Identity at machine scale: Governing the new digital workforce

Tuesday, November 3 2026 at 3:00 pm (GMT)

About 45 minutes

About this event

Non-human identities (NHI) are multiplying across modern organisations, from service accounts and machine identities to APIs, workloads and autonomous agents. But as their access and autonomy grow, visibility alone isn’t enough. Security leaders need to understand who owns these identities, what they can do and how they should be governed.

Drawing on experience across identity governance, security testing and AI security, our panel will explore:

How agentic AI is reshaping identity risk and challenging established IAM models
Real-world NHI vulnerabilities and exposures, including excessive access, unclear ownership and poorly understood agent behaviour
Why NHI governance requires more than a single platform, bringing together visibility, analysis, observability and real-time authorisation.
Where security leaders should focus first to strengthen governance, accountability and control

Hosted by

External speaker

E
Derek Gordon VP Identity & Access Management @ NCC Group

Derek is a seasoned technology executive with over 26 years of experience in information security, consulting, product management, and professional services. As a global digital identity leader, he oversees the strategy and execution of Identity and Access Management (IAM) and Privileged Access Management (PAM) services, providing thought leadership and insights across enterprise delivery projects. Throughout his career, Derek has held leadership roles at prestigious organizations, including titles like EMEA IAM Leader at IBM and the UK IAM Leader at PwC. He also founded a boutique IAM service provider, Praxism. A highly respected voice in the digital identity field, Derek actively invests his time in supporting a wide range of industry bodies and organizations.
External speaker

E
David Brauchler Technical Director @ NCC Group

David Brauchler is an NCC Group Technical Director in Dallas, Texas. He leads the North America AI/ML Security Practice and operates as an application security specialist and penetration tester, and his skillset includes web, mobile, native, AI/ML, and application threat modeling. David has a Master's degree in Security Engineering and is passionate about all forms of technology, especially in the security space. David has a long portfolio of technical presentations through his adjunct lecturing, conference talks, special guest lectures, podcasts, news broadcasts, media commentary, and more.
External speaker

E
Kenny Ryder IAM Technical Lead @ NCC Group

Kenny Ryder is a highly experienced digital identity leader with nearly 20 years of experience designing and delivering identity security programmes across financial services, government, telecommunications, and critical national infrastructure. He specialises in Identity Governance, Privileged Access Management, and Non Human Identity security, helping organisations strengthen control, reduce risk, and support secure digital transformation.

NCC Group