Consulting

Make the system governable before it is built.

Identity strategy and architecture for programmes that span agencies, service providers and technical trust domains.

Independent technical advice should make trade-offs visible, not hide them behind a product choice.

We help teams turn policy goals and service requirements into a workable technical and operating model. The scope can be a short diagnostic or a structured architecture and assurance engagement.

  • Strategy and target architectureDefine outcomes, institutional roles, service boundaries, trust relationships and a phased target state for identity programmes.
  • Programme and ecosystem assessmentReview governance, operating models, data flows, technical dependencies, delivery plans and material risks.
  • Technical due diligenceAssess architecture, protocol choices, security boundaries, vendor assumptions and evidence behind implementation claims.
  • Interoperability and procurementTranslate service and policy requirements into standards profiles, integration specifications, test plans and procurement criteria.
  • Independent assuranceChallenge designs and delivery evidence through threat modelling, protocol review, acceptance criteria and operational readiness assessment.
  • Regulatory and governance alignmentMap regulatory obligations and public-sector policies to accountable controls, data stewardship and trust governance.
  • Architecture packContext, target architecture, trust boundaries, data flows, decision rights and design constraints.
  • Delivery planDependencies, procurement criteria, work packages, interoperability gates and operational transition.
  • Assurance findingsPrioritised findings with evidence, impact, corrective actions and closure tests.