Identity and Access Management Sydney schedule

In this 5-minute networking session, the goal is to connect with three new people. Enjoy the opportunity to expand your network! 

This session challenges traditional assumptions about identity and trust as digital identities increasingly move across organisational and service boundaries, creating new questions around assurance, privacy and accountability.

Identity activity is often scattered across environments, making it difficult to see how access is being used and where risk is building. This session explores how an identity telemetry layer can connect the signals, uncover forgotten entitlements, unmanaged identities and hidden access paths, and help security teams prioritise the risks that matter most.

This session explores how organisations can uncover AI agents operating across their environments, understand what they can access and establish the right controls as agentic AI moves from experimentation into everyday business operations.

Every organisation claims to run least privilege. But not many can prove it under real scrutiny because the tooling that enables it has outpaced the workflows and culture needed to sustain it.

• What would it actually take to prove your organisation practises least privilege, not just documents it?
• Is just-in-time access solving the problem, or just making the same problem harder to audit?
• What separates the organisations that actually operationalise least privilege from the ones that only claim to?

Panellists:

Jeevitha Vijayakumar Head of IAM Delivery Allianz Australia

Paurush Tripathi Former BlueScope’s Global Lead IAM

Tinu Bansal Identity Tech Lead AMP 

Zero Trust has moved from a static architecture checklist to an ongoing “assume breach” operating posture. Now AI is forcing another shift in what verify even means when the thing you are verifying isn’t a person. This panel explores what's actually changing in practice, and how far most organisations really are from keeping up.

• How are AI and machine identities changing what "continuous verification" actually requires?
• Is "assume breach" a genuinely different posture from earlier Zero Trust thinking, or the same idea restated with new urgency?
• What would you look for to tell a mature Zero Trust programme from one that's only mature on paper?

Panellists:

Huzefa Sabir Cybersecurity & Digital Governance Program Manager University of Newcastle

Marc Pelusi Associate Director Portfolio & AI Delivery NSW Health  

This session explores how organisations can connect entitlements, identity behaviour and access relationships to identify where seemingly legitimate access creates disproportionate exposure.  

This session brings an AI engineer’s perspective on the identity and access challenges that emerge when AI moves from experimentation into production. Explore where conventional access models create friction, what AI teams actually need from IAM and how identity controls can support faster, safer deployment.

This session explores how rapid GenAI adoption is challenging established approaches to identity, access and governance. Discover where traditional controls are struggling, what needs to change, and how IAM can support GenAI adoption without losing visibility or control. 

This session explores what happens when service accounts, workloads and applications become an expanding population of identities that nobody has a complete view of. Discover where machine identity risk hides, why traditional IAM approaches struggle to keep pace, and how organisations can bring this growing identity population under control. 

This session puts identity leaders inside a live scenario where an AI agent with legitimate access begins behaving outside its expected pattern. Explore how peers make the call when there isn’t an obvious answer.

Scenario 1 — The request
An AI agent needs access to a sensitive dataset to complete a business task. How much access do you approve, and for how long?

Scenario 2 — The behaviour changes
The agent begins accessing significantly more data than expected, but nothing indicates that its credentials have been compromised. Do you intervene?

Scenario 3 — The business pushes back
Restricting the agent's access could disrupt a critical business process. Do you revoke, reduce, or accept the risk?

Speakers:

Surjeet Singh Head of Identity and Access Management Rest

Vanessa Gale Head of Identity & Access Management Latitude Financial Services

This session explores how IAM leaders can move identity from an operational function to a strategic priority, making the case for investment across technology, people and capability. Learn how to build executive support, demonstrate business value and secure the mandate to take IAM further. 

This session explores how the IAM function is changing as leaders face growing expectations beyond access management, from building scarce specialist capability and developing teams to influencing executives, shaping organisational change and navigating strategic relationships. Discover what IAM leaders need to build, let go of, and become to lead the function into its next phase.

Moderator:

Roberto Calero Cloud Operations Lead Blackwoods

Speakers:

Chris Ong Senior Manager – Identity and Access Management Insignia Financial