BARR Advisory
BARR Advisory announced its accreditation as a PCI QSA company by the PCI Security Standards Council in January 2024 (Business Wire), adding PCI DSS to a practice that already covered SOC, ISO 27001, HITRUST, and CSA STAR. Its materials emphasize cloud-native clients and a consulting-led approach to compliance programs.
At a glance
| Headquarters | Kansas City, Missouri |
|---|---|
| Founded | Not disclosed |
| Firm type | QSA company (QSAC); cybersecurity compliance firm |
| ROC planning range | $25K–$60K (planning estimate (Sept 2026)) |
| Typical fieldwork window | 4–8 wk |
| Frameworks (per firm) | PCI DSS, SOC 1, SOC 2, ISO 27001, HITRUST, CMMC |
| Official website | barradvisory.com |
Best fit
Cloud-native companies that want PCI from the same firm handling their SOC 2 and ISO work.
Before you engage
A newer QSA practice than its SOC practice — ask about the PCI team's assessment volume.
Questions about BARR Advisory
When did BARR Advisory become a QSA company?
BARR Advisory announced its accreditation as a PCI QSA company in January 2024 (Business Wire), adding PCI DSS to its SOC, ISO 27001, and HITRUST practices.
Get a scoped quote
QSA fees depend on your size, scope, and readiness. Get comparable quotes from BARR Advisory and similar accredited QSA companies.
Request quotes from BARR Advisory & peersFree · No obligation · Takes 2 minutes
Alternatives to BARR Advisory
Comparable QSA companies buyers also evaluate — same buyer profile, different trade-offs:
Schellman
QSA company (QSAC) · $50K–$120K
A-LIGN
QSA company (QSAC) · $40K–$100K
VikingCloud
QSA company (QSAC) · $50K–$120K
Compare quotes from these firms
One request reaches the firms above — scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match accredited QSA companies to your size and scope → they send scoped quotes directly. Free, no obligation.
← All QSA companies · PCI DSS cost guide · How to choose a QSA company