Skip to content
Cloud (AWS, GCP, Azure)Public SectorColombia

Active/Passive Disaster Recovery and advanced security at Fondo Nacional del Ahorro

Implementation of an active/passive Disaster Recovery model in an alternate geographic zone, with an advanced security layer — anti-attack protection, geographic access control, data-leak prevention and WAF — across FNA's DEV, QA and PRD environments.

Active / PassiveDisaster Recovery model
DEV · QA · PRDEnvironments protected with WAF
Alternate zoneGeographic redundancy

Project information

Client

Fondo Nacional del Ahorro (FNA)

Industry

Public Sector

Country

Colombia

Service

Cloud (AWS, GCP, Azure)

Project context

Fondo Nacional del Ahorro (FNA) is the Colombian public-sector financial institution that promotes severance savings and finances housing and education for Colombians. Given its role administering sensitive funds, its technology platform demands high standards of operational continuity and security.

The challenge

Strengthening FNA's resilience and security posture required a comprehensive approach:

Guarantee operational continuity in the event of primary-site failure, with recovery in an alternate geographic zone.

Reinforce perimeter protection with geographic access control and prevention of attacks on exposed services.

Prevent data leakage and apply a Web Application Firewall (WAF) across all three environments: development, testing and production.

Our solution

Pyramid designed and implemented the continuity and security architecture:

Active/passive Disaster Recovery model in an alternate geographic zone, with replication and documented failover procedures.

WAF deployment and transversal security controls across the DEV, QA and PRD environments.

Geographic access control mechanisms and data-leak prevention (DLP) policies integrated into the operation.

Results achieved

The project reinforces FNA's resilience and security posture:

Active/passive Disaster Recovery scheme operating in an alternate geographic zone, with documented failover procedures.

WAF and security controls deployed across all three environments (DEV, QA and PRD).

Geographic access control and DLP policies integrated into daily operations.

Want similar results?

Schedule a call with our experts and let's design the right solution for your company.