ControlCase, a compliance-as-a-service provider, “has an army of people dedicated to helping [you] get through the challenges of compliance and cybersecurity services” and “a mission to help MSPs grow,” says the company’s Joshua Hoffman, chief revenue officer. Stressing what he calls a “sell with” strategy, Hoffman says ControlCase offers MSPs free use of its compliance hub along with sales and marketing resources to bring in new revenue around compliance readiness and remediation.
He says the company can help MSPs with as much or as little of their clients’ compliance journey as they want. “What you can’t do, or what you don’t want to do, we do. It’s that simple,” he explains.
“We are going to be 100% complementary, and so everything that we do adds value to their P&L,” Hoffman says.
Importantly, he adds, ControlCase doesn’t want MSPs to miss out due to lack of skill or resources. “There’s so many dollars sitting out there for the taking inside of this process,” he says.
Compliance Cred
ControlCase has a 20-year history in automating IT compliance and cybersecurity, with hands-on audit, compliance, and risk management experience. Hoffman, who joined the company in 2024, says ControlCase is one of only 10 or so companies is the world with three significant designations in the compliance world: a CMMC Registered Provider Organization (RPO), a FedRAMP Third Party Assessment Organization (3PAO), and most recently an Authorized CMMC Third-Party Assessment Organization (Authorized C3PAO).
In April, ControlCase launched its free Self-Assessment Tool, purpose-built to help MSPs quickly evaluate both internal and client cybersecurity readiness and unlock new compliance-driven revenue streams. The tool allows MSPs to complete a short survey and instantly receive customized compliance readiness feedback as well as a detailed audit proposal tailored to CMMC, SOC 2, ISO 27001, or PCI DSS frameworks.
In this episode of Partner Playbook, Hoffman details how ControlCase can help MSPs guide their clients through a compliance journey—from readiness to attestation, certification, and audit—across 67 different frameworks. He tells Tonya Gentry, of MSP Success/Big Red Media, that they want MSPs to “shift from not only being the center of the technological universe for their clients, but to also being the center of the compliance universe for their clients.” He also reveals the types of MSP partners ControlCase looks for, and what’s ahead with their services.
Watch or listen to the conversation below.





