
February 18, 2025 – Norman, OK – PCI Energy Solutions is pleased to announce its successful completion of the Service Organization Controls 1 Type II (SOC 1 Type II) and Service Organization Controls 2 Type II (SOC 2 Type II) attestation issued under the American Institute of Certified Public Accounts (AICPA) and Statement on Standards for Attestation Engagements No. 18 (SSAE 18) for 2024.
After a thorough external audit, the SOC reports were prepared and issued by the leading external audit firm KirkpatrickPrice for the evaluation period ending in October 2024. The audit results indicate that PCI’s controls as a cloud service provider are appropriately designed and effectively executed. This marks PCI’s 13th consecutive year to be issued unqualified SOC reports.
Additionally, PCI is pleased to announce its successful completion of a compliance audit on the Federal Information Security Management Act of 2002 (FISMA) using the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Revision 5 framework.
After a thorough external audit, a FISMA Compliance Report was prepared and issued by KirkpatrickPrice, attesting that PCI has implemented safeguards that meet the protections required by FISMA using the NIST SP 800-53 rev.5 framework. The audit results indicate that PCI’s information security program is operating with sufficient effectiveness to provide reasonable assurance that the security, confidentiality, and integrity of nonpublic personal information is protected as of Oct. 31, 2024.
“Cybersecurity remains a top priority for PCI and our clients, who rely on our solutions to manage mission-critical operations,” said Peter Samoray, senior director of Cybersecurity at PCI. “Successfully completing these audits year after year demonstrates our unwavering commitment to maintaining the highest security standards and continuously evolving our practices to meet industry and regulatory expectations.”
“PCI Energy provides software solutions to the energy market,” said Joesph Kirkpatrick, President of KirkpatrickPrice. “Their dedication to a strong cybersecurity control is paramount to those providing critical infrastructure. We appreciate their commitment to securely managing their AWS configuration and implementing vulnerability assessment during application development.”
These reports provide assurance that PCI’s hosted solutions will meet its customers’ security needs on a best-in-class cloud platform. PCI works globally with a variety of customers, including federal and state entities, and strives to comply with industry best practices to deliver secure and reliable software solutions. If you’re interested in learning more about how your organization can protect itself against evolving cybersecurity threats, head to our Cybersecurity page and request access to a recent webinar led by our director of IT Security.
About PCI Energy Solutions:
PCI Energy Solutions empowers energy companies to continuously optimize all aspects of energy production, trading, transportation, and consumption. Our industry-leading Energy Trading and Risk Management (ETRM) and bid-to-bill solutions help market participants maximize profitability, streamline operations, and ensure compliance in today’s dynamic energy landscape. We’re a tight-knit team of 300 diligent product experts, engineers, and business analysts, working closely with energy companies worldwide — our customers literally keep the lights on. PCI is headquartered in Norman, Oklahoma, with offices in Mexico City, Lima, and Sydney.
About KirkpatrickPrice:
KirkpatrickPrice is the leader in cyber security and compliance audit reports. Their experienced auditors know audits are hard, so they take complicated audits such as SOC 1, SOC 2, PCI DSS, HIPAA, HITRUST, GDPR, and ISO 27001 and make them worth it. The firm has issued over 10,000 reports to over 1,200 clients worldwide, giving its clients trusted results and the assurance they deserve. Using its Online Audit Manager, the world’s first compliance platform, KirkpatrickPrice partners its clients with an expert to guide them through the entire audit process, from audit readiness to final report. For more information, visit kirkpatrickprice.com, follow KirkpatrickPrice on LinkedIn, or subscribe to their YouTube channel.
Media Contact:
Morgan Day
PCI Energy Solutions
(405) 447-6933
[email protected]

About the Author
Madison Lenhart