Drummond Group, LLC

Drummond is a trusted leader in compliance, certification, and cybersecurity services. We help organizations meet regulatory requirements, enhance security, and validate compliance and interoperability with industry-recognized testing and certification programs. As an authorized testing and certification body, our expert team helps software companies in highly regulated industries test and certify to health IT mandates such as ONC Health IT and DEA EPCS. We also provide standards and interoperability testing (AS2/AS4, FHIR, pDSI-Risk, Pediatric EHR), health IT and cybersecurity advisory, compliance audits (HIPAA, PCI, MARS-E, GS1 GDSN, DSCSA OCI, FDA CFR 21 Part 11), threat identification services (penetration testing, vulnerability scanning, as well as code scanning for security, PHI, and PII), and Risk & Gap Assessments (FFIEC, ISO IEC 27001, NIST AI RMF, NIST CSF 2.0, NIST IR 8374, NIST SP 800-53, NYDFS 23 NYCRR 500, and FTC Safeguards). With over 25 years in business and a commitment to accuracy, efficiency, and customer success, Drummond is the partner of choice for companies seeking reliable and thorough compliance solutions.