Logo Menu

McKonly & Asbury

Full-service CPA Verified Camp Hill, PA, USA
  • Licensed CPA firm — can issue a SOC 2 report
  • AICPA peer review: Pass · Accepted Oct 1, 2025 · Verify at AICPA → ·
    Details Review period: Jan 1–Dec 31, 2024 · Record checked: Sep 3, 2026

McKonly & Asbury is a full-service CPA SOC 2 audit firm in Camp Hill, PA, USA. Its estimated SOC 2 Type II audit price is $20,000–$60,000; fieldwork to report takes 8–16 weeks.

Type 1 cost
$15K–$45K est.
Type 2 cost
$20K–$60K est.
Timeline
8–16 weeks
Accreditations
4 listed
Or compare with similar firms ↓

Free. Anonymous until you pick.

“The team is very knowledgeable. They take the time necessary to ensure we are prepared before the audit and works very closely during and after.”

— Client testimonial on McKonly & Asbury's SOC 2 examinations page
Pricing

How Much Does McKonly & Asbury Charge for SOC 2?

McKonly & Asbury's estimated SOC 2 Type II audit price is $20,000–$60,000; fieldwork to report takes 8–16 weeks.

Type 1 cost
$15K–$45K
Type 2 cost
$20K–$60K
Timeline
8–16 wk
Team Size
120-145
Report Delivery
Digital delivery
Response Time
Directors stay involved from readiness through fieldwork and reporting

Type 2 cost Pricing Position

McKonly & Asbury's $20K starting estimate sits below the middle half of full-service CPA firms, whose median is $30KType 2 starting prices in US dollars, from our auditor directory. The open dot is McKonly & Asbury's starting estimate, not a quote; the thin line runs to the top of its listed range. The lower row spans the middle half of the 107 full-service CPA firms we list, with a tick at the median. The arrow means the range runs past the axis, which ends at $40K.
McKonly & Asbury
Full-service CPA firms, middle half

Note: Pricing shown is estimated based on typical engagements. Use our SOC 2 cost calculator for a personalized estimate.

Timeline: The 8–16 week figure is the audit fieldwork-to-report window once evidence is ready, not the full engagement. A SOC 2 Type II also requires a separate observation period, typically 3–12 months depending on scope.

Pricing context
81%

of Full-service CPA firms charge more for Type II.

Timeline context
5%

of Full-service CPA firms have longer minimum timelines.

Accreditations
4

verified accreditations. Group average: 2.

Source: soc2auditors.org/auditors/mckonly-asbury/ · compiled and maintained by soc2auditors.org.

Compare

Which firms are closest to McKonly & Asbury on Type II price and timeline?

Closest-priced peers in the full-service CPA organization group, by Type II range, timeline, and verified accreditations. Firm-reported certification totals are left out — they are not the same measure as the badges we verify.

McKonly & Asbury 360 Advanced Sponsored Thoropass Sponsored Assurance Dimensions Carr, Riggs & Ingram (CRI) Forvis Mazars
Type II Cost $20K–$60K $10K–$80K $12K–$85K $20K–$60K $25K–$55K $25K–$55K
Type I Cost $15K–$45K $10K–$60K $8K–$15K $12K–$45K $15K–$30K $15K–$30K
Timeline 8–16 wk 3–12 wk2–6 wk8–16 wk4–10 wk5–12 wk
Team Size 120-145 51–200200–25060–751600–170035000–45000
Itemized Accreditations 4 88234
Licensed CPA issuer Yes YesYesYesYesYes
AICPA peer review Pass PassPassPassPassPass
Founded 1973 20042019200819972024

Sponsored alternatives are labeled in the table. How we make money

About

Who Should Hire McKonly & Asbury?

McKonly & Asbury Industry Fit

For buyers in Healthcare and Government Contractors, McKonly & Asbury fits the full-service CPA profile when its 8–16 weeks timeline and Type II pricing ($20K–$60K) align with the buyer's scope. Their 4 active accreditations, including CMMC C3PAO, HITRUST Assessor, PrimeGlobal, extend that fit beyond pure SOC 2 into adjacent compliance frameworks.

Healthcare, government-contractor, and mid-market service organizations that want SOC 2 alongside HITRUST or CMMC.

Is McKonly & Asbury Right for You?

  • You need HITRUST + SOC 2 bundled in a single engagement
  • You're a healthcare company looking for SOC 2 support
  • You're a SaaS company going through SOC 2 for the first time

What Makes McKonly & Asbury Different?

A Pennsylvania regional CPA that issues SOC reports nationwide and holds both HITRUST External Assessor and CMMC C3PAO authorization.

Office Locations

Camp Hill, PA (HQ)Lancaster, PABloomsburg, PAPhiladelphia, PA

Compliance Frameworks Offered

SOC 1 SOC 2 Type I & Type II SOC 3 SOC for Cybersecurity HIPAA HITRUST CMMC Level 2 (C3PAO)
Expertise

What credentials does McKonly & Asbury list?

Match this firm to your industry, overlapping frameworks you need alongside SOC 2, and the GRC stack you already run.

What Industries Does McKonly & Asbury Serve?

11 industries. Full-service CPA average: 6.

Healthcare Government Contractors Data Centers Payroll Services Insurance Loan Servicing Manufacturing and Distribution Construction Nonprofit SaaS Cloud Services

What Certifications and Accreditations Does McKonly & Asbury List?

4 accreditations. Full-service CPA average: 2.

AICPA CMMC C3PAO HITRUST Assessor PrimeGlobal

Audit Platform

Proprietary

Verification

McKonly & Asbury on the verification record

McKonly & Asbury's registry record was last verified 2026-08-13. Its AICPA peer-review result is Pass, retrieved 2026-09-03.

See the verification record · Is this your firm? Get your badge.

Quote

Get a quote from McKonly & Asbury

Tell us your scope. McKonly & Asbury replies with a price, a timeline, and why they'd be a fit. Anonymous until you pick.

Preparing to interview auditors? Use our checklist of questions to ask any SOC 2 auditor.

Want to compare first? Browse All Auditors or get 3–10 quotes.

We send you 3–10 quotes from firms that actually fit, a shortlist, not a phone book.

What do you need? Select all that apply

We email you the quotes. Firms don't see your contact details until you choose one.

Optional. Up to 2,000 characters.

Add optional details timeline, platform, frameworks
Other frameworks your customers ask about

Compare options before taking a sales call.

Every request is read by a human before anything goes out.

Guides that cover McKonly & Asbury

SOC 2 + HIPAA Overlay Engagements: How They Work

HIPAA mapping in a SOC 2 engagement: evidence-file boundaries, bridge-letter cadence, and how auditors structure a combined SOC 2 + HIPAA report.

Run an audit firm? See how firms get found and shortlisted here — how it works → / Verify McKonly & Asbury's profile →