ISO/IEC 27033 Compliance Statement
RELIANOID Load Balancer is a secure, high-performance application delivery controller designed for both on-premises and cloud environments. While RELIANOID is not currently certified under ISO/IEC 27033, our organization and product are fully aligned with its principles for network security architecture, ensuring the protection of information assets and the resilience of client operations across regulated industries such as finance, healthcare, government, and critical enterprises.
Organizational Alignment with ISO/IEC 27033
Our security governance integrates ISO/IEC 27033 guidance with ISO/IEC 27001 Annex A controls. We implement secure network design principles to ensure confidentiality, integrity, and availability of services, supported by rigorous risk management, annual policy reviews, and documented incident response procedures.
Network Architecture Security Details
The RELIANOID Load Balancer can be integrated into different architectures, supporting one-armed, two-armed, and n-armed models, with flexibility for NAT, sNAT, DSR, or proxy-based deployments with transparency. Secure networking designs using RELIANOID are valid for on-premises, hybrid, and multi-cloud environments. Additionally, RELIANOID supports secure segmentation, DMZ models, and other ISO/IEC 27033-aligned network patterns to ensure resilient, layered protection.
Key Network Security Measures
- Secure Architecture: Segmented network zones, private IP usage for intra-service communication (100%), and traffic isolation for sensitive systems.
- Transport Layer Security: SSL/TLS coverage for 95%+ of services, with an A+ rating from SSL Labs. Encryption in transit is enforced across all connections (minimum TLSv1.2, TLSv1.3 preferred with strong RSA keys and secure ciphers).
- Access Control: 100% of employee accounts protected by enforced multi-factor authentication (MFA).
- Application Security: Secure Software Development Lifecycle (SSDLC), automated testing, and continuous vulnerability scanning.
- Endpoint & Network Protection: Abuse mitigation, IP reputation filtering, and planned deployment of a Web Application Firewall (WAF).
Alignment with ISO/IEC 27033 Core Domains
- Security Architecture Overview: RELIANOID applies layered security designs, aligning with ISO/IEC 27033-1 and 27033-2 guidelines for network context and design phases.
- Perimeter Security: RELIANOID integrates seamlessly with external firewalls, intrusion prevention systems (IPS), and intrusion detection/prevention systems (IDPS). Additionally, RELIANOID includes built-in advanced IDPS capabilities to strengthen perimeter protection.
- Inter-Network Connections: All interconnections with customer environments are encrypted using the most secure ciphers available. Policies and controls align with ISO/IEC 27033-4 for secure third-party connectivity.
- Secure Communications: All control-plane communications use TLS (minimum TLSv1.2, TLSv1.3 recommended). While mutual TLS (mTLS) is not currently enforced, it is part of our roadmap for high-trust communications in alignment with ISO/IEC 27033-5.
- Supplier and Third-Party Security: Vendor interconnections are protected by TLSv1.3, with multi-factor authentication (MFA) applied as both a contractual and technical measure.
Operational Context for Regulated Clients
RELIANOID has supported deployments across highly regulated sectors:
- Finance: Implemented datacenter load balancing per service across multiple data centers, ensuring business continuity and secure redundancy.
- Healthcare: Delivered secure, hybrid architectures with encryption in transit and strict access controls to safeguard patient data.
- Government: Supported public sector administration with micro-segmentation, mTLS integration, and TOTP-based multi-factor authentication to meet stringent compliance and operational requirements.
Ongoing Improvements
In 2025, RELIANOID is further enhancing ISO/IEC 27033 alignment with:
- Deployment of centralized log correlation via SIEM.
- Implementation of Data Loss Prevention (DLP) tools.
- Expansion of third-party risk management processes.
- Blue team exercises and improved incident documentation.
Commitment to Our Clients
By aligning with ISO/IEC 27033, RELIANOID ensures that our network security practices meet the high standards expected in regulated and mission-critical environments. Our clients can deploy RELIANOID Load Balancer with confidence, knowing that both our product and our organization are built on secure architecture principles.
Document Reviews
| Date | Comment |
| 10th July 2025 | Document creation |
| 3rd September 2025 | Added network architecture models, multi-cloud alignment, DMZ patterns, perimeter & IPS integration, TLS/mTLS details, supplier security, and regulated client examples |
Contact and Assurance
We welcome requests for detailed security documentation, risk mapping matrices, or compliance disclosures.
Contact our Compliance & Security Team
Download Latest Security Report