Professional Review of Network Security Operations at a Commercial Bank’s Telecommunications Infrastructure in Lagos

Commercial banks in Nigeria operate extensive private telecommunications networks that support ATM connectivity, inter-branch communication, electronic funds transfer, and core banking system access, making network security operations a matter of both institutional and national financial system importance. This study professionally reviews network security operations practices within the private telecommunications infrastructure of a major tier-one commercial bank in Lagos, examining threat detection capabilities, incident response processes, access control management, and compliance with the Central Bank of Nigeria's cybersecurity framework. A professional organizational assessment was conducted through structured interviews with fourteen network security engineers and IT governance officers, review of network security policy documentation, and assessment of implemented security controls against the CBN Risk-Based Cybersecurity Framework 2021 and ISO 27001 standards. Results indicate satisfactory implementation of perimeter security controls including next-generation firewalls and intrusion detection systems, which aligned with CBN requirements. However, internal network segmentation was found to be inadequate, with flat network architecture enabling lateral movement across operational zones in simulation exercises. Security information and event management system alert response times averaged 4.3 hours, exceeding the bank's own policy threshold of 2 hours. Third-party vendor access management lacked multi-factor authentication enforcement. Recommendations include network micro-segmentation implementation, SIEM alert triage optimization, mandatory MFA for all third-party remote access, and quarterly red team exercises to validate control effectiveness. Keywords: network security, commercial bank, telecommunications infrastructure, Lagos, cybersecurity compliance.