In this session, we will explore the critical intersection of Artificial Intelligence (AI) and impact on cybersecurity. You’ll gain insights into what AI Security entails, the Security AI Framework, and the various AI Security models shaping today’s landscape. We will examine the key threats and risks associated with AI, and discuss practical strategies to mitigate these challenges through robust security capabilities. We’ll also examine how AI Security reshapes Identity and Access Management (IAM), and what steps organizations can take to stay resilient in this rapidly changing security landscape.

As organizations transition from simple chatbots to autonomous AI agents, the traditional security perimeter shifts. These agentic systems often operate with extensive access rights and minimal oversight, creating a new risk area: Shadow AI. In this session, we explore how organizations can bring these autonomous actors together under a single, integrated identity control plane. We will discuss practical strategies for discovering unmanaged agents, assigning human ownership, enforcing least-privilege access, and ensuring full auditability. Participants will learn how to effectively manage and secure their agentic workforce while creating the foundation for the next generation of AI-driven innovation.

Despite tighter compliance mandates, cyber risk keeps rising. Identities - whether Human, Machine, or Agentic AI - remain the prime target. Threat actors constantly evolve their tactics to exploit hidden paths to privilege and gain access to launch sophisticated attacks. Managing elevated permissions across hybrid environments is complex, and traditional PAM tools fall short by focusing only on privileged accounts, leaving dangerous gaps. This session shows how modern, identity-centric PAM closes those gaps - securing all users, reducing risk, and streamlining access. You’ll learn how to break down identity silos, eliminate blind spots, and give your security team the visibility and control to protect every identity and every privilege - across every environment.

AI agents are becoming users within your organisation. They authenticate, receive permissions and act with delegated authority, faster and at a scale no human user ever could. How we govern these agents is rightly getting a lot of attention. But there is another question that is often overlooked: where does the identity layer controlling them run, who operates it and which laws apply? If AI agents can act on everything your IAM environment allows, control over that identity layer is no longer just a compliance issue. It becomes a matter of operational security. Drawing on more than two decades of experience building identity infrastructure in the Nordics, Trivore explores what practical digital sovereignty actually looks like and how European organisations can benefit from AI without giving up control of their most critical identity infrastructure. You’ll leave with practical criteria to assess the jurisdictional risks within your own identity stack.

Most IAM teams recognise geopolitical risk, but struggle to translate it into concrete IAM decisions. This workshop bridges that gap. Through structured exercises, participants will learn how to turn geopolitical drivers (regulatory pressure, sanctions, sovereignty, vendor dependency) into actionable IAM guardrails, risk entries and roadmap items that CIOs, CISOs and auditors can stand behind.

How do you build a future-proof CIAM strategy that actually drives business value? In this session, learn from a real-world transformation where B2B and B2C identity were rebuilt from scratch under high pressure. Discover how to balance security and customer experience, deliver quick wins with measurable ROI, and create an IAM operating model that the business actually adopts. Walk away with practical insights on turning CIAM into a growth enabler rather than a bottleneck.

Attackers no longer target just privileged passwords; they target identities. Discover why modern organizations are expanding beyond traditional PAM and adopting a broader identity-centric security strategy. Through real-world experiences and lessons learned, this session explores how to better protect privileged access in today's hybrid and cloud-first environments.

IGA modernization can be approached as an integration- and data-driven evolution of existing capabilities. IGA can be modernized through modular integration, where ITSM tools act as the user-facing front end and connect with CMDB data to provide application and service context. Through APIs, IGA can support access requests and fulfilment flows, while data is also extracted into enterprise data platforms such as Databricks for role mining, access risk insights, audit evidence, and reporting. This API enablement and data foundation can then support MCP and agent-based integrations, enabling intelligent assistants to retrieve context, trigger workflows, and guide users through policy-compliant access processes. These capabilities can be delivered with on-premise IGA solutions, while assessing whether to build custom AI capabilities on extracted data or use the IGA platform’s built-in AI tools.