Securing Identity & Access Management in AD/Entra ID

Identity systems are not longer just part of security — they are security. Active Directory and Entra ID control who can authenticate, access critical systems, and recover operations after an incident. Yet most organizations still manage them reactively, discovering gaps only after privilege escalation, lateral movement, or outages expose fundamental weaknesses. This session is for those responsible for ensuring identity systems remain secure, operational, and recoverable under pressure. We'll walk through the reality of hybrid identity: how misconfigurations accumulate silently, how inherited permissions create shadow admin access, and why monitoring alone won't save you when your identity layer becomes the attack surface or the single point of failure. We'll cover three critical areas: Know your exposure: map attack paths, misconfigured trusts, and excessive privileges before adversaries do Detect what matters: identify privilege changes and anomalous access patterns in real time across AD and Entra ID Recover with confidence: restore identity infrastructure precisely and quickly, ensuring business continuity when not if incidents occur.