IDENTITY W
RLD
East Coast
East Coast · May 6, 2027 · New York Marriott Marquis

Agenda & Speakers

The program

The East Coast's biggest dedicated IAM agenda.

Short, sharp and interactive: keynotes and case studies from practitioners, live panels you vote in, peer roundtables on the problems you name, and two hours of structured networking by design.

Identity World Sydney
Confirmed for 2027

Meet the 2027 speakers.

Confirmed so far for East Coast Identity World on May 6, 2027. More speakers will be announced as the program is finalized.

Jim Trainor
2027 speaker
Jim Trainor
VP Cybersecurity
Naveen Kumar
2027 speaker
Naveen Kumar
VP Insider Risk Analytics and Detection
Siwei Lyu
2027 speaker
Siwei Lyu
Director, Media Forensics Lab
Vamsi Tammana
2027 speaker
Vamsi Tammana
Global Head of AI Governance, IT GRC and Network Security Operations
Vlad Brodsky
2027 speaker
Vlad Brodsky
CIO & CISO
Agenda

Thursday, May 6, 2027.

All times EDT. Speaker lineup and agenda announcement coming November 2026. Sign up for the full lineup drop announcement below!

08:30

Registration Opens & Networking Breakfast

Networking
+

Beat the rush and join us early for complimentary barista-made coffee and breakfast.

09:15

Welcome & Opening Remarks

Keynote
+

Kick off the day with a welcome from your MC and a look at what's ahead.

09:20

Keynote: Preparing for Your Customers’ AI Agents

Keynote
+

Customers are starting to use AI agents to compare products, make purchases and manage accounts on their behalf. But most identity and fraud systems were designed for people, not AI agents acting for them.

This keynote explores how businesses can prepare for this shift, from verifying AI agents and managing their access to keeping customer accounts secure and knowing who's responsible when something goes wrong.

Key takeaways:

  • How to tell legitimate customer AI agents apart from bots and fraudsters
  • How to control what AI agents can do and when customers need to step in
  • How to keep customer accounts secure and ensure accountability as AI agent use grows
09:40

Keynote: Verified Digital Identity's Next Phase

Keynote
+

Government-backed and industry digital identity schemes are moving into mainstream private-sector use. This keynote unpacks where adoption really stands, the practical requirements of taking part, and how verified digital identity reshapes onboarding and fraud reduction, and the trade-offs on the way.

10:10

Cutting Off an Attacker Without Stopping the Business

Panel
Jim Trainor
Jim Trainor
VP Cybersecurity
State Street
Vlad Brodsky
Vlad Brodsky
CIO & CISO
OTC Markets Group
+

Once an attacker gets into a system, resetting passwords isn't always enough to remove them. They may still have access through stolen sessions, connected apps or service accounts.

This panel walks through a real incident, exploring how security teams identify and shut down an attacker's access without disrupting critical business operations.

Key takeaways:

  • Why resetting passwords isn't enough, and how to find other ways attackers maintain access
  • How to shut down compromised access without disrupting essential systems and services
  • How to confirm an attacker is fully locked out before closing an incident
10:40

How I Solved… Going Fully Passwordless: Rolling Out FIDO2 and Passkeys at Scale

Case study
+

With passkeys crossing into the mainstream and a large majority of enterprises now deploying them, passwordless is no longer aspirational. In this case study, a practitioner walks through a real phishing-resistant authentication rollout: the pilot, the pushback, the edge cases (shared devices, legacy apps, deskless workers), and the measurable impact on help-desk load and account takeover.

10:55

Morning Tea & Networking

Break
+

Recharge with refreshments and structured networking with your peers.

11:25

Audience Activity

Workshop
+

A hands-on, interactive session working through a real identity and access scenario as a room. Details announced soon.

11:40

Keynote: Can You Spot a Deepfake? Testing Identity in the Age of AI

Keynote
Siwei Lyu
Siwei Lyu
Director, Media Forensics Lab
University at Buffalo
+

Deepfakes are getting good enough to fool both people and the systems designed to verify identity. From opening fraudulent accounts and bypassing facial recognition to convincing help desks to reset passwords, attackers are finding new ways to exploit the identity checks organisations rely on.

Join Siwei Lyu (Director, Media Forensics Lab, University at Buffalo) for an interactive session where the audience will test their ability to spot deepfakes, see how AI-generated faces, voices and videos are being used to bypass identity controls, and explore what organisations can do to protect themselves.

  • Test your ability to spot a deepfake in a live audience challenge using real and AI-generated faces, voices and videos, with the results revealed in real time.
  • See how attackers are bypassing identity verification, from facial recognition and liveness checks to help desk authentication and video-based approvals.
  • Discover what actually works against deepfakes, including why detection tools alone aren't enough and how organisations can strengthen identity verification against increasingly convincing attacks.
12:00

How I Solved… Proving Our Identity Controls Actually Work

Case study
+

Having identity controls in place is one thing. Proving they actually work is another. Many organisations run access reviews, manage privileged accounts and use sign-in checks, but struggle to show whether these controls are reducing risk.

This keynote explores how organisations can test their identity controls, identify gaps and provide clear evidence to auditors, regulators and business leaders that access is being properly managed.

Key takeaways:

  • How to test whether access reviews, privileged access controls and sign-in checks are working
  • How to identify gaps and fix controls that aren't delivering
  • How to provide clear evidence that identity risks are being managed
12:15

Panel: Which Access Decisions Should We Let AI Make?

Panel
+

AI and automation are starting to make decisions about who gets access to systems and data. But how much control should we give them, and when should a human step in?

This panel explores which access decisions can safely be automated, where IAM teams and application owners still need to be involved, and who is accountable when AI makes the wrong call.

Key takeaways:

  • Which access decisions AI can safely make and which still need human approval
  • How to balance faster access approvals with security and oversight
  • How to maintain accountability when automated access decisions go wrong
12:45

Peer Roundtables

Networking
+

Small-group, discussion-based sessions where you'll work through real identity and access challenges with peers in similar roles. Roundtable topics will be announced soon.

13:35

Lunch & Networking

Break
+

Enjoy a complimentary lunch while connecting with fellow attendees.

14:25

QuickFire Quiz: Test Your Knowledge Against Your Peers

Workshop
+

Put your knowledge to the test in this fast-paced quiz covering real-world trivia, key concepts, and emerging trends. Compete for bragging rights (and a travel voucher) as the top scorer takes the crown.

14:40

How I Solved… Unifying a Fragmented Identity Estate: Closing the Integration, Budget, and Skills Gap

Case study
+

Most organizations don't have one IAM problem. They have a decade of them stitched together: legacy directories, M&A leftovers, siloed cloud IAM, and a team too stretched to fix it properly. This case study follows a practitioner who consolidated a genuinely fragmented identity estate without a green-field budget or headcount, showing what got prioritized, what got cut, and how they built internal buy-in to sustain it.

14:55

Keynote: Who Controls Your AI Agents?

Keynote
Vamsi Tammana
Vamsi Tammana
Global Head of AI Governance, IT GRC and Network Security Operations
Legend Biotech
+

AI agents are accessing systems, moving data and taking actions on behalf of employees. But many have too much access, use shared accounts and have no clear owner.

This keynote explores how to control what AI agents can access, monitor what they do and decide who is responsible when something goes wrong.

Key takeaways:

  • How to find AI agents and understand what they can access
  • How to limit agents to the access they need
  • How to assign ownership, monitor activity and stop agents when needed
15:15

Think Tank: Fake Candidates and Who’s Really Doing the Work

Fireside
Naveen Kumar
Naveen Kumar
VP Insider Risk Analytics and Detection
TD
+

AI-generated CVs, deepfakes and fake identities are making it harder to know who organisations are actually hiring. Even after someone starts, how can businesses be sure the person doing the work is the person they hired?

This think tank explores how organisations can spot fake candidates, verify identities during recruitment and onboarding, and make sure the right person is accessing company systems once employed.

Discussion Questions:

  1. How much has AI changed the way your organisation approaches hiring and identity verification?
  2. How confident are you that your organisation could spot a fake candidate?
  3. What's the biggest gap in verifying someone after they're hired?
  4. Who should be responsible for verifying employee identities?
  5. How far should organisations go with ongoing identity checks?
15:45

Closing Remarks & Prize Draw

Keynote
+

Wrap-up of the day's key takeaways, and your chance to win some epic prizes.

15:50

Networking Drinks Hour

Networking
+

Unwind with your peers for a couple of drinks on us!

16:50

Event Closed

Networking
+

See you at Identity World London on June 16, 2027.

Session formats

Five ways the room works.

Short, sharp and interactive by design. No slide-after-slide days.

Keynote

Solo stage time from a practitioner or an invited expert, framing where the discipline is heading.

20 to 30 minutes
Panel

Three or four leaders comparing programmes directly, moderated to stay concrete rather than abstract.

30 minutes
Roundtable

Small-group peer discussion on a single named problem, with no audience and no slides.

50 minutes
1-2-1 Meetings

Curated, opted-in meetings between practitioners and the partners they choose to meet, scheduled around the programme so nobody misses a session.

15 minutes each
Networking

Two hours of the day given to breakfast, lunch and drinks by design, so the conversations started in the room carry on outside it.

Two hours across the day
Past speakers

Learn from the best in the business.

Global perspectives on identity and digital trust featuring localized experts and region-specific, tailored agendas curated by IAM leaders facing the same challenges as you.

Abhi Banerjee
Abhi Banerjee
VP IAM Security Platforms and Operations
Dr. Nader Nassar
Dr. Nader Nassar
Director Engineering: Cybersecurity and IAM
Galo Vaca
Galo Vaca
CISO
Harsh Rasik Busa
Harsh Rasik Busa
Chief Information Security Officer
Hemangini Tandel
Hemangini Tandel
Head of Identity
Igor Aleksenitser
Igor Aleksenitser
Head of IT Security
James Kay
James Kay
Assistant Director-General, Standards, Technical Advice and Research
Madhuri Nandi
Madhuri Nandi
Head of Security
Miguel Carrasco
Miguel Carrasco
Managing Director and Senior Partner
Sanchita Bajaj
Sanchita Bajaj
Privacy, Authentication and Identity Experience Design Director
Tharaka Perera
Tharaka Perera
Head of Information Security
Vanessa Gale
Vanessa Gale
Head of Identity & Access Management
Thursday, May 6, 2027 · New York Marriott Marquis

Don't miss the East Coast's biggest IAM event.

Insights

Go deeper

Machine & non-human identity
Machine Identity Management: A Practitioner's Playbook for Non-Human Identities

Machine identity management explained for IAM leaders: what non-human identities are, why they now outnumber people, and a 90-day plan to govern them.

Events & community
Identity Management Conferences 2027: The IAM Events Worth Your Budget

Identity management conferences worth your 2027 budget: Gartner IAM Summit, Identiverse, EIC, Identity Week, Authenticate and Identity World, compared.

Machine & non-human identity
AI Agent Identity: How to Authenticate, Authorize and Govern Agents in the Enterprise

AI agent identity for IAM leaders: why agents need their own identity, how to authenticate and authorize them with OAuth and MCP, and how to govern them.

All insights