SECURIX Expert Service
Identity Security Consulting
Expert advice on your identity strategy across identity access management from IGA, CIAM to PAM, and non-human identities, with assessments, roadmaps and technology recommendations delivered before you commit to a platform.
Solution overview
Identity Security Consulting helps you decide what needs to change in identity and access management before you invest in a platform or implementation project. Through assessments, workshops and specialist advice, we work with you to define a strategy, requirements catalog or technology recommendation based on your business, security and compliance requirements. You gain clear priorities and a documented basis for your next decision.
Your business needs
A clear direction before your next identity investment
Access Governance
Audit findings, difficult recertifications and delayed offboarding expose gaps in access governance. What often remains unclear is which processes, responsibilities and priorities need to change.
Platform replacement
Replacing Microsoft Identity Manager, SAP Identity Management or another legacy platform starts with defining your requirements and migration strategy, so you can choose technology that fits.
Identity strategy
Investments across workforce, customer, privileged and non-human identities need shared priorities. An identity strategy defines what to address first and which technology meets your requirements.
Who this is for
A shared basis for your identity decisions
For medium and large organizations facing an identity decision, whether they are responding to an audit finding, replacing a legacy platform or preparing an RFI or RFP.
CISO / CIO
A documented basis for budget and strategy decisions, with priorities informed by business requirements, identity risk and compliance obligations.
Head of IT / IAM owners
Defined processes, ownership and requirements that give the implementation a clear scope and realistic expectations.
Security / Enterprise Architect
A target picture and technology recommendation based on the organization’s identity requirements.
Our deliverables
A documented basis for your next decision
Each engagement focuses on a question your organization needs answered. Depending on the agreed scope, we deliver assessments, strategies, concepts, requirements catalogs and technology recommendations across five identity domains.
- IAM overall — An identity fabric assessment or maturity assessment, an identity strategy with a roadmap for the next 18 to 24 months, a target operating model with governance, or a business case.
- Workforce access management — An SSO and federation concept, an MFA and passwordless roadmap, a conditional access design, a requirements catalogue or a technology recommendation.
- Read the project report
- Identity governance (IGA) — Process and role model concepts for joiner-mover-leaver processes, access requests, recertification and segregation of duties. Further possible results are an access governance concept, a requirements catalogue, a migration strategy or a technology recommendation.
- CIAM — Customer identity requirements, authentication and MFA concepts, consent and data protection concepts (revFADP / GDPR), Swiss e-ID readiness, a migration concept or a technology recommendation.
- Deployment, configuration and integration
- Ongoing support
- Platform operation
- License costs and procurement
- Legal advice and non-identity security topics
Across these domains, technology selection support can include evaluation criteria, RFI/RFP support and a documented recommendation. Implementation readiness defines the scope, priorities and ownership needed for the implementation that follows.
How we deliver
From your requirements to a documented decision
-
Together, we agree on the question to answer, the expected deliverable, the estimated days and the decision the engagement should enable.
-
Through workshops and interviews with your IAM lead, architects and project team, we assess your current identity landscape and requirements.
-
We prepare the assessment, strategy, concept or requirements catalog within the agreed scope. Where technology selection is included, we evaluate options against documented requirements and criteria.
-
We review the deliverables with your stakeholders and document the decision, such as an approved roadmap, an agreed target operating model, a finalized requirements catalog or a technology selection.
Consulting is delivered on a time-and-materials or day-rate basis. Scope and duration are agreed for each engagement.
Consulting areas
Start with the decision you need to make
IAM Overall
Where do we stand across identity, and what should we address first?
Identity Governance (IGA)
How should joiner-mover-leaver processes, access requests, recertification and segregation of duties work?
Workforce Access Management
How should employees and external users sign in securely, and how do we reach phishing-resistant MFA?
CIAM
How should customers and partners register, sign in, give consent and recover their accounts?
Privileged & Non-Human Identity
Who and what holds privileged access, and how should we control it?
Technology partners
Your requirements guide the technology recommendation
Consulting begins before the technology decision. Recommendations draw on SECURIX’s identity expertise and follow a documented evaluation against your requirements, with transparent criteria and clear reasoning.
References
Identity consulting in practice
Customer reference to follow
Frequently asked questions
Before your consulting engagement begins
No. Identity Security Consulting helps you make that decision before selecting a platform. Depending on the agreed scope, we define requirements, establish evaluation criteria, support an RFI or RFP and provide a documented technology recommendation.
No. Consulting delivers an assessment, strategy, concept, requirements catalog or recommendation. Deployment, configuration and integration are scoped separately through Identity Security Implementation, using the agreed outputs as the basis for delivery.
We start with the question you need answered and the deliverable needed to support your decision. Consulting is delivered on a time-and-materials or day-rate basis, with estimated days and duration agreed per engagement. Fixed-scope entry offers include the Identity Fabric Workshop, Identity Security Maturity Assessment and Non-human Identity Discovery X Ray.
Duration depends on the scope and is agreed for each engagement. The first value is a decision you can act on, supported by a maturity view and prioritized gap list, an agreed target picture and roadmap, a requirements catalog or a technology recommendation.
Contact
Let’s discuss your next step
Tell us about your identity priorities. Together, we’ll clarify which decisions come next and how we can support you.
