellent service!
5.0
May 05, 2025
We are a small company who subscribed to Drata a while back, but never really got far for multiple reasons. Getting SOC 2 Type 2 and ISO 27001 certified started to become urgent, and I found MHM a little bit by accident. And what a find! I wish I had found them earlier. They were able to provide me with clear instructions and relevant information to get us throught he process in an impressive timeline. I highly recommend them!
Great teamwork and fast timeline!
5.0
Aug 12, 2024
MHM rescued us after a bad relationship with our previous auditor who had high turnover and low attention to detail. MHM was not only fast to deliver on their deliverables to get us our report urgently, but they also were very patient with our new analysts and sysadmins to get just the right evidence for our SOC2, Type 2. I will definitely use them in the future and highly recommend them to our friends.