RSM US (RSM Defense)

Q: What industries does RSM US (RSM Defense) serve?

Government & Public Sector, Defense & Aerospace, Financial Services, Healthcare, Manufacturing, Energy & Utilities, Technology

Visit Website

Provider Snapshot

Core services: Managed Detection & Response (MDR), SIEM Management, Vulnerability Management +4 more
Platforms: Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike +2 more
Client focus: Mid-Market (201-1000), Enterprise (1000+)
Response SLA: 30 minutes
Website: rsmus.com

Company Details

Headquarters: Chicago, IL
Founded: 1926
Employees: 1000+
SOCs: 2
Response SLA: 30 minutes

Pricing

Pricing Model: Custom
Starting Price: Custom quote

About RSM US (RSM Defense)

RSM US LLP is a Top 5 CPA and advisory firm and the US member of RSM International, operating across 120+ countries. Their RSM Defense managed security practice delivers a next-generation NG-XDR platform integrating endpoint, network, cloud, and identity telemetry with AI-enhanced insights and automated remediation. RSM has achieved CMMC Level 2 certification as both an MSP and MSSP for government contractors, holds the largest Certified Third-Party Assessment Organization (C3PAO) status in the industry, and is a FedRAMP-authorized 3PAO. With 19,000+ professionals and deep expertise in PCI DSS, NIST, ISO, HIPAA, HITRUST, FedRAMP, FISMA, NERC CIP, FFIEC, DFARS, and CMMC, RSM Defense is particularly well-positioned for organizations in the Defense Industrial Base and highly regulated sectors requiring both managed security and compliance assurance.

Manage or promote this profile

Suggest an update

Represent this provider? Claim and verify the profile, get Featured placement, or become a Top Provider.

Claim profile Get Featured Become a Top Provider

Suggest an update

Services Offered

RSM US (RSM Defense) offers 7 security services. Click any service to see other providers that offer it.

Managed Detection & Response (MDR)SIEM Management Vulnerability Management Incident Response Compliance Management Penetration Testing Threat Intelligence

Industries Served

RSM US (RSM Defense) has experience serving 7 industries, including the regulatory requirements and security challenges unique to each.

Government & Public Sector Defense & Aerospace Financial Services Healthcare Manufacturing Energy & Utilities Technology

Supported Platforms

RSM US (RSM Defense) supports 5 security platforms. MSSPs with hands-on experience in your tools can onboard faster and tune detections more accurately.

Microsoft Sentinel Microsoft Defender CrowdStrike Falcon Splunk Tenable

Client Company Sizes

RSM US (RSM Defense) serves Mid-Market (201-1000), Enterprise (1000+) organizations. Providers focused on your company size tend to offer pricing and service levels that match your budget and team capacity.

Mid-Market (201-1000)Enterprise (1000+)

Compliance Frameworks Supported

RSM US (RSM Defense) provides compliance support for 12 frameworks. Compliance support typically includes control mapping, evidence collection, audit preparation, and ongoing monitoring to keep you audit-ready year-round.

SOC 2HIPAAPCI DSSNIST CSFNIST 800-171CMMCFedRAMPFISMANERC CIPFFIECHITRUSTDFARS

Certifications Held

RSM US (RSM Defense) holds 3 certifications. Each certification means the provider passed an independent audit of their security practices, operations, or technical skills.

SOC 2 Type IICMMC Level 2FedRAMP 3PAO

What Should You Ask When Evaluating RSM US (RSM Defense)?

Before engaging any MSSP, use these questions to assess whether the provider is the right fit for your organization. These apply to RSM US (RSM Defense) and any other provider on your shortlist.

What is included in the base service vs. what costs extra? Clarify whether incident response, compliance reporting, and additional log source onboarding are included or billed separately.
What response actions does the provider take directly? Some MSSPs only send alerts for your team to act on. Others take containment actions like host isolation or account lockout on your behalf.
What does the onboarding process look like? Ask about typical onboarding timelines, how much work your team needs to put in, and when full monitoring coverage goes live.
Can you provide references from similar organizations? Ask for references from companies in your industry and size segment. The experience of similar organizations is the best predictor of how the MSSP will perform for you.
What happens if we need to switch providers? Understand data portability, contract termination terms, and transition support. A transparent exit process is a sign of a provider that prioritizes long-term trust over lock-in.