Identity Day Helsinki

Closing the Privileged Access Gap: How to Protect NHIs, Service Accounts, and AI Agents at Scale

Most privileged identities operate outside PAM—leaving servers, applications, and workstations exposed, and providing attackers a clear path to privilege escalation. With non-human identities (service accounts, APIs, AI agents) now outnumbering human users, the attack surface is growing faster than traditional solutions can cover.

This session exposes the hidden blind spots in today’s NHI & privileged access strategies and the operational realities behind “just-in-time” (JIT) access promises. Drawing on frontline lessons from global enterprises Kev will explore why only 10% of organisations fully complete their PAM projects and how complexity—not technology—is the primary barrier to success.

With over 35 years of experience, Kev possesses an extensive career in the computing industry. His professional journey includes a significant focus on Linux and Windows engineering for some of the world’s leading investment banks. In the last decade, his expertise has shifted towards advising clients on contemporary Identity and Access Management (IAM), the principle of least privilege, and alternative strategies for Privileged Access Management (PAM).

Gagan started his career in IAM with companies like Sun Microsystems and CA Technologies in Australia, then moved to Enterprise Security working in Sales Engineering and Customer roles with F5 Networks and Insurance and Telecommunication companies in Australia. Hen then moved to UK in 2020 with Deloitte Consulting. A global citizen with strong cross-domain functional application experience, its interlocks with bottom-up approach that covers end to end, starting from Infrastructure and Security to functional aspects at the application/solution level, achieving the business outcome is what makes Gagan to be able to operate at all levels of technical, management and commercial aspects with customers.

Aliaksandr on toiminut Laurea-ammattikorkeakoulussa IAM- ja integraatiosuunnittelijana muutamia vuosia vastaten identiteetinhallinnan, käyttöoikeuksien ja järjestelmäintegraatioiden kokonaisuuksista.

Hänelle on tärkeää rakentaa ratkaisuja, jotka ovat turvallisia, toimintavarmoja ja aidosti organisaation tarpeita tukevia: Aliaksanderia motivoi ajatus siitä, että hyvin suunniteltu identiteetinhallinnan kokonaisuus ei ole vain pelkkä tekninen toteutus, vaan koko organisaation turvallisuuden ja sujuvan arjen mahdollistaja.

The Digital Identity Control Plane for Agentic A

Agentic AI, bots and other non‑human identities (NHIs) increasingly act autonomously–often with privileged access. Securing access for these identities requires us to revisit traditional user-centric identity models. In this session we will look at how all elements of Digital Identity security work together to address access governance for these new classes of identity.

Rob specializes in helping organizations integrate Digital Identity into their Cybersecurity strategies. With extensive experience in identity management, Rob has held roles ranging from developer and consultant to technical sales. Before joining One Identity, he worked at Sun Microsystems and Oracle.