Protecting banking without borders for everyday Nigerians
One place to monitor threats, prove compliance and govern privileged access across PennyTree's platform.
Security monitoring
Wazuh SIEM
Overview of agents, alerts and security events across the estate.
Suricata IDS (Wazuh)
Network intrusion detection: signatures, attackers, blocklisted sources, targets.
EveBox (Suricata events)
Dedicated Suricata viewer: alert inbox, flows, DNS/TLS/HTTP events, mark alerts reviewed.
Threat hunting
Search and pivot across every event.
MITRE ATT&CK
Detections mapped to adversary techniques.
Vulnerabilities
CVEs found in installed packages.
File integrity
Changes to critical files and configs.
Compliance (CISO Assistant)
Compliance dashboard
CISO Assistant: progress, gaps and scores across all frameworks, risk register, policies and evidence.
All audits
Every framework assessment for the PennyTree domain.
ISO/IEC 27001:2022
ISMS certification readiness · 140 requirements
PCI DSS 4.0.1
Cardholder data · 373 requirements
NIST CSF 2.0
Programme maturity · 134 outcomes
NIST SP 800-53 r5
Control baseline · 1,209 controls
GDPR / NDPR
Personal data protection · 1,090 items
SOC 2 (TSC 2022)
Trust Services Criteria · 375 points
HIPAA
NIST SP 800-66 r2 · 179 safeguards
CIS Ubuntu 24.04
npf-app-svr hardening · 401 checks