Enabling Secure Remote Work for a Smart City — 40% Cost Savings on AWS

The Municipality of Nicosia is the governing body of Cyprus's capital city — responsible for urban planning, infrastructure maintenance, waste management, cultural programmes, social welfare, and local business support. It is also actively building a Smart City platform: optical fibre, IoT infrastructure, smart street lighting, real-time waste monitoring, environmental stations, and citizen-facing apps including Smart Parking and Air Quality.

Despite this forward-looking agenda, the Municipality's internal IT was holding it back. Limited remote work capabilities meant staff were tied to the office, wasting commute time and reducing responsiveness to citizens. Decentralised data storage created security vulnerabilities. Higher overhead from physical office space, IT support, and travel inflated costs. And the lack of flexible working arrangements was affecting employee morale and retention.

The Municipality needed a modern, secure, and scalable remote work solution — one that could protect sensitive government data, serve both standard office staff and senior directors with different access profiles, and integrate with its existing on-premises Active Directory without disruption.

LCM Go Cloud collaborated closely with the Municipality team to understand its specific workflows, then designed and deployed a tailored Amazon WorkSpaces solution — starting with 10 users, expandable at any time. The solution serves two distinct user profiles: 70% regular users (Smart City and operational staff) with standard working hours access (7am–3pm weekdays), and 30% extended users (Municipality Directors) with 24/7 access to their virtual desktops.

Security was given particular emphasis. LCM Go Cloud implemented Multi-Factor Authentication (MFA) via FreeRADIUS deployed on Amazon EC2, authenticating against a user database in Amazon Aurora. User access is managed through the Municipality's own Active Directory via an AWS AD Connector, ensuring role-based permissions align with existing governance structures. AWS Shield provides DDoS protection, AWS WAF secures the web layer, and a Site-to-Site VPN connects the on-premises environment securely to the AWS VPC.

A 5-year TCO assessment confirmed 40% annual cost savings compared to traditional on-premises hardware — factoring in device refresh cycles, failure rates, IT overhead, and cost of capital — making the business case as strong as the technical one. Comprehensive training and change management support ensured smooth adoption across all user groups from day one.