Agenda

Name	More Info	Speakers
Fear of Lockout: Confronting the Risk of Losing Tenant Access		Tim Springston \| Semperis, Principal Product Manager
How Organizations Recover from Hybrid Systemic Identity Compromise		Rich Peckham \| Semperis, Principal Security Consultant Tim Beasley \| Semperis, Senior Incident Response Consultant
Identity in the Uncertain World of AI		Melissa Cronquist \| Walmart, Principal Engineer
Inside the Digital Mind: Cyber Psychology for Actionable Identity Security		Krista Arndt \| St. Luke's University Health Network, ACISO
The Human Element — The Psychology of Resilience		Roger Brotz \| Acadia Health, CISO Barbee Mooneyhan \| Uplight, CISO Elliott Franklin \| Fortitude Re, CISO Joy Mangrum \| Diversity Health, VP, Technology

Name	More Info	Speakers
Be the Champ, Not the Chump: Crisis Management That Actually Works		Benjamin Cauwel \| Capgemini, VP - Head of Cybersecurity
From Inbox to SharePoint: Catching Attackers Mid-Collection in Microsoft 365		Ryan O'Donnell \| Microsoft, Senior Security Engineer
From Incident Response to Intentional Resilience		Marty Momdjian \| Semperis, GM & EVP, Ready 1 Tim Beasley \| Semperis, Senior Incident Response Consultant
Identity Crisis Readiness: The Leadership Decisions That Make Technical Recovery Possible		Courtney Guss \| Semperis, AVP of Crisis Management Thomas Ritter \| Ritter Gallaher Law Firm, Attorney \| Co-Owner Ryan Gallagher \| Ritter Gallagher, PC, Attorney
Recovering Trust: Crisis Management Lessons from Hundreds of Ransomware and Wiper Attacks		Neil Ashworth \| Cohesity, Senior Solutions Architect

Name	More Info	Speakers
A Hybrid Identity Maturity Model that Actually Delivers Security Outcomes		Michael Soule \| Sentinel Technologies, Director
Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls		Jake Hildreth \| Semperis, Principal Security Consultant Nicholas Valiensi \| Semperis, Senior Incident Response Consultant
A Year of Workforce Passkeys in Entra ID: Lessons Learned and the Road Ahead		Eric Woodruff \| Semperis, Chief Identity Architect
Beyond Baselines: Building Custom Identity Security Testing with Maester and PowerShell		Merill Fernando \| Microsoft, Principal Product Manager Sam Erde \| Patriot Consulting, SecureShield Architect
Building a Shared Entra ID Tenant for Critical Infrastructure: Architecture and Security Decisions in Action		Samantha Kloos-Kilkens \| Argus IT, Owner & IAM Security Consultant
Enter the War Room: Crisis Simulations		Anthony Wilkinson \| Hack the Box, Senior Solutions Engineer
LETs KILL NTLM		Linda Taylor \| Microsoft, Principal Software Engineer
Let’s Kill NTLM (Vol. 2): The Kerberos Connection		Mariam Gewida \| Microsoft, Product Manager Steve Syfuhs \| Microsoft, Auth Platform Engineering Manager
License to Assist: Bringing AI Agents to Entra ID		Jan Vidar Elven \| Evidi AS, Senior Architect
Mission-Critical Conditional Access at Scale		Joe Kaplan \| Accenture, Portfolio Lead for Identity
Taming Permissions Gone Wild: Building an Entra ID Application Governance Framework		David Lundell \| Identity Managed, Founder/Architect
The Security Upgrade You Can Deploy Today		Nishant Kaushik \| FIDO Alliance, CTO
Workshop: The Anatomy of an Identity Crisis: From Low-Privileged Foothold to AD Forest Dominance		Anthony Wilkinson \| Hack the Box, Senior Solutions Engineer

Name	More Info	Speakers
Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them		Brandon Colley \| TrustedSec, Senior Security Consultant
AD Experts Panel		Cliff Fisher \| Semperis, Senior Solutions Architect Derek Melber \| GuidePoint Security, Practice Lead - Microsoft Identity Rich Peckham \| Semperis, Principal Security Consultant Brandon Colley \| TrustedSec, Senior Security Consultant Michael Van Horenbeeck \| The Collective, CEO
Age of Entitlement: Breaking and Securing Entra Access Packages		Katie Knowles \| Datadog, Senior Security Researcher
KDS Root Keys and Where to Find Them		Michael Grafnetter \| SpecterOps, Principal Security Researcher
Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities		David Lee \| Saviynt, Field CTO

Name	More Info	Speakers
Human Resilience in the Age of AI: Building Proactive Cyber Defense		Stuart McClure \| WethosAI / NumberOneAI, CEO & Co-Founder
Opening Remarks: Mickey Bresman		Mickey Bresman \| Semperis, CEO
Resilience Under Fire: A CISO’s Journey Through Crisis, Health Challenges, and High-Stakes Defense		Tim Brown \| Team8, Partner and CISO
Why Cyber Conflict Is a Human Problem		Sarah Gosler, Head of Cyber Resilience and Human Defense

Tuesday, September 8, 2026
1:30 PM - 6:00 PM	Arrivals and Registration Open
Wednesday, September 9, 2026
7:30 AM - 8:45 AM	Breakfast
9:00 AM - 9:15 AM	Keynote Opening Remarks: Mickey Bresman Keynote
9:15 AM - 10:00 AM	Keynote Why Cyber Conflict Is a Human Problem Keynote
10:10 AM - 10:55 AM	Crisis Management From Inbox to SharePoint: Catching Attackers Mid-Collection in Microsoft 365		Identity Masterclass LETs KILL NTLM
10:55 AM - 11:15 AM	Break
11:15 AM - 12:00 PM	Identity Masterclass The Security Upgrade You Can Deploy Today	Identity Masterclass Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls		Identity Security Research KDS Root Keys and Where to Find Them
12:10 PM - 12:55 PM	CISO Track Identity in the Uncertain World of AI	Crisis Management Identity Crisis Readiness: The Leadership Decisions That Make Technical Recovery Possible		Identity Masterclass Mission-Critical Conditional Access at Scale
1:00 PM - 2:00 PM	Lunch
2:00 PM - 2:50 PM	Identity Security Research AD Experts Panel		Identity Masterclass Taming Permissions Gone Wild: Building an Entra ID Application Governance Framework
2:00 PM - 3:45 PM	Identity Masterclass Enter the War Room: Crisis Simulations
3:00 PM - 3:45 PM	Identity Masterclass Let’s Kill NTLM (Vol. 2): The Kerberos Connection		Identity in Motion: Navigating the AI-Driven Shift in Access and Security Resilience
3:45 PM - 4:15 PM	Break
4:15 PM - 5:00 PM	Crisis Management Be the Champ, Not the Chump: Crisis Management That Actually Works	Identity Security Research Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them		CISO Track The Human Element — The Psychology of Resilience
6:30 PM - 10:00 PM	Evening Event
Thursday, September 10, 2026
7:30 AM - 8:45 AM	Breakfast
9:05 AM - 9:50 AM	Keynote Human Resilience in the Age of AI: Building Proactive Cyber Defense Keynote
10:00 AM - 10:45 AM	Identity Security Research Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities		Identity Masterclass License to Assist: Bringing AI Agents to Entra ID
10:45 AM - 11:00 AM	Break
11:00 AM - 11:45 AM	Crisis Management From Incident Response to Intentional Resilience	Crisis Management Recovering Trust: Crisis Management Lessons from Hundreds of Ransomware and Wiper Attacks		Identity Masterclass Beyond Baselines: Building Custom Identity Security Testing with Maester and PowerShell
11:55 AM - 12:40 PM	CISO Track Inside the Digital Mind: Cyber Psychology for Actionable Identity Security		Identity Security Research Age of Entitlement: Breaking and Securing Entra Access Packages
12:40 PM - 1:30 PM	Lunch
1:30 PM - 2:15 PM	Identity Masterclass A Year of Workforce Passkeys in Entra ID: Lessons Learned and the Road Ahead		CISO Track Fear of Lockout: Confronting the Risk of Losing Tenant Access
1:30 PM - 3:05 PM	Identity Masterclass Workshop: The Anatomy of an Identity Crisis: From Low-Privileged Foothold to AD Forest Dominance
2:25 PM - 3:05 PM	Identity Masterclass Building a Shared Entra ID Tenant for Critical Infrastructure: Architecture and Security Decisions in Action
3:15 PM - 4:00 PM	Identity Masterclass A Hybrid Identity Maturity Model that Actually Delivers Security Outcomes	CISO Track How Organizations Recover from Hybrid Systemic Identity Compromise		Enter the War Room: Crisis Simulations
4:00 PM - 4:15 PM	Break
4:15 PM - 5:00 PM	Keynote Resilience Under Fire: A CISO’s Journey Through Crisis, Health Challenges, and High-Stakes Defense

Time Zone: (UTC-05:00) Central Time (US & Canada) []

2026 Session Catalog