Drummond Group, LLC

Drummond is a reputable leader in compliance, certification, and cybersecurity services. We assist organizations in fulfilling regulatory obligations, improving security measures, and confirming compliance and interoperability through recognized testing and certification programs. As an accredited testing and certification organization, our skilled team aids software companies in highly regulated sectors to test and certify their compliance with health IT regulations like ONC Health IT and DEA EPCS. Additionally, we offer standards and interoperability testing (AS2/AS4, FHIR, pDSI-Risk, Pediatric EHR), health IT and cybersecurity consulting, compliance audits (HIPAA, PCI, MARS-E, GS1 GDSN, DSCSA OCI, FDA CFR 21 Part 11), threat identification services (penetration testing, vulnerability scanning, and code scanning for security, PHI, and PII), and Risk & Gap Assessments (FFIEC, ISO IEC 27001, NIST AI RMF, NIST CSF 2.0, NIST IR 8374, NIST SP 800-53, NYDFS 23 NYCRR 500, and FTC Safeguards). With more than 25 years of experience and a dedication to precision, efficiency, and client satisfaction, Drummond is the preferred partner for companies seeking dependable and comprehensive compliance solutions.