Connect with us

News

Zero Trust Architecture in a Remote World: Securing the New Normal

Published

on

By Abuh Ibrahim Sani

The ongoing shift to remote work, prompted by the global Covid-19 pandemic, has permanently changed the way organizations and certain government agencies function. What began as a temporary fix for maintaining consistency has transformed into a permanent approach to business for numerous companies. However, the change brings about considerable security obstacles. Traditional network security models, which rely on perimeter-based defenses, are not adequate for a modern environment where employees work remotely from multiple devices. This is how the Zero Trust Architecture (ZTA) is utilized in the new era of cybersecurity.

Introducing the Zero Trust Architecture, a strategic shift in cybersecurity that is built on the belief that no entity in the network, regardless of location, should be automatically trusted. This model is especially relevant in situations of remote work where the lines between the company’s network are not clear, making it a great structure for applying Zero Trust. Zero Trust’s fundamental principles of strict verification and limited access privileges create a strong base for protecting remote employees and data from the challenges of cyber threats.

Understanding Zero Trust: “Never Trust, Always Verify”

Advertisement

The foundation of the Zero Trust model is based on a fundamental principle. Do not automatically trust anyone; consider everyone a potential suspect until they can be verified beyond a reasonable doubt, regardless of their location within or outside the network. Zero Trust differs from traditional security models by assuming that potential threats can originate from any source, not just from within the corporate network where users are presumed trustworthy. Each access request is confirmed, approved, and consistently supervised according to user identity, device security state, and request context. Zero trust is not a specific product or technology, but rather a holistic strategy that combines different security principles and tools to verify access strictly and reduce threats by segmenting resources and implementing least-privilege access.

Why Remote Work Demands Zero Trust

The traditional network perimeter has disappeared with remote work. Employees now access company data from their home networks, coffee shops, or shared spaces, often using their own devices. This new version brings about various difficulties in home and public Wifi networks oftens lack enterprise-level security, making remote workers more vulnerable to attacks like man-in-the middle or eavesdropping . The rise of software-as-service(SaaS) and cloud based application has enabled remote work flexibility but complicates oversight. Sensitive corporate data may be accessed and stored outside the traditional network, increasing the attack surface. Employees are no longer restricted to corporate devices. Many use personal devices or BYOD(Bring Your Own Device), which may not have the same security configuration as enterprise-managed systems.

Advertisement

In a remote environment, organization cannot longer rely on internal trust, especially when collaboration spans across teams, contractors, and third-party vendors. Remote workers face a higher likelihood of being preyed upon by phishing attempts and social engineering tactics. In the absence of IT teams physically present and the increased stress of working alone, employees may be more susceptible to sophisticated attacks aimed at stealing credentials and breaching corporate systems. In this landscape, Zero Trust becomes important for securing remote work environments.

Implementing  Zero Trust Architecture in a Remote Workforce

Shifting to a Zero Trust model in a remote setting requires a strategic plan that emphasizes thorough identity and device validation, secure access control, education, and continuous monitoring. These measures involve various steps to strengthen the remote work infrastructure against possible cybersecurity risks. The following measures should be considered when adopting remote work environments.

Advertisement
  • Identity and Access Management (IAM)

Identity is the foundation of the Zero Trust approach. Each individual, whether they are a staff member, freelancer, or external supplier, needs to have their identity confirmed. Multi-Factor Authentication (MFA) and biometric verification provides an additional level of security on top of traditional username and password authentication. Furthermore, features such as Single Sign-On (SSO) and Role-Based Access Control (RBAC) guarantee that users only have the necessary level of access required for their tasks.

  • Principle of Least Privilege (Access Control)

In Zero Trust environments, policies are both dynamic and contextually sensitive. Access is provided by considering contextual factors such as user location, device status, time of access, and the sensitivity of the requested data, instead of giving blanket permissions. This method, commonly referred to as adaptive authentication, guarantees that access restrictions change according to up-to-date information.

  • Endpoint Security

Ensuring device security is of utmost importance as employees use a variety of devices to access corporate data. Before permitting access, organizations must assess the security status of every device as part of implementing Zero Trust. This involves implementing patch management, malware detection, and configuration policies on all devices. Endpoint Detection and Response (EDR) tools continuously monitor device behavior, detect anomalies, and promptly respond to threats.

  • Micro-Segmentation

Zero Trust Architecture focuses on limiting access to only those resources necessary for a user’s job. Through micro-segmentation, networks are divided into smaller, isolated zones, each with its own security policies. Even if a cybercriminal gains access to one segment, they won’t have unrestricted access to other areas of the network. This significantly reduces the blast radius in case of an attack.

  • Continuous Monitoring and Analytics

Verification is not a singular event in a Zero Trust framework. Constant monitoring of network traffic, endpoints, and user behaviours is essential for organizations to detect potential threats. SIEM and UEBA systems are capable of identifying irregularities like unusual login locations, unexpected data transfers, or unusual activity patterns, which could suggest malicious behaviour.

  • Data Encryption and Protection

Encryption is essential in Zero Trust due to the transmission of data through insecure networks and endpoints. Data needs to be encrypted while in motion and while at rest, guaranteeing that hackers are unable to steal sensitive information even if they intercept data transmission or breach devices. DLP tools at endpoints can aid in enforcing policies to stop unauthorized sharing of vital information.

  • Securing all resources

In a Zero Trust setting, all assets are safeguarded equally, whether they are in the cloud, on-site, or spread across diverse hybrid systems. This includes securing cloud apps and data with the same level of protection as on-site resources, defending older systems lacking contemporary security measures, and ensuring that all devices, workloads, APIs, and communication channels undergo consistent security evaluation, establishing a cohesive and safe environment.

  • Educate and Train the Employees

A knowledgeable and alert staff is essential for Zero Trust security. It is crucial to have regular security training sessions on phishing awareness, security best practices, and the importance of security in remote work environments. Implementing the Zero Trust model during remote work allows organizations to establish a secure setting that can effectively address the unique challenges of working remotely. This thorough method guarantees that the integrity and security of the organization’s data and resources are upheld no matter where employees are working, in line with the zero Trust principles of not inherently trusting any entity in or out of the network.

Benefits of Zero Trust for Remote Work

Traditional security models are no longer sufficient due to the rapid evolution of cyber threats and the growing complexity of modern work environments. Securing corporate assets requires a new approach as businesses shift to cloud-based services, facilitate remote work, and incorporate various devices into their networks. This is when the adoption of a Zero Trust approach becomes essential.

Zero Trust mitigates the risk of data breaches by continuously verifying every access attempt and reducing the exposure of critical resources. Zero Trust allows for a secure and smooth remote work experience by separating security from a specific location or device. Workers have the flexibility to work remotely, as long as the company upholds strict security measures. As Zero Trust does not depend on trust within the internal network, it reduces the danger of disgruntled employees or compromised accounts.

Advertisement

Many industries are subject to strict data privacy and security regulations. Zero Trust aids compliance by ensuring that data access is limited, monitored, and secure. As companies increasingly use cloud services, remote employees, and dispersed teams, Zero Trust ensures security grows in line with advancements. It is a method designed to be flexible, allowing organizations to adjust to emerging threats and technologies.

 Implementation Challenges And Considerations

Even though the advantages of Zero Trust are evident, the implementation of this structure necessitates meticulous planning and financial resources. Zero Trust signifies a major shift from conventional security methods. Organizations need to make sure that employees, especially those working in IT, are knowledgeable about the new approach. Building a Zero Trust Architecture requires a substantial investment in technology, training, and process transformation due to its cost and complexity. Yet, the advantages in the long run are usually more significant than these expenses. Many businesses depend on older systems that may not smoothly integrate with a Zero Trust model. It is advised to begin with the most essential systems when gradually implementing changes.

Advertisement

 Conclusion

With remote work becoming increasingly common, organizations require a security model that can adjust to the unique challenges presented in this new setting. The Zero Trust Architecture offers the structure to protect a geographically dispersed workforce by verifying all access requests, monitoring every device, and safeguarding every resource. In a changing world of evolving threats and remote work, Zero Trust is not just an option—it is crucial.

Implementing zero trust in remote work settings includes utilizing multifactor authentication, biometric verification  using secure, encrypted connections like VPNs, and consistently monitoring and assessing user and device actions for possible risks. Adopting Zero Trust principles aligns with remote work security needs and provides a thorough structure for organizations aiming to effectively secure their remote employees. By following Zero Trust principles, businesses can establish a security stance that is flexible, robust, and equipped to tackle the specific obstacles brought on by remote work. Focusing on Zero Trust is a pre-emptive measure to guarantee that the security measures adapt as the workplace changes.

Advertisement
Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Storm at NSITF as ₦297bn Workers’ Fund Allegations Trail MD/CEO Oluwaseun Mayomi Faleye

Published

on

Fresh allegations of large-scale financial irregularities, abuse of office, and governance breakdown have engulfed the Nigeria Social Insurance Trust Fund (NSITF), following a series of petitions by the Arewa Revival Project, a civic accountability and good-governance advocacy group, calling for urgent investigations into the activities of the Managing Director/Chief Executive Officer, Mr. Oluwaseun Mayomi Faleye.

The group has formally written to the Economic and Financial Crimes Commission (EFCC), the Independent Corrupt Practices and Other Related Offences Commission (ICPC), the Office of the Auditor-General of the Federation, the Federal Ministry of Finance under the Whistleblower Policy, the Federal Ministry of Labour and Employment, the NSITF Management Board, as well as organised labour bodies, including the Nigeria Labour Congress (NLC) and the Trade Union Congress (TUC).

At the centre of the controversy are allegations involving the management of approximately ₦297,019,145,288.60 in workers’ funds collected under the Employees’ Compensation Act (ECA) between January 2 and October 9, 2025.

Advertisement

Workers’ Funds, Not Government Revenue

The Employees’ Compensation Scheme is funded through compulsory employer contributions of one per cent of payroll, designed to provide compensation to Nigerian workers who suffer injury, disability, or death in the course of employment.

According to multiple senior NSITF officials cited in investigative reports, the funds administered by NSITF are not government revenue, but trust funds belonging exclusively to Nigerian workers.

Advertisement

“This is not government money. This is workers’ money, contributed mandatorily under the law,” one senior official was quoted as saying. “Every kobo is supposed to be protected by layers of checks and balances.”

₦243.2bn Allegedly Spent Without Board Approval

Documents reviewed by investigators indicate that out of the total inflow of ₦297,019,145,288.60, expenditures amounting to ₦243,203,518,621.17 were recorded within the same period.

Advertisement

Multiple sources allege that a significant portion of this expenditure was carried out without the approval of the NSITF Management Board, in violation of the NSITF Act and existing federal financial regulations.

Officials familiar with the records described the development as a “complete collapse of safeguards” meant to protect workers’ funds.

‘No Approval Limit’ Resolution Raises Alarm

Advertisement

Central to the allegations is an internal document dated March 4, 2025, reportedly extracted from the minutes of the 46th Executive Committee (EXCO) meeting of NSITF, chaired by Mr. Faleye.

According to the document, financial approval limits were set as follows:

  • Other General Managers: ₦25,000
  • General Manager (Finance): ₦50,000
  • Other Executive Directors: ₦750,000
  • Executive Director (Finance and Investment): ₦1,000,000

However, under the same resolution, the Managing Director/Chief Executive Officer allegedly approved “no limit” for his own spending authority.

Advertisement

Sources allege that this effectively granted Mr. Faleye unrestricted powers to approve payments of any amount without recourse to the Board or external oversight.

“He simply wrote and signed a document granting himself ‘No Approval Limit’,” a senior official disclosed. “There is absolutely no legal basis for this in the NSITF Act or federal financial regulations.”

Under existing federal thresholds, Managing Directors of government parastatals are reportedly capped at ₦30 million for works and ₦10 million for goods and services, subject to board oversight.

Advertisement

Over 100 Bank Accounts Linked to One BVN

Perhaps the most startling allegation involves the operation of over 100 bank accounts allegedly linked to a single Bank Verification Number (BVN) belonging to Mr. Faleye.

Documents reportedly show that the BVN, registered on June 10, 2015, with Guaranty Trust Bank, Ajose Adeogun Branch, is associated with numerous accounts, some of which allegedly received funds traceable to NSITF operations.

Advertisement

“The scale is staggering,” one insider said. “You don’t run over 100 accounts accidentally. This points to systematic structuring.”

$7.3m and Hundreds of Millions of Naira Traced

In a separate document obtained by investigators, alleged inflows of millions of dollars and hundreds of millions of naira were traced to accounts linked to Mr. Faleye and entities reportedly associated with him.

Advertisement

The transactions listed include:

  • Faleye Oluwaseun Mayomisola, GTBank USD Account 0111206422 – $336,917.00
  • Faleye Oluwaseun Mayomisola, GTBank USD Account 0004754113 – $6,743,421.00
  • Faleye Oluwaseun Mayomisola, GTBank NGN Account 0004754096 – ₦291,182,605.00
  • Fides & Fiducia Client Account, Access Bank NGN Account 0718896883 – ₦584,950,000.00
  • Fides & Fiducia, Access Bank USD Account 0690403396 – $626,279.00
  • Fides & Fiducia, Zenith Bank NGN Account 1013806407 – ₦93,757,500.00
  • Pluschess Limited, Zenith Bank USD Account 071315271 – $20,000.00
  • Faleye Oluwaseun Mayomisola, GTBank USD Account 3001101016 – $75,558.00

The total dollar inflow alone is estimated at over $7.3 million, excluding naira-denominated transactions.

“These are not small transfers,” a source familiar with the documents said. “The volume, frequency, and structuring suggest deliberate efforts to move and possibly conceal funds.”

₦5.53bn Commission Payments Questioned

Advertisement

Further allegations relate to commission payments totalling ₦5,533,517,486.90, allegedly approved and paid without the consent of the NSITF Management Board or the supervising Ministry.

The payments reportedly include:

  • ₦1,379,186,010.00 – Assurance Services ST ADBA Ltd (09/10/2025)
  • ₦865,000,000.00 – TAGG Global Resources Ltd (18/03/2025)
  • ₦683,777,666.40 – Rate Seal Support & Project Ltd (17/09/2025)
  • ₦659,303,810.50 – Rate Seal Support & Project Ltd (16/05/2025)
  • ₦648,750,000.00 – Rate Gold Solution Nig Ltd (16/05/2025)
  • ₦648,750,000.00 – Gold Solution Nig Ltd (01/08/2025)
  • ₦648,750,000.00 – TAGG Global Resources Ltd (01/08/2025)

Sources allege that the commissions ranged between 15 per cent and 20 per cent, and were paid without lawful authority.

Advertisement

Board Absence and Governance Vacuum

Mr. Faleye was appointed Managing Director in July 2023, while the NSITF Management Board was reportedly not constituted until around January 2025, creating a governance gap of over one year.

“The Act expressly forbids Executive Management from spending funds without board approval,” a top official explained. “If there is no board, spending should not take place.”

Advertisement

Arewa Revival Project Condemns Alleged Acts

Reacting to the allegations, the Arewa Revival Project, under the leadership of Hon. Muttakka Ahmed Ibrahim, condemned the alleged acts, describing them as a grave betrayal of public trust if proven.

The group called on President Bola Ahmed Tinubu, as well as all relevant anti-corruption and regulatory authorities, to urgently investigate the allegations to protect workers’ funds and restore confidence in public institutions.

Advertisement

Responses from Officials

When contacted, Mr. Faleye reportedly stated that he was not aware of the allegations. However, when questioned about the dollar accounts and alleged inflows of over $7.3 million, he reportedly ended the call abruptly.

The Permanent Secretary of the Ministry of Labour, Mr. Salihu Usman, reportedly denied prior knowledge of the alleged transactions, while the Chairman of the NSITF Board, Mr. Shola Olofin, requested time to verify the claims.

Advertisement

Presumption of Innocence

All allegations remain unproven and subject to investigation. Analysts note that the unfolding developments represent a major test of Nigeria’s public finance accountability framework, particularly in institutions entrusted with workers’ welfare.

As investigations commence, millions of Nigerian workers await answers over the safety of funds meant to protect them in times of injury, disability, and loss.

Advertisement

 

Continue Reading

Headlines

Adamawa Business School Hosts Workshop on New Tax Reform Law

Published

on

Adamawa Business School Hosts Workshop on New Tax Reform Law

Adamawa Business School Hosts Workshop on New Tax Reform Law

By Ibrahim Abubakar Jimeta

The Adamawa Business School (ABS) has organised a high-level training and sensitisation workshop on the New Tax Reform Law in Nigeria, aimed at enhancing understanding of recent fiscal reforms and strengthening public sector administration in Adamawa State.

Advertisement

The workshop, held in collaboration with the Office of the Head of the Civil Service of Adamawa State and supported by the Federal Inland Revenue Service (FIRS), brought together Permanent Secretaries, senior public servants, tax officials, and policy experts to examine the implications of the new tax framework for governance and fiscal sustainability.

Speaking during the opening session, the Co-Founder of Adamawa Business School, Mallam Jamilu Yusuf, described the workshop as a strategic intervention designed to bridge knowledge gaps and improve policy implementation within Ministries, Departments, and Agencies (MDAs).

Yusuf explained that the engagement was organised under the school’s Public Policy Support Initiative, a non-profit platform that provides research, training, and capacity development support to government institutions. He noted that Nigeria’s evolving tax landscape, driven by Finance Acts, administrative reforms, and digital innovations, requires senior public officials to be well-informed in order to translate policy into effective practice.

Advertisement

According to him, Permanent Secretaries and top civil servants play a crucial role in ensuring compliance and successful implementation of tax reforms at the sub-national level, stressing that inadequate understanding of tax laws often creates implementation challenges that negatively affect citizens and institutions.
He reaffirmed Adamawa Business School’s commitment to supporting the state government through policy-focused learning, dialogue, and partnerships that promote transparency, fiscal sustainability, and improved service delivery.

In his remarks, the Head of the Adamawa State Civil Service, Isa Shehu Ardo, mni, emphasised the importance of equipping senior public servants with a clear understanding of the new tax laws. He noted that Permanent Secretaries, as the most senior career officers in the public service, must fully comprehend the reforms in order to guide implementation and avoid difficulties that often arise from poor information and limited awareness.

Delivering the welcome address on behalf of the Office of the Head of Civil Service, the Permanent Secretary, Establishment and Training, Fabian S. Wambai, commended Adamawa Business School for organising the workshop as part of its corporate social responsibility.
Wambai described the new national tax law as a major reform with far-reaching implications for public finance, compliance, and economic stability. He said the workshop provided a valuable opportunity for Permanent Secretaries, as accounting officers and senior administrators, to deepen their understanding of the law and its impact on government operations and engagements with the private sector.

Advertisement

He urged participants to actively engage in discussions, interact with resource persons, and leverage the knowledge gained to strengthen institutional compliance, improve advisory roles to political leadership, and promote transparent and accountable governance.

The workshop featured sessions led by experienced tax professionals, focusing on the provisions of the new tax reform law, its implications for public financial management, and strategies for effective collaboration between federal and state institutions.

Participants expressed optimism that the training would enhance policy implementation, reduce administrative challenges, and contribute to a more efficient and fiscally informed public service in Adamawa State.

Advertisement
Continue Reading

Headlines

Noble Ladies Champion Women’s Financial Independence at Grand Inauguration in Abuja

Published

on

Women from diverse backgrounds across Nigeria and beyond gathered at the Art and Culture Auditorium, Abuja, for the inauguration and convention of the Noble Ladies Association. The event, led by the association’s Founder and “visionary and polished Queen Mother,” Mrs. Margaret Chigozie Mkpuma, was a colourful display of feminine elegance, empowerment, and ambition.

The highly anticipated gathering, attended by over 700 members and counting, reflected the association’s mission to help women realise their potential while shifting mindsets away from dependency and over-glamorization of the ‘white collar job.’ According to the group, progress can be better achieved through innovation and creativity. “When a woman is able to earn and blossom on her own she has no reason to look at herself as a second fiddle,” the association stated.

One of the association’s standout initiatives is its women-only investment platform, which currently offers a minimum entry of ₦100,000 with a return of ₦130,000 over 30 days—an interest rate of 30 percent. Some members invest as much as ₦1 million, enjoying the same return rate. Mrs. Mkpuma explained that the scheme focuses on women because “women bear the greater brunt of poverty” and the platform seeks “to offer equity in the absence of economic equality.”

Advertisement

Education is also central to the Noble Ladies’ mission, regardless of age. Their mantra, “start again from where you stopped,” encourages women to return to school or upgrade their skills at any stage in life. The association believes that financial stability is vital in protecting women from cultural practices that dispossess widows of their late husbands’ assets, while also enabling them to raise morally and socially grounded families.

Founded on the vision of enhancing women’s skills and achieving financial stability, the association rests on a value system that discourages pity and promotes purpose. “You have a purpose and you build on that purpose to achieve great potentials and emancipation,” Mrs. Mkpuma said.

A criminologist by training and entrepreneur by practice, she cautions against idleness while waiting for formal employment. “There are billions in the informal and non-formal sectors waiting to be made,” she said, rejecting the “new normal of begging” and urging people to “be more introspective to find their purpose in life and hold on to it.”

Advertisement

Mrs. Mkpuma’s management style keeps members actively engaged, focusing on vocational skills and training to prepare them for competitive markets. She is exploring “innovative integration of uncommon technologies” and is already in talks with international franchises to invest in Nigeria, with Noble Ladies as first beneficiaries.

The association’s core values include mutual respect, innovation, forward-thinking, equal opportunity, and financial emancipation. With plans underway to establish a secretariat in the heart of Abuja, the group aims to expand its impact.

The event drew high-profile guests, including former Inspector General of Police, Mike Okiro, and a host of VIPs, marking a significant milestone in the association’s drive for women’s empowerment.

Advertisement
Continue Reading

You May Like

Copyright © 2025 Acces News Magazine - All Right Reserved.

Verified by MonsterInsights