Skip to main content
Anambra State crestSmart AnambraYour State. In Your Hands.
Digital backbone● LiveDigital backbone Staff sign-in

SIEMS, the State's security watch

Every server watched, every alarm answered.

Run and maintained by the Anambra State ICT Agency

SIEMS is the State's security information and event management system. A monitoring agent on every server reports sign-ins, file changes and suspicious activity to one central security core, which checks it against detection rules, raises alerts and automatically blocks attackers who keep trying to break in. Serious events reach the Agency's engineers by email and through the Anambra Fleet Manager.

What it does

All 9 features

  • A monitoring agent on every server in Anambra Cloud, reporting to one central console
  • Real-time watch over sensitive system and website files, with every change recorded
  • Detection rules tuned for the State's websites, including scans and break-in attempts
  • Automatic blocking of repeated break-in attempts, with a safe list so State systems are never locked out
  • Vulnerability detection across the server estate
  • Email alerts for serious events to the Agency's ICT desk
  • Ninety days of searchable security history
  • Role-based access for security analysts
  • Architecture: what is watched (citizen platforms, ministry websites, cloud servers, staff sign-ins) feeds one security core (monitoring agents, analysis engine, security history), which responds by automatic blocking, email alerts, Fleet Manager phone and Telegram alerts and an analyst console; ICT Agency engineers decide and act

Architecture

How the State keeps watch

SECURITY EDGE: encrypted connections and single sign-on in front of every siteWHAT IS WATCHEDONE SECURITY COREHOW IT RESPONDSCitizen platformsSmart Anambra, Lens, DocTrackerMinistry websiteson the MDA Site FactoryCloud serversevery host on Anambra CloudStaff sign-inssingle sign-on, two-factorMonitoring agentslogs, files, sign-insAnalysis enginerules tuned for the StateSecurity history90 days, searchableAutomatic responseblocks repeat attackersEmail alertsto the ICT deskFleet Managerphone and Telegram alertsAnalyst consolerole-based accessICT Agency engineers decide and actNORA prepares. A human decides.

Hover over or tab to any part of the diagram to see what it does.

Who uses it

People it serves

  • The ICT Agency's cyber and infrastructure security team
  • Agency engineers on call

In practice

What it looks like

Someone tries hundreds of passwords against a State server. SIEMS spots the pattern, blocks the address within seconds and alerts the security team, who review it the same morning.

Why it matters

What changes

  • Attacks are seen and stopped in seconds
  • One picture of security across every ministry
  • A searchable record when something needs investigating

Connected to

Works together with