Programme

Chair of the Conference Amardeep warmly welcomes you to the plenary hall during Identity & Access Management 2026 and will walk you through today’s agenda.

In the NFL, preparation, teamwork and split-second decision-making are critical, both on and off the field. The same applies to cybersecurity, where resilience depends on strong leadership, clear playbooks and the ability to respond under pressure. In this session, Kam shares practical insights on building a resilient security organisation, preparing for cyber incidents and protecting critical digital ecosystems where trust, availability and reputation are always on the line. Attendees will gain a leadership-focused perspective on how to turn cyber resilience into a strategic capability.

AI agents are moving from answering questions to taking actions across enterprise systems, creating new IAM questions: who is acting, on whose behalf, what can it do, and when should a human approve? This practical session introduces a runtime identity model for agentic AI, covering distinct agent identity, explicit delegation, least-privilege and contextual authorisation, human oversight and auditability. Through realistic enterprise scenarios and reference architecture patterns, attendees will explore how the same agent can be allowed to perform a routine task, denied access beyond its authority and challenged before a sensitive action. The session concludes with a practical checklist for assessing whether an organisation’s IAM architecture is ready for agentic AI. It is designed as an educational, discussion-led session using scenarios and architecture patterns to make the concepts concrete.

Identity security is a top priority. Defining the problem remains the elephant in the room. Despite record investment, attackers continue to succeed simply by logging in. The identity landscape has outgrown the categories built to manage it. Siloed teams and tools see parts of the elephant. None sees the whole. In this session, you will gain a practical starting point across teams, terminology and technology for closing the gap and unify silos so you can finally see the whole elephant. See what changes when visibility and intelligence unify around privilege.

Customer identity can make your business tick or stall. Login friction, cumbersome MFA and SSO, identity silos, and legacy APIs can be the difference between lifelong customer relationships and dropoffs. This session will cover learnings from real-world deployments and highlight how the right identity approach can help organizations streamline customer onboarding, provide self-service experiences to business customers and partners, balance security and usability, and securely adopt AI agents and MCP servers.

By 2028, the average enterprise will deploy over 150,000 autonomous AI agents. But as agents gain autonomy, security teams face a fundamental challenge: standard logins and static permissions weren't built for software that acts on its own. In this 25-minute session, Okta shares a practical approach to securing AI without slowing down innovation. Grounded in the Blueprint Alliance—a joint effort with companies like AWS, Google, Salesforce, and ServiceNow—we'll cover four essential controls for managing AI agents: finding where they operate, scoping their access, monitoring their work, and instantly shutting them down if they step out of line. This gives security leaders a clear framework to safely enable AI across the business.

In today's digital landscape, identity has undeniably become the new perimeter, yet managing it across fragmented, multi-vendor environments introduces massive complexity. To eliminate hidden vulnerabilities, forward-thinking organisations are shifting towards centralised visibility that spans all identity providers without locking themselves into a single vendor. It is also time to break down old silos: transforming IAM from a purely IT function into a shared responsibility with the CISO ensures that identity decisions are backed by deep, necessary security context.

A 50-minute live incident, not a workshop. The audience sits in the CISO seat as an AI-enabled identity attack unfolds in real time, deepfake authority, valid-looking access, and a story that gets ahead of the facts. Using on-the-spot votes, participants will take the decisions as if they were involved in a real incident: stop the payment, contain the issue, call the Board, or keep the business moving. Each choice has a consequence. The session challenges the one that identity is still something you can recognise. Leave with practical questions on verification, privileged access, incident command and accountability when AI makes the attacker look like someone you already trust.

AI is changing the way organisations think about identity, access and control. In this session, Hargreaves Lansdown explores the key challenges around agentic AI, employee use of AI tools and the governance of new digital identities. The session also highlights where AI can create value within IAM, IGA and PAM, with practical examples of how existing frameworks and technology can help reduce risk and strengthen identity programmes.

As organisations modernise their digital infrastructure, legacy IAM environments can quickly become a barrier to scalability, security and innovation. In this session, Vodafone IoT shares practical insights from the journey towards cloud-based IAM. The session explores how to manage complexity, reduce risk and ensure continuity while moving identity and access management to the cloud. Attendees will gain a practical view on the challenges, lessons learned and key considerations for building a more scalable and future-ready IAM environment.

AI agents haven't created the non-human identity problem, they've exposed it. Most organisations can't say how many non-human identities they have, who owns them, or what would break if they were revoked. While human identities follow a clear joiner-mover-leaver process, service accounts, API keys and AI agents often exist without clear ownership or governance. This session explores why non-human identities should be governed just like their human counterparts: with clear ownership, least privilege, attributable actions and visibility into every autonomous process. It also examines why the human identity model doesn't always transfer, and how organisations can close the gap without a dedicated IAM function or a large tooling budget.

Identity is often a critical layer of cyber incidents, yet many organisations still struggle to understand how compromised identities, privileges, access pathways and identity infrastructure influence the scope, investigation and response to an attack. This session explores the identity dimension of cyber defence and what happens when compromised accounts, privileged access and identity infrastructure become part of an active security incident. We will look at the role IAM teams play across containment, coordination with Security Operations, remediation and access recovery, as well as some of the operational gaps that can slow an effective response. The session will be practical and interactive, giving attendees a framework and questions they can take back to their own organisations to assess how prepared their IAM function is for the day identity becomes part of the incident.

As AI becomes increasingly embedded in business processes and identity environments, the risks of weak governance are growing just as quickly. Without clear ownership, policies and controls, organisations can face security gaps, compliance issues and uncontrolled access to sensitive data. This session explores why AI governance can no longer be postponed, the risks of inaction, and how organisations can build the right foundations to adopt AI securely and responsibly.

As organisations face increasing identity security and governance requirements, budget constraints can make adopting a new IGA platform challenging. This session explores how organisations can leverage their existing Microsoft investment and Microsoft Entra ID Governance to address key IGA requirements. The session will explore practical ways to close identity security gaps, improve access governance and automate identity lifecycle processes using capabilities already available within the Microsoft ecosystem. Attendees will gain a practical view of how to maximise existing investments, prioritise the most critical governance gaps and build a more effective and sustainable IGA approach without necessarily adding another platform.