ISO/IEC 27001:2022
Annex A controls taken into account in the design: access, authentication, logging, backup, clock synchronisation.
IETF RFCs
TLS 1.3 and 1.2 (RFC 8446, 5246), X.509 (RFC 5280), HSTS (RFC 6797), cookies (RFC 6265), TOTP (RFC 6238), Argon2 (RFC 9106), syslog (RFC 5424), NTP (RFC 5905).
Network and access
ALTOS NAC: 802.1X and EAP-TLS (RFC 5216), RADIUS (RFC 2865) and CoA (RFC 5176), SNMPv3 (RFC 3414), TACACS+ (RFC 8907).
Other frameworks
OWASP ASVS 4.0.3 level 2, NIST SP 800-63B (AAL2), ANSSI recommendations, Senegalese law 2008-12 on personal data.
Alignment established through internal audit of the products. ALTOS SYSTEMS does not claim ISO/IEC 27001 certification of this software. The detailed compliance matrix is available on request.