NIST Cybersecurity Framework (CSF)

Last Reviewed: September 2026
Next Review Due: September 2027

RELIANOID NIST CSF Alignment Statement

Mapping RELIANOID Load Balancer and Organizational Practices to the NIST Cybersecurity Framework

RELIANOID aligns both its product and organizational security practices with the NIST Cybersecurity Framework (CSF) core functions—Identify, Protect, Detect, Respond, Recover—to deliver a structured, risk-based approach to cybersecurity across our Load Balancer solution and all supporting operations, including development, delivery, and support.

This page details how RELIANOID integrates the NIST CSF principles and supports customers in regulated industries such as finance, healthcare, and government, as well as general enterprise environments. RELIANOID is not certified against the NIST CSF; however, this page reflects our alignment and continuous improvement efforts across all deployments and operations.

Scope & Deployment Models

• System in Scope: RELIANOID Load Balancer (all editions) and supporting business processes.
• Operations: Development, product delivery, and customer support activities.
• Deployment Models: All models (on-premises, cloud, and hybrid) are aligned with the same NIST CSF-based control baseline.

Identify

• Asset Management: Comprehensive inventory of software components, environments, and services; assets categorized by sensitivity and operational criticality.
• Governance & Risk Management: Quarterly risk assessments, internal audits, and governance frameworks documented in RELIANOID’s Quarterly Security Compliance Report. The 2026Q3 risk register tracks remediation of remaining high-risk pentest findings (target 2026Q4) and two resolved 2026Q3 incidents under continued monitoring, with no evidence of sensitive data access.
• Business Environment: Understanding of customer regulatory needs across finance, healthcare, and government, with responsibilities clearly mapped in shared environments.

Protect

• Access Control: Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and SSO/LDAP integration to safeguard administrative access.
• Data Security: TLS 1.2/1.3 enforced in transit (100% of services TLS-capable, SSL Labs A+ rating), AES-256 support for data at rest, and customer-managed encryption options when applicable.
• Secure Development: Secure Software Development Lifecycle (SSDLC) incorporating automated validation scripts, threat modeling, and vulnerability testing on every commit.
• Maintenance & Patching: Software updates published with every release; automated per-commit code scanning (SAST/DAST), weekly third-party library scans, and quarterly penetration testing (2026Q3: 112 vulnerabilities remediated, 0 outstanding).

Detect

• Anomalies & Events: Comprehensive system logging and customizable alerts for security anomalies, with options to forward logs to customer SIEMs; centralized SIEM correlation is in the roadmap. Alert accuracy and escalation procedures are maintained and reviewed.
• Continuous Monitoring: Proactive monitoring across systems and services to identify deviations from expected behaviors.
• Detection Processes: Defined escalation procedures and incident triage workflows ensure timely detection and mitigation of risks.

Respond

• Response Planning: Documented incident response plan aligned with NIST CSF principles; roles and responsibilities clearly defined.
• Communications: Customer notification channels and escalation paths supported through our Service Level Agreements (SLAs).
• Analysis & Mitigation: Root-cause analysis and continuous control improvements after each incident, tracked via quarterly reviews. In 2026Q3, two detected incidents (web platform and version control system) were investigated, resolved, and placed under continued monitoring, with access and authentication controls strengthened.

Recover

• Recovery Planning: Business Continuity and Disaster Recovery (BCDR) plans reviewed annually; objectives aligned with customer RTO and RPO requirements.
• Improvements: Post-recovery reviews feed into ongoing resilience improvements and documentation updates.
• Communication: Structured recovery communication procedures ensure transparency and coordinated restoration efforts.

Third-Party Risk & Supply Chain

• Vendor Assessments: Suppliers reviewed quarterly through RELIANOID’s Third-Party Risk Management framework; critical vendors’ compliance verified through external certifications.
• Supply Chain Controls: Alignment with NIST CSF and ISO 27001 to ensure resilience against third-party or supply chain-related risks.

Measurement & Metrics

• Metrics such as Mean Time to Detect (MTTD), Mean Time to Remediate (MTTR), and vulnerability closure rates are tracked and reviewed quarterly. Latest 2026Q3 indicators: 1,596 automated security tests executed (0 critical findings), 99.979% service uptime over the last 30 days, and 100% workforce MFA enforcement.
• Security KPIs and continuous improvement objectives are maintained in the corporate risk register and product roadmap.

Continuous Improvement

• Quarterly audits and security reviews aligned with NIST CSF categories to measure performance and identify improvement areas.
• Enhanced automation for monitoring, alerting, and evidence collection to reduce manual compliance overhead.
• Regular internal training and penetration testing; tabletop and scenario-based exercises are scheduled for 2027 to strengthen incident preparedness.

Document Reviews

Contact and Assurance

We welcome requests for detailed security documentation, risk mapping matrices, or compliance disclosures.

Contact our Compliance & Security Team
Download Latest Security Report