STOKR ACHIEVES ISO/IEC 27001:2022 CERTIFICATION

STOKR ACHIEVES ISO/IEC 27001:2022 CERTIFICATION

​

STOKR has successfully obtained ISO/IEC 27001:2022 certification, the internationally recognized standard for Information Security Management Systems (ISMS). The certification confirms that STOKR operates within a formally established, independently audited control framework designed to safeguard sensitive data, manage operational risk, and support institutional-grade resilience.

​

ISO/IEC 27001:2022 AND OPERATIONAL CONTROL ENVIRONMENT

ISO/IEC 27001:2022 sets out a structured and risk-based approach to information security governance. The certification requires independent verification of documented policies, internal controls, and risk management procedures across organizational, human, physical, and technological domains.

For an infrastructure provider supporting tokenized securities and digital financial instruments, the framework ensures:

• Formalized governance and oversight structures
• Documented and audited access control mechanisms
• Structured incident detection and response processes
• Ongoing risk assessment and mitigation procedures
• Defined business continuity and recovery planning

The certification reflects the implementation of a comprehensive internal control environment aligned with institutional clients' security expectations.

CLIENT ASSURANCE AND RISK MITIGATION

For asset issuers, investors, and institutional clients, ISO/IEC 27001 certification provides measurable assurance across key operational dimensions:

• Independent validation of information security controls
• Reduced operational and cyber risk through structured risk management
• Enhanced transparency in control implementation and oversight
• Support for regulatory compliance and due diligence processes
• Strengthened counterparty confidence through globally recognized standards

The certification facilitates vendor risk assessments and supports institutional onboarding processes where independently audited security frameworks are a prerequisite.

REGULATORY ALIGNMENT: MICA AND CASP AUTHORIZATION

STOKR has submitted its application to be authorized as a Crypto-Asset Service Provider (CASP) in Luxembourg under the European Union’s Markets in Crypto-Assets Regulation (MiCA).

The ISO/IEC 27001 control framework directly supports this regulatory process by demonstrating:

• Defined internal governance structures
• Documented ICT risk management practices
• Formal incident management procedures
• Oversight of third-party and outsourcing risks

In addition, the certification aligns with core requirements under the EU Digital Operational Resilience Act (DORA), covering key areas such as ICT risk management, incident response, third-party risk management, and business continuity.

Together, these frameworks reinforce STOKR’s regulatory positioning within the evolving European digital asset ecosystem and further strengthens STOKR’s role as a resilient capital market infrastructure provider.