NNPC Liquidity Tower
Sign in
Security & Governance
A multi-layer institutional defence architecture spanning identity, request integrity, transaction governance, and audit observability — designed to meet the most demanding enterprise risk and compliance standards.
Governance stack designed for regulator and board-level scrutiny
Each domain addresses a specific risk surface — working together to create a comprehensive, overlapping defence architecture with no single points of failure.
Multi-factor authentication, session hardening, RBAC permission scopes, and IP reputation filtering — ensuring only authorised principals access treasury functions with appropriate privileges.
Mandate-bound approval chains, four-eyes enforcement, and delegation controls that prevent any single operator from unilaterally executing treasury movements beyond their authorised scope.
A tamper-resistant event ledger capturing every action, every decision, and every access event with full identity and context — structured for both internal review and external audit assurance.
Controls are mapped to operational reality so teams can maintain speed while preserving assurance quality as volume, entities, and oversight demands grow.
Beyond policy controls, the platform implements technical security measures at the infrastructure, application, and data levels to eliminate exploitable vulnerabilities.
Every inbound request is validated for authenticity, origin, and content before processing. Injection, forgery, and tampering attacks are structurally prevented.
Sensitive data is encrypted at rest and in transit. Credential storage follows bcrypt hashing standards, and all platform communications are enforced over TLS.
Session lifecycle is actively managed — with enforced timeouts, re-authentication gates, and anomalous session detection to prevent hijacking and unauthorised continuation.
Aligned with regulatory and standards frameworks:
"Security is not a feature layer — it is the operating foundation. Every control on this platform exists by design, not by addition."NNPC Liquidity Tower — Security & Governance Architecture
The platform is designed so that every control can be evidenced on demand — from access logs to approval chains to execution records — without bespoke extraction effort.