Agenda

Fear of Lockout: Confronting the Risk of Losing Tenant Access		Tim Springston \| Semperis, Principal Product Manager
Identity in the Uncertain World of AI		Melissa Cronquist \| Walmart, Principal Engineer
Inside the Digital Mind: Cyber Psychology for Actionable Identity Security		Krista Arndt \| St. Luke's University Health Network, ACISO
Recovering from Systemic Hybrid Identity Compromise		Rich Peckham \| Semperis, Principal Security Consultant Tim Beasley \| Semperis, Senior Incident Response Consultant
The Human Element — The Psychology of Resilience		Roger Brotz \| Acadia Health, CISO Barbee Mooneyhan \| Uplight, CISO Elliott Franklin \| Fortitude Re, CISO Joy Mangrum \| Diversity Health, VP, Technology

Be the Champ, Not the Chump: Crisis Management That Actually Works		Benjamin Cauwel \| Capgemini, VP - Head of Cybersecurity
From Inbox to SharePoint: Catching Attackers Mid-Collection in Microsoft 365		Ryan O'Donnell \| Microsoft, Senior Security Engineer
From Incident Response to Intentional Resilience		Marty Momdjian \| Semperis, GM & EVP, Ready 1 Tim Beasley \| Semperis, Senior Incident Response Consultant
Identity Is the Business: Turning Identity Risk into Executive Action		Courtney Guss \| Semperis, Director of Crisis Management
Recovering Trust: Crisis Management Lessons from Hundreds of Ransomware and Wiper Attacks		Elina Jensen \| Cohesity, Security GTM, Director

A Hybrid Identity Maturity Model that Actually Delivers Security Outcomes		Michael Soule \| Sentinel Technologies, Director
Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls		Jake Hildreth \| Semperis, Principal Security Consultant Nicholas Valiensi \| Semperis, Senior Incident Response Consultant
Beyond Baselines: Building Custom Identity Security Testing with Maester and PowerShell		Merill Fernando \| Microsoft, Principal Product Manager Sam Erde \| Patriot Consulting, SecureShield Architect
Building a Shared Entra ID Tenant for Critical Infrastructure: Architecture and Security Decisions in Action		Samantha Kloos-Kilkens \| Argus IT, Owner & IAM Security Consultant
Cryptography, Trust Chains, and Wallets: Real-World Applications of Microsoft Verified ID		Michael Van Horenbeeck \| The Collective, CEO
LETs KILL NTLM		Linda Taylor \| Microsoft, Principal Software Engineer
Let’s Kill NTLM (Vol. 2): The Kerberos Connection		Mariam Gewida \| Microsoft, Product Manager Steve Syfuhs \| Microsoft, Auth Platform Engineering Manager
License to Assist: Bringing AI Agents to Entra ID		Jan Vidar Elven \| Evidi AS, Senior Architect
Mission-Critical Conditional Access at Scale		Joe Kaplan \| Accenture, Portfolio Lead for Identity
Taming Permissions Gone Wild: Building an Entra ID Application Governance Framework		David Lundell \| Identity Managed, Founder/Architect
The Security Upgrade You Can Deploy Today		Nishant Kaushik \| FIDO Alliance, CTO
Workshop: The Anatomy of an Identity Crisis: From Low-Privileged Foothold to AD Forest Dominance		Anthony Wilkinson \| Hack the Box, Senior Solutions Engineer
Workshop: The Anatomy of an Identity Crisis: From Low-Privileged Foothold to AD Forest Dominance		Anthony Wilkinson \| Hack the Box, Senior Solutions Engineer

Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them		Brandon Colley \| TrustedSec, Senior Security Consultant
AD Experts Panel		Cliff Fisher \| Semperis, Senior Solutions Architect Derek Melber \| GuidePoint Security, Practice Lead - Microsoft Identity Rich Peckham \| Semperis, Principal Security Consultant Brandon Colley \| TrustedSec, Senior Security Consultant Michael Van Horenbeeck \| The Collective, CEO
Age of Entitlement: Breaking and Securing Entra Access Packages		Katie Knowles \| Datadog, Senior Security Researcher
Eric Woodruff
KDS Root Keys and Where to Find Them		Michael Grafnetter \| SpecterOps, Principal Security Researcher
Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities		David Lee \| Saviynt, Field CTO

Wednesday, September 9, 2026
7:30 AM - 8:45 AM	Breakfast
9:00 AM - 9:15 AM	Keynote Opening Remarks: Mickey Bresman
9:15 AM - 10:00 AM	Keynote Why Cyber Conflict Is a Human Problem
10:10 AM - 10:55 AM	Identity Masterclass LETs KILL NTLM		Crisis Management From Inbox to SharePoint: Catching Attackers Mid-Collection in Microsoft 365
11:15 AM - 12:00 PM	Identity Security Research KDS Root Keys and Where to Find Them	Identity Masterclass Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls		Identity Masterclass The Security Upgrade You Can Deploy Today
12:10 PM - 12:55 PM	Identity Masterclass Mission-Critical Conditional Access at Scale	CISO Track Identity in the Uncertain World of AI		Crisis Management Identity Is the Business: Turning Identity Risk into Executive Action
1:00 PM - 2:00 PM	Lunch
2:00 PM - 2:50 PM	Identity Security Research AD Experts Panel		Identity Masterclass Taming Permissions Gone Wild: Building an Entra ID Application Governance Framework
2:00 PM - 3:45 PM	Identity Masterclass Workshop: The Anatomy of an Identity Crisis: From Low-Privileged Foothold to AD Forest Dominance
3:00 PM - 3:45 PM	Identity Masterclass Let’s Kill NTLM (Vol. 2): The Kerberos Connection
4:15 PM - 5:00 PM	Identity Security Research Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them	CISO Track The Human Element — The Psychology of Resilience		Crisis Management Be the Champ, Not the Chump: Crisis Management That Actually Works
6:30 PM - 10:00 PM	Evening Event
Thursday, September 10, 2026
7:30 AM - 8:45 AM	Breakfast
9:05 AM - 9:50 AM	Keynote Human Resilience in the Age of AI: Building Proactive Cyber Defense
10:00 AM - 10:45 AM	CISO Track Fear of Lockout: Confronting the Risk of Losing Tenant Access	Identity Security Research Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities		Identity Masterclass License to Assist: Bringing AI Agents to Entra ID
11:00 AM - 11:45 AM	Crisis Management From Incident Response to Intentional Resilience	Identity Masterclass Building a Shared Entra ID Tenant for Critical Infrastructure: Architecture and Security Decisions in Action		Crisis Management Recovering Trust: Crisis Management Lessons from Hundreds of Ransomware and Wiper Attacks
11:55 AM - 12:40 PM	Identity Security Research Age of Entitlement: Breaking and Securing Entra Access Packages		CISO Track Inside the Digital Mind: Cyber Psychology for Actionable Identity Security
12:40 PM - 1:30 PM	Lunch
1:30 PM - 2:15 PM	Identity Security Research Eric Woodruff
2:25 PM - 3:05 PM	Identity Masterclass Workshop: The Anatomy of an Identity Crisis: From Low-Privileged Foothold to AD Forest Dominance		Identity Masterclass Cryptography, Trust Chains, and Wallets: Real-World Applications of Microsoft Verified ID
3:15 PM - 4:00 PM	Identity Masterclass A Hybrid Identity Maturity Model that Actually Delivers Security Outcomes		CISO Track Recovering from Systemic Hybrid Identity Compromise
4:15 PM - 5:00 PM	Identity Masterclass Beyond Baselines: Building Custom Identity Security Testing with Maester and PowerShell		Keynote Resilience Under Fire: A CISO’s Journey Through Crisis, Health Challenges, and High-Stakes Defense

Time Zone: (UTC-05:00) Central Time (US & Canada) []

2026 Session Catalog