🛡️ FCT Administration • Programme Architecture
FCT Cybersecurity &
Digital Resilience
A cohesive six-month Phase 1 blueprint delivering government network armor, endpoint XDR, identity security, 24/7 SOC detection, immutable recovery, and sovereign datacenter modernization.
✦ FCT Live Command Telemetry
PHASE 1 ACTIVE
Agencies In Scope
12 – 20 Cohorts
Fleet Capacity
2,000 Devices
⚡ Interactive Zero-Day Threat Simulator
Status: Defense perimeter armed. Ready to test.
Client Programme Blueprint
FCT Cybersecurity & Digital Resilience: Programme Architecture
Six-month Phase 1 • 12–20 agencies • 2,000 endpoints • 100 servers • ~15 sites
1 · Agency Cohort
🏛️ Revenue & Treasury
Treasury • Board of Internal Revenue
Priority Systems
🗺️ Land & Geospatial
AGIS • Land Administration
Priority Systems
🏥 Health & Education
Secretariats holding personal records
🚗 Transport & Infra
FCDA • Transportation Secretariat
📁 Shared Administration
FCTA ICT • Payroll • Procurement
2 · Protection Controls
🛡️ Network Security
Next-generation firewalls at central & agency gateways, segmentation, secure remote access.
Logs • Alerts →
💻 Endpoint Security
EDR/XDR on up to 2,000 endpoints, servers in scope, vulnerability management.
Logs • Alerts →
🔑 Identity Security
MFA and privileged-access management (PAM) for users & administrators.
🌐 App, Email & Web
Controls for agreed priority services, APIs and domains.
3 · Detect and Respond
👁️ FCT Security Operations Centre
• SIEM correlates events across all onboarded agencies
• Managed 24/7 monitoring, initially
• Incident management and response
Central Nerve Center
• Managed 24/7 monitoring, initially
• Incident management and response
📜 Incident-Response Playbooks
Escalation contacts, containment drills and tested incident exercises.
Invoked by SOC • Invokes Restore
4 · Report and Act
📊 Executive Dashboard
Monthly reporting to the Steering Committee: incidents, exposure, coverage, risk trends.
Monthly Reporting
🚨 Agency Escalation
Real-time alerts, containment actions, and remediation dispatch to each agency ICT lead.
Direct ICT Escalation
5 · Recovery & Workload Continuity
💾 Secure Backup
Immutable recovery copies of priority systems (AGIS, Treasury, Citizen services) locked against ransomware deletion.
Restores Into Recovery Environment →
⚡ Recovery Environment
Restoration tested for each agreed critical workload • Sovereign private cloud infrastructure eliminating VMware Broadcom lock-in.
Tested Workload Restoration
6 · Governance and Assurance, Throughout
Directs →
Steering Committee
Executive sponsor • FCTA ICT • Agency heads
Delivers →
Cotrac, with OEMs (such as Sangfor)
Designs, deploys, integrates and operates
Verifies →
Independent Assurance
Tests controls, validates results, supports acceptance
Milestones
3 Decision Gates
1. Discovery • 2. Pilot • 3. Final Acceptance
Central & Agency Gateway Armor (Sangfor NGAF)
We install high-speed digital gates across the central FCTA datacenter and ~15 key agency sites. If hackers attempt intrusion or ransomware attacks, they are blocked at the gateway before ever reaching internal servers.
Carrier-grade Next-Generation Firewalls (HA clustering with OEMs such as Sangfor) featuring 10Gbps SSL/TLS deep packet inspection, automated intrusion prevention (IPS/IDS), and secure remote access for FCTA field personnel.
Endpoint & Server XDR (Up to 2,000 Devices)
Locks down staff computers and up to 100 servers across all 12–20 agencies. If an infected USB is inserted or a phishing file opened, it freezes the attack in milliseconds and rolls back any affected files.
Extended Detection & Response (EDR/XDR) with kernel-level behavioral AI, anti-tamper safeguards, peripheral USB port enforcement, and vulnerability management across up to 2,000 endpoints & 100 servers.
Identity Security (MFA & PAM)
Prevents stolen passwords from compromising government files. Enforces Multi-Factor Authentication (MFA) and privileged access vaults so only verified administrators can access core FCTA databases.
Enterprise MFA and Privileged Access Management (PAM) with credential vaulting, session recording, and automated privilege revocation across active directory and administrative portals.
FCT Security Operations Centre (24/7 SIEM)
A dedicated team of security engineers watching your systems 24/7/365. Like guards monitoring security cameras, we detect suspicious activity across all agencies, shut it down, and send monthly executive dashboards to the Steering Committee.
Centralized SIEM log lake correlating telemetry across all 12–20 agencies, automated playbook invocation, rapid triage under strict sub-5m SLAs, and monthly executive dashboards on exposure and coverage.
🚨 Infrastructure Modernization
Recovery Environment & VMware Migration
Tested restoration for critical workloads while migrating away from Broadcom's 300%–800% price hikes.
❌ Sticking with VMware
Cost Trap
💸
Forced core subscriptions: Broadcom cancelled perpetual licenses, forcing costly core bundles.
🔒
Foreign vendor lock-in: FCTA is completely dependent on foreign software licenses tied to FX risks.
⚠️
Expensive add-ons: Storage (vSAN) and backups require costly extra software purchases.
✅ Sovereign Recovery Cloud
75% Lower TCO
🟢
Zero per-core license tax: Open-architecture enterprise platform. You own the infrastructure permanently.
⚡
Runs on existing servers: No need to throw away your Dell/HP servers; we reuse existing datacenter nodes.
📦
Tested workload restoration: Integrated immutable WORM backups with automated disaster failover.
STAGE 01
Gate 1: Discovery
Audit all FCTA VMs, IOPS, storage volumes, and VLAN mappings across the 15 sites.
STAGE 02
Parallel Staging
Deploy target recovery cluster side-by-side with VMware so current operations continue uninterrupted.
STAGE 03
Background Sync
Replicate 99% of hard drive data in the background during normal daytime working hours.
STAGE 04
Gate 2: Pilot Cutover
Switch active traffic over in off-peak hours with < 10 minutes downtime per virtual machine.
STAGE 05
Gate 3: Acceptance
Independent assurance verification, recovery drill sign-off, and staff handover.
Cotrac partners with enterprise virtualization pioneers and OEMs (such as Sangfor HCI & Proxmox VE) to deliver complete datacenter independence:
- High Availability Clustering: Automatic failover if any physical server experiences hardware failure.
- Live VM Migration: Move running servers between physical host machines with zero user disconnection.
- Tested Critical Restoration: Guaranteed RTO < 30 minutes from immutable backup copies.
Governance & Quality Assurance
Service Level Agreements & Decision Gate Governance
Cotrac, in partnership with global OEMs such as Sangfor, guarantees zero operational downtime, strict compliance validation, and verified decision gate sign-offs.
| Performance Domain | Guaranteed Standard | Operational Protocol & Verification |
|---|---|---|
| Gate 1: Discovery & Baseline | Weeks 1 – 4 | Comprehensive audit of 12–20 agencies, 15 sites, 2,000 endpoints, and 100 servers; steering committee review. |
| Gate 2: Pilot Validation | Weeks 5 – 12 | Pilot deployment across Treasury & AGIS; live validation of firewall HA, XDR rollback, and SOC log ingestion. |
| Gate 3: Final Acceptance | Weeks 13 – 24 | Independent assurance verification, recovery drill validation, executive dashboard activation, and staff handover. |
| Perimeter Network Uptime | 99.99% High Availability | Active-passive firewall clustering ensuring sub-second automated failover without connection drop. |
| SOC Incident Response | < 5m Detection / < 30m Triage | Central SIEM correlation across all agencies with automated playbook invocation and lead escalation. |
| Recovery Environment SLA | RTO < 30 Mins / RPO < 15 Mins | Tested restoration of agreed critical workloads directly from immutable WORM recovery copies. |
Partner with Cotrac
Ready to Secure the Federal Capital Territory?
Cotrac Satellite Systems Nigeria Limited, in partnership with leading cybersecurity OEMs (such as Sangfor), is fully equipped to deploy the FCT Cybersecurity and Digital Resilience Programme.