Kroll
Kroll is a global risk advisory firm whose cyber practice covers incident response, risk assessments, and security program consulting. Note: we could not confirm this firm on HITRUST's published external assessor list as of September 2026 — it is positioned here for NIST CSF program work, not validated HITRUST assessments.
At a glance
| Headquarters | New York, New York |
|---|---|
| Founded | 1932 |
| Firm type | Global risk and cybersecurity consulting firm |
| Planning range | Not published — request a scoped quote |
| Typical timeline | Varies — confirm in proposal |
| Frameworks (per firm) | NIST CSF 2.0, incident response, cyber risk assessments, managed detection |
| Official website | kroll.com |
Best fit
Enterprises that want CSF-aligned risk assessments from a global risk brand, especially post-incident.
Before you engage
Not a HITRUST-authorized assessor per our check — engage for CSF strategy, not r2 assessments.
Questions about Kroll
Is Kroll affiliated with or endorsed by CISA?
No — and no private firm is. CISA does not certify, endorse, or accredit consultants. Kroll is listed here as a Global risk and cybersecurity consulting firm.
What services does Kroll offer?
Per the firm's public materials: NIST CSF 2.0, incident response, cyber risk assessments, managed detection.
How do I get pricing from this firm?
Consulting fees are scoped per engagement and not published by most firms. Use our quote request to get a scoped fee from Kroll and comparable firms.
Get a scoped quote
Consulting fees depend on your size, scope, and mission. Get comparable quotes from Kroll and similar firms.
Request quotes from Kroll & peersFree · No obligation · Takes 2 minutes
Alternatives to Kroll
Comparable firms buyers also evaluate — same buyer type, different trade-offs:
A-LIGN
Cybersecurity compliance and audit firm · pricing on request
Coalfire
Cybersecurity advisory and assessment firm · pricing on request
Schellman
Independent cybersecurity assessment firm · pricing on request
Compare quotes from these firms
One request reaches the firms above — scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match licensed auditors to your size and scope → they send scoped quotes directly. Free, no obligation.