Services
- Summary
- Identity Management and Authentication - Strategic Consulting
- Identity Management and Authentication - Technical Consulting
- Strategic Privacy Consulting
- Privacy Management Lifecycle: Our Privacy Products and Services
- Specialised Legal and Regulatory Consulting
- Self-regulation and Codes of Conduct
- Issues Management: Public and Stakeholder Consultations
Galexia delivers specialist management consulting services. Galexia has expert consultants in privacy, authentication, electronic commerce and new technology. We leverage our legal, business and technical knowledge to deliver successful business strategies to a diverse range of clients.
Summary
Galexia works closely with clients to identify and resolve legal and strategic issues in projects that raise privacy, security, identification or authentication issues. We help a diverse range of business and government clients to understand their legal, regulatory and best practice requirements, and to develop compliance tools and manage stakeholder consultation.
Galexia has an up to date understanding of identification and authentication technology and strategies. Our team has expertise in law, policy, technology and public relations. We have a wealth of experience in conducting and participating in industry and consumer consultations, and in delivering briefings at CEO, Board and Ministerial levels.
Galexia’s team has skills in public relations, clear communication and in dealing with the media as part of the consultation and presentation of project outcomes.
We think strategically and then propose and critically assess solutions, rather than simply inform clients in a legalistic and mechanical way.
Galexia has an excellent track record in working closely with clients to develop appropriate project methodologies and deliver quality project outcomes, based on best practice management systems and high quality infrastructure and support. We take an open, transparent and collaborative approach. We make project materials available via our secure extranet so that clients have the opportunity to collaborate in the project.
Galexia delivers specialist management consulting services to our clients. Our services include:
- Identity Management and Authentication - Strategic Consulting
- Identity Management and Authentication - Technical Consulting
- Strategic Privacy Consulting
- Privacy Management Lifecycle: Our Privacy Products and Services
- Specialised Legal and Regulatory Consulting
- Self-regulation and Codes of Conduct
- Issues Management: Public and Stakeholder Consultations
Identity Management and Authentication - Strategic Consulting
Galexia delivers advice on the complex technologies and applications of identity management and authentication.
Galexia has expertise in identity management and delivering electronic authentication advice.
Galexia’s expertise on identity management includes consideration of the policy context as well as technical design issues, legal compliance, political considerations and community attitudes. Our background in law, technology and public relations makes Galexia uniquely suited to delivering strategic advice on identity management.
Our consultations in authentication involve identifying and analysing the current legal and regulatory framework for the use of electronic authentication, with a particular focus on identifying obstacles to progress, and making recommendations for how such obstacles can be overcome.
Our technical background in both these areas gives us a unique understanding of the inner workings of electronic authentication and identity management technologies and ensures that we provide accurate and detailed advice and analysis in both of these areas.
Galexia is also a member of the Australian Government Information Management Office (AGIMO) Identity Management and Authentication Consultancy Services Panel, specifically in the areas of identity and access management, as well as authentication.
|
|
||
|
|
Related Projects
Case Studies and additional research
Recent news and updates
|
|
|
||
Identity Management and Authentication - Technical Consulting
Galexia has expertise in identity management technical architecture and implementation, including strategy, business and technical requirements, architecture and design.
Identity and Access Management
Galexia has an excellent understanding of Identity and Access Management. Galexia is a trusted advisor partner on a wide number of high-level strategic and architectural aspects in identity management projects.
Galexia can provide:
- Stakeholder consultation and business, requirements and risk analysis;
- Technology evaluation to choose relevant products and vendors, based on wide experience;
- Strategy, architecture and design supported by detailed technical knowledge and best practices;
- Planning for deployment;
- Useful, realistic and respected consulting advice;
- Open communication;
- Delivery of professional and high quality outputs and outcomes;
- A depth of technical, business and legal knowledge and experience.
Galexia has specialised in the architecture of distributed identity solutions, including authentication, authorisation, accounting, auditing, single sign-on, federation, provisioning, synchronisation, public key infrastructure and emerging user-centric (Identity 2.0) approaches.
Galexia has provided senior consulting services to large-scale identity management architecture projects for customers including Australian Government Online Service Point (AGOSP) Authentication Team, Vodafone, Telstra, Bigpond, Sensis, Foxtel, the Australian Taxation Office, the Roads and Traffic Authority NSW and Singapore Government.
The combined user population of the identity management systems Galexia has designed is in the tens of millions.
Galexia’s Identity and Access Management (IAM) Strategy Process and Product Evaluation Matrix

Phase 1: Engage
In this phase, the client and Galexia agree on the project scope and timetable, establish communication and collaboration mechanisms, and decide on reporting requirements.
Phase 2: Identify
This phase focuses on identifying relevant inputs via stakeholder consultations and collection of other relevant materials.
Phase 3: Analyse
In this phase, Galexia develops analysis and advice in a number of key documents:
- 1: Business Requirements, based on analysis of materials collected in the Discovery phase;
- 2: Technology Evaluation, comparing a number of vendor offerings across metrics relevant to the identified requirements; and
- 3: Identity and Access Management (IAM) Strategy, a technology-neutral document setting out a broad vision, identifying key requirements and goals, and presenting a high-level architecture.
Phase 4: Plan
Based on the recommendations and outcomes of the analysis, Galexia will assist in the planning for implementation, including a:
- Broad, Implementation Roadmap; and
- More specific Implementation Proposal with a design and scope for proceeding with implementation activities.
|
|
||
|
|
Related Projects
Case Studies and additional research
Recent news and updates
|
|
|
||
Strategic Privacy Consulting
Galexia has expertise and experience in privacy compliance throughout the Asia Pacific region.
We integrate our privacy products and services with business process, software development and technology implementation project lifecycles. Our projects have involved large-scale and technically complex applications. Typically in these projects, getting the privacy right is a core business requirement.
Our privacy consulting focus is on compliance advice and compliance strategies for organisations in Australia and the Asia Pacific. We have direct experience of privacy compliance issues in Australia, Hong Kong, Japan, Korea, New Zealand, Taiwan and the United States.
Galexia is also a member of the Australian Government Information Management Office (AGIMO) Identity Management and Authentication Consultancy Services Panel specifically in the area of privacy.
Privacy Management Lifecycle: Our Privacy Products and Services
The management of privacy issues is a recognised (and maturing) compliance task. Galexia has developed a range of tools to assist in privacy management.
Clients may wish us to be involved in a single aspect of privacy management, ask us to be involved in the privacy management of a whole project, or seek our advice on a regular basis.
Our services and tools include:
Design
Privacy Impact Assessment (PIA)
This assessment identifies privacy issues in specific sectors or applications. A PIA process is particularly useful in implementations of new technology or new processes. By using the PIA tool at the design stage of an implementation organisations can avoid privacy errors and the costs of rectification at later stages.
| |||||||||
Privacy Management Strategy (PMS)
This tool is used to develop and implement a risk management strategy and practical action plan. Each privacy issue is allocated a response and action is delegated to individuals or organisations. The PMS includes a compliance timetable.
Privacy Risk Management
Public and stakeholder consultations on the chosen strategy are often as important as ensuring technical compliance. Effective consultation can help identify and manage key privacy risks.
Solution Implementation
Privacy Oversight Committee
This tool is used to develop a governance structure to oversee privacy issues arising throughout the life of the implementation. Some privacy issues may not be ascertained at the design stage so reviews and audits under the direction of an oversight committee are often necessary.
Documentation
We assist clients to develop documentation which addresses identified privacy concerns, including privacy manuals, web site privacy policies, integration with existing policy and procedure documents, and customer consent forms.
Training and education
We develop content for and present educational materials and training workshops for staff and key service providers to ensure that the client’s entire business is privacy aware.
Ongoing
Outsourced Chief Privacy Officer (CPO)
The Chief Privacy Officer is responsible for managing privacy compliance within an organisation over time as processes and regulations change. This responsibility may fall within an existing role, or may give rise to a new role. We can advise the client in relation to the structuring of that role in-house and provide assistance to that role, or it may prove more cost effective to outsource that role to us.
Assist in-house Chief Privacy Officer (CPO)
We can provide advice and assistance to an in-house CPO on a retainer or ad-hoc basis. Assistance can include handling complaints and inquiries, providing updates on legal and regulatory developments, and helping meet reporting requirements.
Monitoring - Privacy audit
Reviewing the effective adoption and use of complying processes and documentation on a regular basis (including by independent audit) is a useful tool in identifying and managing privacy risks. It also raises public confidence in the management of privacy, particularly in new technology projects. This process is targeted at identifying and dealing with problems before complaints or claims are received.
Specialised Legal and Regulatory Consulting
Galexia delivers detailed legal and regulatory analysis with a strategic perspective.
Our extensive legal background and our understanding of the impact of new technology on business processes allow us to deliver detailed and up to date legal and regulatory analysis. The task of interpreting legislation and regulations which have an impact on new technology products and services is one of Galexia’s core areas of expertise.
Galexia is particularly adept at performing this task in situations where more than one law or standard applies. We are able to develop compliance cross reference tables matching key administrative tasks and processes against all compliance requirements. We also possess the expertise to use these tables in developing plain language, well structured policy, process and guideline documentation.
Galexia has provided advice in every Australian jurisdiction, Hong Kong, Japan, Korea, New Zealand, Taiwan, the United States and all Member Countries of ASEAN (Brunei Darussalam, Cambodia, Indonesia, Laos, Malaysia, Myanmar, Philippines, Singapore, Thailand and Vietnam).
We have prepared a number of submissions on behalf of consumer and industry stakeholders.
Galexia staff and associates continue to publish up-to-date articles on all aspects of electronic commerce law, and we provide online teaching materials for Cyberspace Law and Electronic Commerce Law courses at the University of NSW.
Self-regulation and Codes of Conduct
Galexia delivers strategic advice on industry self-regulation and codes of conduct.
Galexia provides advice on a range of best practice regulation, including industry self-regulation, co-regulation, and codes of conduct. We understand that different regulatory models suit different applications, and advise on the most appropriate model for a given context.
Our legal and technological expertise spans electronic commerce, privacy, identity, authentication, and consumer protection, across a range of industries. We are in a unique position to balance regulatory and best practice requirements with business needs and stakeholder or consumer concerns.
Galexia’s approach and methodology for the development of Codes of Conduct encapsulates best practice approaches to self-regulation and fosters industry consensus and ownership.
Galexia can provide detailed best-practice advice on all of the following:
- Code membership requirements
- Conduct and obligations
- Complaints and Enforcement
- Code governance and review
- Identification of Implementation Steps and Transition Issues
- Code Registration and/or Authorisation
|
|
||
|
|
Related projects
Case studies and research
Recent news and updates
|
|
|
||
Issues Management: Public and Stakeholder Consultations
Our team has a wealth of experience in conducting and participating in industry and consumer consultations and workshops, and in delivering briefings at CEO, Board and Ministerial levels.
While we have our own extensive network of contacts we also work closely with clients to assist in the consultation process. We are experienced in managing stakeholder liaison and providing stakeholder services such as conducting workshops, stakeholder correspondence, media analysis and advice on the media response.
Galexia’s team also have experience in public relations, clear communication and in developing documentation such as media kits, Frequently Asked Questions, fact sheets, discussion papers and workshop information packs.

![[Extranet]](http://www.galexia.com/images/enter.gif)
print this page
sitemap
manage email subscriptions
rss news feed