Cybersecurity Services for RSM US (Security Practice)

RSM US traces to 1926, when Ira B. McGladrey acquired a seven person accounting office in Cedar Rapids, Iowa. Some version of the McGladrey name stayed on the door for nearly nine decades. The headquarters moved to Chicago in 2012, and on October 26, 2015 McGladrey LLP became RSM US LLP as RSM International pulled its member firms under one brand. Security sits inside that partnership, next to audit and tax

Accreditation is the constraint. RSM is a PCI DSS Qualified Security Assessor, an Authorized HITRUST External Assessor and a FedRAMP and CMMC third party assessor, and those programs limit how much of a control environment one firm can build and then attest to for the same client. That caution bites at exactly the moment a middle market client stops wanting a grade and starts wanting somebody to build the thing. Then there is geography. Eighty one offices across the United States and Canada means a partner in one city sells work that has to be delivered by people sitting in another, on a partnership utilization model that does not flex easily for a six week deployment

CWS is the bench that does not create that problem. Our engineers deploy under the RSM name at arm's length from the attestation work, to one delivery standard across the United States and Canada, and in French where Quebec or Canadian federal clients require it, which matters for a firm that counts Canadian offices in its own footprint. Corova handles scoping, quoting and tracking, so a partner can price an engagement locally without waiting on a national resourcing call