# ROC Earns ISO 27001 Certification

ROC received ISO/IEC 27001 certification for the information security management system supporting its software, SaaS products, and cloud infrastructure. The certification may help ROC address security-control and vendor-risk reviews with U.S. government, defense, law-enforcement, and other regulated-sector customers. It is valid for three years subject to annual surveillance audits, but does not assess biometric algorithm performance.

- Procurement teams evaluating ROC can consider the certification as evidence about its information security management system during vendor-risk reviews; it does not establish the performance of ROC’s biometric algorithms.
- ROC may use the certification to support security-related procurement discussions with government and regulated-sector customers. The source does not identify a specific contract, solicitation, or award.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 04, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Vendors
- ROC ()

### Key Quotes
> independent NIST evaluations of ROC’s algorithm performance and ISO/IEC 27001 certification of its information security management system provide complementary assurance.
> — Blake Moore, Chief Operating Officer of ROC

### Sources
- [ROC has earned ISO/IEC 27001 certification for its information security management system. The company expects it to streamline procurement reviews with government and regulated-sector customers.

#ISO27001 #Cybersecurity

https://t.co/Er2HXuZKxb](https://x.com/BiometricUpdate/status/2118048322565095470) - twitter-fed-procurement