Logo Menu

Consultants

Software

Learn

  • SOC 2 Insights

    Articles on cost, controls, timelines, and auditor choice

Free Tools

Cherry Bekaert

Full-service CPA Richmond, VA, USA
  • Licensed CPA firm that can issue a SOC 2 report
  • AICPA peer review: Pass · Accepted Dec 11, 2025 · Verify at AICPA → ·
    Details Review period: May 1, 2024–Apr 30, 2025 · Documents: peer-review report, acceptance letter · Record checked: Oct 21, 2026

Cherry Bekaert is a full-service CPA SOC 2 audit firm in Richmond, VA, USA. Type 2: $40K–$100K (our estimate). Timeline: 6–14 weeks.

Or compare with similar firms ↓

Free. Anonymous until you pick.

Pricing

How Much Does Cherry Bekaert Charge for SOC 2?

By our estimates, Cherry Bekaert charges $40,000–$100,000 for a SOC 2 Type 2 audit and $25,000–$80,000 for Type 1.

Type 2 price range

USD · our estimates

Cherry Bekaert's Type 2 range is $40K to $100K, our estimate for a full-service CPA firm of its kind, not a quote.

Get Cherry Bekaert's own price

The figures here are our estimates. Ask for the firm's own price for your size and scope.

Company size (employees)
Get my price

Free. We send an anonymized brief to Cherry Bekaert and other firms that fit; you compare the replies. Your name stays private until you choose who to talk to.

What moves the price: company size, criteria beyond Security, systems in scope and how ready your controls are. How SOC 2 audit fees are set

Time to your report

planning range
  1. Type 1 6–14 weeks
    1. fieldwork 6–14 wks
  2. Type 2 observation, then 6–14 weeks
    1. observation, typically 3–12 months
    2. 6–14 wks

By our estimates, 12% of full-service CPA firms have longer minimum timelines.

Source: soc2auditors.org/auditors/cherry-bekaert/ · our estimates, not quotes · How we estimate prices

Compare

Which firms are closest to Cherry Bekaert on Type 2 price and timeline?

Closest-priced peers in the full-service CPA organization group, by Type 2 range, timeline, and listed credentials. Firm-reported certification totals are left out because they measure something different from the credentials we list.

Cherry Bekaert 360 Advanced Sponsored Thoropass Sponsored BDO USA CBIZ Crowe LLP
Type 2 Cost $40K–$100K est. $10K–$80K confirmed$12K–$85K confirmed$30K–$110K est.$40K–$100K est.$40K–$100K est.
Type 1 Cost $25K–$80K est. $10K–$60K confirmed$8K–$15K confirmed$20K–$62K est.$25K–$50K est.$25K–$50K est.
Timeline 6–14 wk 3–12 wk2–6 wk5–13 wk4–9 wk4–9 wk
Team Size 3,000–5,000 51–200200–25013,000–15,00010,000–11,0005,400–6,000
Listed credentials 3 88383
Licensed CPA issuer Yes YesYesYesYesYes
AICPA peer review Pass PassPassPassPassPass
Founded 1947 20042019191019511942

Sponsored alternatives are labeled in the table. How we make money

About

Who Should Hire Cherry Bekaert?

Cherry Bekaert Industry Fit

For buyers in Technology and Financial Services, Cherry Bekaert fits the full-service CPA profile when its 6–14 week timeline and estimated Type 2 pricing ($40K–$100K) align with the buyer's scope. It also lists HITRUST Assessor and CMMC C3PAO among its credentials.

Technology, financial and professional services providers, including those with many SOC reports a year, needing SOC 1, SOC 2/2+ or SOC 3.

Is Cherry Bekaert Right for You?

What Makes Cherry Bekaert Different?

Says it issues several hundred SOC reports a year, serves clients with 25+ SOC 2 reports, and can fold NIST, ISO 27001, HITRUST, PCI or CMMC criteria into SOC 2+ reports. Herbein + Company of Reading, PA joined Cherry Bekaert (acquisition announced October 2025).

How engagements run

Offers gap assessment, readiness and remediation before a SOC audit. For clients with several reports it uses a 'test once' approach, relying on controls across reports to reduce repeat testing.

Firm facts

What credentials does Cherry Bekaert list?

Check Cherry Bekaert's credentials, then match the firm to your industry, the frameworks you need alongside SOC 2, and the GRC platform you already use.

What Certifications and Accreditations Does Cherry Bekaert List?

3 listed credentials.

AICPACMMC C3PAOHITRUST Assessor

Which Report Types and Frameworks Does Cherry Bekaert Offer?

SOC 1SOC 2SOC 2+SOC 3SOC for CybersecurityHITRUSTCMMC

What Industries Does Cherry Bekaert Serve?

6 industries. Full-service CPA average: 6.

TechnologyFinancial ServicesHealthcareProfessional ServicesGovernment ContractingEnterprise

What GRC Platforms Does Cherry Bekaert Work With?

Offices

Richmond, VA, USA (headquarters)

Verification

What we verified about Cherry Bekaert

We independently verified Cherry Bekaert's CPA standing and peer-review record.

Quote

Get a quote from Cherry Bekaert

Tell us your scope. We send it to Cherry Bekaert and other firms that fit, and you compare the replies. Anonymous until you pick.

Preparing to interview auditors? Use our checklist of questions to ask any SOC 2 auditor.

Want to compare first? Browse All Auditors or get 3–10 quotes.

We send you 3–10 quotes from firms that actually fit, a shortlist, not a phone book.

What do you need? Select all that apply
Company size employees
Add optional details timeline, platform, frameworks
Other frameworks your customers ask about

We email you the quotes. Firms don't see your contact details until you choose one.

Compare options before taking a sales call.

Every request is read by a human before anything goes out.

Guides that cover Cherry Bekaert

How Long Does a SOC 2 Audit Take? Timeline by Phase

A SOC 2 audit takes about 1–3 months from fieldwork to report. Plan 3–6 months end to end for Type 1 and 6–12+ months for a first Type 2.

Run an audit firm? See how firms get found and shortlisted here: how it works → / Verify Cherry Bekaert's profile →