Projects
Function 10 Consulting delivers smart, scalable technology solutions with specialities across airport systems, smart buildings, and payment platforms. From enhancing operations to streamlining management and infrastructure, our proven projects speak for themselves—read up on what we’ve done in the past to see how we turn complex challenges into connected, future-ready solutions.
Our Recent Projects
Function 10 Consulting was engaged to provide Solution Architecture and Technical Leadership for an Identity Consolidation Project involving the migration of users from over a dozen disparate business unit domains into a single, centralised Active Directory domain. The objective was to simplify identity management, enhance security posture, and reduce operational overhead through strategic design and automation.
Objectives
- Assess current multi-domain environment and design a consolidated identity architecture.
- Identify opportunities for security enhancement and process automation.
- Develop and implement technical solutions to streamline user migration.
- Collaborate with vendors for domain and application integration support.
- Support change management, deployment, and post-consolidation stability.
Success Highlights
1.
Comprehensive Discovery and Security Assessment
- Conducted a thorough audit of all existing domain controllers and identity configurations.
- Identified key security gaps due to fragmented identity management, including legacy permissions and inconsistent policies.
- Assessed authentication mechanisms across critical enterprise applications to ensure compatibility with the centralised domain.
- Defined and implemented a streamlined architecture with improved authentication and access controls, significantly reducing the attack footprint.
2.
Intelligent Automation and Scalable Migration Processes
- Developed PowerShell-driven automation tools to collect user attributes, generate migration reports, and execute account moves.
- Minimized manual effort through automated pre-validation and post-migration checks.
- Scalable scripts ensured consistency and compliance across multiple business units.
3.
Strategic Management and Reduced Operational Complexity
- Consolidation of identity infrastructure led to simplified group policy management and centralised auditing.
- Reduced management overhead by eliminating duplicate accounts, legacy objects, and isolated domain administration efforts.
- Improved administrative efficiency while maintaining user experience and service continuity.
4.
Vendor Collaboration and Application Authentication Alignment
- Engaged with third-party vendors to assess domain-dependent applications and plan authentication transitions.
- Validated application compatibility and ensured seamless user experience through coordinated testing and phased implementation.
- Facilitated cross-team technical workshops to ensure application-level support and troubleshooting readiness.
5.
Post-Migration Validation and Documentation
- Supported post-deployment activities including log review, performance validation, and user acceptance testing.
- Delivered a comprehensive Architecture Design Document capturing technical decisions, future-proofing strategies, and operational guidelines.
- Ensured all documentation met compliance and governance standards for long-term sustainability.
Conclusion:
The successful consolidation of domains into a centralised identity platform enabled a more secure, efficient, and scalable IT environment. With automation and strategic design, the project reduced complexity and positioned the organisation for future digital transformation initiatives.
Carpark Services continues to evolve as a vital component of urban infrastructure, focused on delivering seamless, secure, and customer-centric experiences. This document outlines a strategic program designed to modernise our customer parking operations through the integration of advanced technologies, including License Plate Recognition and mobile payment platforms, while ensuring robust compliance with PCI DSS standards. By enhancing system availability, expanding parking capacity, and leveraging data analytics, the initiative aims to reduce environmental impact, improve service responsiveness, and foster higher customer satisfaction across the board.
Objectives
- Enhance carpark systems and service features to reduce customer wait times and elevate overall satisfaction.
- Minimise the digital environment footprint while strengthening platform support and service availability.
- Integrate advanced data analytics to inform customer experience improvements and optimize service performance.
- Expand parking capacity to meet growing demand and improve operational throughput.
- Achieve and maintain PCI DSS compliance for all carpark-related payment and booking platforms.
Success Highlights
1.
PCI Compliance & Security Enhancements
- Achieved full PCI DSS compliance, ensuring a secure and controlled environment for all payment and booking services.
- Annual auditing processes established, with traceable change logs and compliance evidence readily available.
- Upgraded systems and workflows to eliminate the storage and processing of bank cards within the carpark infrastructure.
2.
Customer Experience Improvements
- Implemented License Plate Recognition (LPR) technology to minimize manual ticketing and expedite entry/exit (within four seconds).
- Introduced mobile payment solutions to reduce queue times at physical pay stations and streamline the payment process.
- Enhanced carpark booking system with secure reference integration, improving customer trust and usability.
3.
Operational Efficiency & Scalability
- Increased parking capacity through optimised layout and infrastructure upgrades.
- Consolidated carpark management systems to reduce environmental footprint and improve availability.
- Standardised platforms to support faster recovery times and high service availability.
4.
Data-Driven Service Optimization
- Integrated analytics to monitor service performance and inform infrastructure enhancements.
- Leveraged customer data to tailor offerings and improve overall service delivery.
- Utilised operational insights to optimise nearby traffic flows and wayfinding systems.
Conclusion:
These success highlights collectively demonstrate a focused and holistic approach to modernising carpark services. From enhancing customer experience through advanced technologies like LPR and mobile payments, to achieving stringent PCI compliance and leveraging analytics for continuous improvement—each initiative supports the core objectives: reducing wait times, increasing availability, optimising capacity, and improving operational proficiency. The result is a scalable, secure, and customer-centric carpark environment that aligns with strategic business outcomes.
Following a detailed review of a Siemens Desigo CC single project solution it was clear that there were several constraints affecting the operation of the platform, from BACNet broadcasts, BBMD table management, IP networking to project and plant management. An overhaul was needed to bring the performance and operational visibility back up to usable state.
Objectives
- Resolve networking issues
- Resolve interconnectivity issues
- Enable plant growth
- Consolidate multiple properties
- Enable delegated security
- Improve performance
Success Highlights
1.
Networks that connect
- Moved the network routing to central service to remove black holes in connectivity.
- Distributed controllers to smaller networks scaled to suit broadcasting.
- Delegated groups of networks to plant systems in geographic areas optimising performance.
2.
Controllers that communicate
- Ensured open communication between controllers.
- Ensured controller peering tables correctly configured.
- Replaced legacy controllers to reduce complexity and improve security
3.
Extra Capacity
- Deployed hierarchy of project servers to reduce load on server resources.
- Increased server resources and modernised operating environments.
- Expanded reserved resources to enable future growth.
4.
Security of Operation
- Established Role Based Access Control across all project servers.
- Deployed secure intercommunication between clients, servers and Internet.
- Isolated field network connectivity to protect controller communications.
3.
Blistering Performance
- Resolution of networking issues and redesign of field network significantly improved field device performance.
- New distributed project servers delivered 10x improvement in client performance.
- Hierarchy of project servers limiting field communication significantly improved alert and control response times.
Conclusion:
This significant transformation project delivered significant benefit to the client facility operations and was delivered 6 months early and significantly under budget. Our teams in-depth understanding of O/T systems networking and security bring decades of understanding to deliver highly performing IT and OT systems transformation initiative in some of the most challenging environments.
The AODB is the heart of an airport’s operation; critical to resource planning, customer service and apron and terminal management. AODB vendors know what resources their solutions need, but the airport must provide the network, database, devices, connectivity and security of all integrated components. At F10 we’ve deployed generations of infrastructure for AODB over the past decade.
Objectives
- 24x7x365 critical infrastructure services including multi-datacentre systems virtualisation.
- Redundant, Highly Available database services.
- Secure Flight Information displays for campus and third parties.
- Flight data integration with multiple on-premise and cloud partner solutions.
- Role based access.
Success Highlights
1.
Critical Platform
- Installation and migration with zero downtime and zero outages for all critical services.
- Seamless inter site, real time server migrations.
- Synchronous data replication supporting low latency application failovers between locations.
2.
Triple redundant Database
- Highly available triple node database cluster offering read vs write optimisation of synchronous nodes.
- Inter site asynchronous cluster node for redundant datacentre protection.
- Replay logs at minute separation for optimal disaster recovery.
3.
FIDS devices at scale
- Zero touch build from hardware to operation.
- Zone based service configuration for optimal management.
- Out of band management for secure operation without downtime.
4.
Diverse Integrations
- Daily updates of flight plans to inform scheduling of resource allocations.
- API based Flight Movement updates of inbound/outbound aircraft.
- Docking system locks time updates providing critical CDM telemetry to agencies and handlers.
5.
Secure access across roles
- Separation of duties across operational roles providing secure operations.
- Auditing of all tasks provides for assurance for compliance requirements.
- Improved operational efficiency through single sign on integration.
Conclusion:
AODB’s critical nature to airport operations requires deep technical understanding of enterprise system design in conjunction with operational understanding of specific industry functions. The F10 team have developed over a decade understanding of airport technologies that build on 20+ years of enterprise consulting enabling us to effectively deliver large scale critical infrastructure.
Function 10 Consulting were engaged to assist with the divestiture of a tightly integrated business unit of our client’s business to another company. This included the segmentation of the primary Active Directory domain, which hosted all critical systems for multiple business units. As the primary domain was sold with the divested business unit, all systems associated with the remaining (non-divested) business units had to be removed from it. This required a thorough investigation of dependencies and interconnections to ensure a seamless transition. The project involved formulating migration strategies to transfer systems systematically, maintaining operational continuity, and documenting and removing references to the sold domain. Additionally, the divestiture provided an opportunity to segment the environment, isolating unsupported systems into a legacy domain, consolidating supported systems into a new primary domain, and modernising role-based access, security measures, and retiring end-of-life (EOL) systems. .
Objectives
- Analyse System Dependencies: Investigate and document all dependencies and interconnections across the remaining business units tied to the sold domain.
- Migrate Systems from Sold Domain: Develop and implement strategies to remove systems of non-divested business units from the sold domain to a new primary domain without disruptions.
- Segment Legacy and Modern Systems: Isolate unsupported systems into a legacy domain and consolidate supported systems into a new primary domain.
- Enhance Security and Access: Modernise role-based access controls, implement CIS (Centre for Internet Security) policies and strengthen security protocols to prevent breaches.
- Retire EOL Systems: Eliminate outdated systems and simplify solutions to improve operational efficiency.
Success Highlights
1.
Dependency Analysis
- Identified and documented system interconnections for non-divested business units reliant on the sold domain.
- Created a comprehensive dependency map to guide the removal and migration of systems.
- Ensured all legacy system dependencies tied to the sold domain were identified for isolation.
2.
System Removal and Migration
- Successfully removed systems of non-divested business units from the sold domain and migrated them to a new primary domain.
- Maintained operational continuity throughout the migration process with no disruptions.
- Isolated unsupported systems into a secure legacy domain to ensure stability.
3.
Security and Access Modernisation
- Implemented role-based access controls to streamline permissions for the new primary domain.
- Strengthened security protocols to prevent breaches during and after the migration.
- Simplified access management processes to enhance efficiency.
4.
EOL System Retirement
- Retired end-of-life systems previously reliant on the sold domain to reduce maintenance overhead.
- Consolidated redundant solutions to streamline the system architecture in the new primary domain.
- Removed all references to the sold domain, ensuring clean integration of migrated systems.
Conclusion:
The divestiture project successfully managed the complex task of removing systems of non-divested business units from the sold domain whilst modernising the client’s IT environment. Through meticulous dependency analysis, strategic system migrations, environment segmentation, enhanced security measures, and retirement of EOL systems, the project ensured operational continuity and established a more efficient and secure infrastructure. The client is now well-positioned for future growth with a modernised primary domain and isolated legacy systems, free from dependencies on the sold domain.
Carpark Services continues to evolve as a vital component of urban infrastructure, focused on delivering seamless, secure, and customer-centric experiences. This document outlines a strategic program designed to modernise our customer parking operations through the integration of advanced technologies, including License Plate Recognition and mobile payment platforms, while ensuring robust compliance with PCI DSS standards. By enhancing system availability, expanding parking capacity, and leveraging data analytics, the initiative aims to reduce environmental impact, improve service responsiveness, and foster higher customer satisfaction across the board.
Strategic Objectives
- Enhance carpark systems and service features to reduce customer wait times and elevate overall satisfaction.
- Minimise the digital environment footprint while strengthening platform support and service availability.
- Integrate advanced data analytics to inform customer experience improvements and optimize service performance.
- Expand parking capacity to meet growing demand and improve operational throughput.
- Achieve and maintain PCI DSS compliance for all carpark-related payment and booking platforms.
Success Highlights
- PCI Compliance & Security Enhancements
- Achieved full PCI DSS compliance, ensuring a secure and controlled environment for all payment and booking services.
- Annual auditing processes established, with traceable change logs and compliance evidence readily available.
- Upgraded systems and workflows to eliminate the storage and processing of bank cards within the carpark infrastructure.
- Customer Experience Improvements
- Implemented License Plate Recognition (LPR) technology to minimize manual ticketing and expedite entry/exit (within four seconds).
- Introduced mobile payment solutions to reduce queue times at physical pay stations and streamline the payment process.
- Enhanced carpark booking system with secure reference integration, improving customer trust and usability.
- Operational Efficiency & Scalability
- Increased parking capacity through optimised layout and infrastructure upgrades.
- Consolidated carpark management systems to reduce environmental footprint and improve availability.
- Standardised platforms to support faster recovery times and high service availability.
- Data-Driven Service Optimization
- Integrated analytics to monitor service performance and inform infrastructure enhancements.
- Leveraged customer data to tailor offerings and improve overall service delivery.
- Utilised operational insights to optimise nearby traffic flows and wayfinding systems.
Conclusion:
These success highlights collectively demonstrate a focused and holistic approach to modernising carpark services. From enhancing customer experience through advanced technologies like LPR and mobile payments, to achieving stringent PCI compliance and leveraging analytics for continuous improvement—each initiative supports the core objectives: reducing wait times, increasing availability, optimising capacity, and improving operational proficiency. The result is a scalable, secure, and customer-centric carpark environment that aligns with strategic business outcomes.
BMS at Scale
Summary:
Following a detailed review of a Siemens Desigo CC single project solution it was clear that there were several constraints affecting the operation of the platform, from BACNet broadcasts, BBMD table management, IP networking to project and plant management. An overhaul was needed to bring the performance and operational visibility back up to usable state.
Objectives
- Resolve networking issues
- Resolve interconnectivity issues
- Enable plant growth
- Consolidate multiple properties
- Enable delegated security
- Improve performance
Success Highlights
1.Networks that connect
Moved the network routing to central service to remove black holes in connectivity
Distributed controllers to smaller networks scaled to suit broadcasting
Delegated groups of networks to plant systems in geographic areas optimising performance
2. Controllers that communicate
- Ensured open communication between controllers
- Ensured controller peering tables correctly configured
- Replaced legacy controllers to reduce complexity and improve security
3. Extra Capacity
- Deployed hierarchy of project servers to reduce load on server resources
- Increased server resources and modernised operating environments
- Expanded reserved resources to enable future growth
4. Security of Operation
- Established Role Based Access Control across all project servers
- Deployed secure intercommunication between clients, servers and Internet
- Isolated field network connectivity to protect controller communications
5. Blistering Performance
- Resolution of networking issues and redesign of field network significantly improved field device performance
- New distributed project servers delivered 10x improvement in client performance
- Hierarchy of project servers limiting field communication significantly improved alert and control response times.
Conclusion:
This significant transformation project delivered significant benefit to the client facility operations and was delivered 6 months early and significantly under budget. Our teams in-depth understanding of O/T systems networking and security bring decades of understanding to deliver highly performing IT and OT systems transformation initiative in some of the most challenging environments.
Joel Anderson – Head of Technology Design – Auckland International Airport
Joel Anderson – Head of Technology Design – Auckland International Airport
Joel Anderson – Head of Technology Design – Auckland International Airport
Pradeep Kumar – Infrastructure Lead, Business Technology
Rudi Hefer, Solarix Networks
Barbara Lucas – Auckland International Airport
Scott, Aportio Solutions
Matt Burgess – Aedile Advisors
TNDSL – Tony Osborne
Tristram van der Meijden – Neighbourhood Holdings
Raewyn, BIM Asset Lab