Event

As Identity continues to march to the forefront of your companies Attack Surface, the answer to “Who has Access to What?” remains elusive.

The Onboarding All of the Applications a Company has; 1) Takes too Long, 2) Is too Expensive, and 3) The Onboarding is inconsistent across Access Management, Identity Governance and Privileged Access Management.

The integration of the Identity pillars;(Access Management | Identity Governance Administration | Privileged Access Management), along with the events and signals driving these will be reviewed as part of “How to Empower the Identity Ecosystem…”

Most identity programs were built around people. Joiner, mover, leaver. HR drives provisioning, access reviews validate decisions, and governance assumes identities behave like employees.

That assumption was always fragile. Many organizations are still struggling to get workforce identity right. Data quality is inconsistent, lifecycle processes break down, and ownership gaps are more common than most programs admit.

Now add non-human identities and AI agents, and the scale shifts considerably. Most programs were never designed for them.

This session uses the concept of "identity therapy" to examine these patterns. Through a fictional enterprise patient, we will diagnose common symptoms across workforce, non-human, and AI identities and explore what is actually driving them.

The challenges are not new. They are familiar problems stretched across a population identity programs were not built to handle.

Attendees will leave with a clearer way to think about what needs to change and why most root causes point back to ownership, lifecycle design, and decision clarity rather than technology.

Identity has been the new security perimeter for some time, yet in many organizations, Identity & Access Management (IAM) and Cybersecurity teams still operate with different mental models, skill sets, and success metrics. This disconnect creates gaps in threat detection, weakens Zero Trust initiatives, slows incident response, and leaves organizations vulnerable to modern identity-centric attacks.

In this session, a seasoned cybersecurity and IAM leader will explore why IAM and security teams often talk past each other, how this skills gap manifests in real-world failures, and what leaders can do to close it. Drawing on examples from higher education, financial services, healthcare, and large-scale consumer platforms, the session will examine the differences in how IAM and security professionals approach risk, controls, identity proofing, access decisions, and lifecycle management.

Attendees will learn how to reframe IAM as a core security capability, not just a provisioning or user-experience function, and how to upskill both IAM and cybersecurity professionals to operate effectively in a shared identity-centric security model. The session will provide practical guidance, competency maps, and organizational patterns that enable teams to collaborate more effectively, reduce risk, and deliver secure, friction-aware digital experiences.

Non-human identities (NHI) are exploding across the enterprise. New types of identities are popping up in every corner of the business and managing non-human identities has become like the wild west. These challenges are compounded by the varying types of non-human identities and the fundamental truth that not all Non-Human Identities are created equal. Taming the frontier of Non-Human Identities requires a nuanced approach to governance; assigning the right security and control framework to the right set of identities. Join IDMWORKS in a conversation around the new and evolving set of Non-Human Identities, how Non-Human Identities still require a layer of human oversight, and how different identity technologies are trying to bring some law and order to the Non-Human identity landscape.