Skip to Content
View all events

Identity and Access Management for Secure AI Adoption

Published by O'Reilly Media, Inc.

Intermediate content levelIntermediate

A practical framework for evolving your identity program

What you’ll learn and how you can apply it

  • Evaluate an existing IAM program against the risks introduced by AI adoption
  • Identify where AI genuinely breaks current identity and access assumptions versus where existing controls still apply
  • Prioritize governance and oversight additions needed to secure AI tools and emerging agentic systems
  • Apply a leader-level framework to communicate AI identity risk to your senior management

Course description

AI adoption is moving faster than most identity programs can absorb it. Copilots, AI-assisted tools, and emerging autonomous agents all need access to enterprise data and systems, and security and IAM leaders are being asked to secure that access without a clear playbook for what’s different about AI.

Harpreet Kohli gives you a practical framework for evaluating your current IAM program against the realities of AI adoption: what your existing identity governance, access management, and oversight capabilities already cover; where AI introduces genuinely new risk; and what to prioritize. You’ll work through real governance patterns for managing the identities AI tools create, decide what belongs in your existing program and what needs new controls, and get a forward look at how autonomous AI agents will stretch your program even further

This live event is for you because...

  • You’re a security practitioner, security architect, or technology architect, and you’ve been handed the job of securing your organization’s AI rollout.
  • You manage or contribute to an identity governance, access management, or risk program and want a straight answer on what actually changes when AI enters the picture.
  • You’re tired of vendor pitches and coding tutorials and want something you can use to brief your own leadership with confidence.

Prerequisites

  • General familiarity with core IAM concepts (authentication, authorization, identity lifecycle, access governance)
  • No coding or hands-on technical experience required

Recommended follow-up:

Schedule

The time frames are only estimates and may vary according to how the class is progressing.

Why AI adoption is an identity problem (20 minutes)

  • Presentation: AI systems need access to data, applications, and workflows, which puts identity and access management at the center of the conversation; mapping AI risk onto the identity capabilities most programs already have—identity lifecycle, least privilege, access certification, audit trails
  • Hands-on exercise: Score your own program against a short checklist covering core capabilities

Where AI breaks the current model and what to add (35 minutes)

  • Group discussion: What’s different about an AI tool’s access needs compared to a human user’s?
  • Presentation: Machine identity sprawl, ownership gaps, and the shift from “who can use this tool” to “what can it access and do”; governance and approval steps for onboarding new AI tools
  • Hands-on exercise: Build a gap list for a sample AI rollout
  • Q&A

Using AI to strengthen your own IAM program (25 minutes)

  • Presentation: Access certification triage, role mining, and flagging unusual identity behavior
  • Group discussion: Where would this help most in your current backlog of access reviews?

Case study and agentic AI preview (25 minutes)

  • Presentation: A real example from a regulated environment; where standard identity controls are inadequate; a preview of agentic AI where autonomous agents and delegated authority will ask even more of your identity program

Wrap-up and Q&A (15 minutes)

Your Instructor

Harpreet Kohli

Harpreet Kohli is associate vice president of cybersecurity and IAM at one of Canada's largest multiline insurance companies, with enterprise-level responsibility for security programs that enable business performance in a regulated environment. A transformation-focused leader with 18 years of experience across financial services, utilities, and technology, Harpreet is known for building security programs that accelerate business priorities rather than slow them down. She holds dual master’s degrees in information systems security management and engineering, and is a CISSP, CISM, CISA, and SABSA certified architect.

Harpreet has established IAM programs and risk frameworks from the ground up, and embedded those into cloud transformation, M&A activity, and digital innovation. She brings board-level credibility as a sitting director at a provincial crown corporation and deep regulatory fluency across financial services and critical infrastructure (NIST CSF, NERC CIP). A trusted executive voice on cybersecurity risk, AI governance, and digital transformation, her perspective is regularly sought by executive leadership navigating high-stakes technology decisions.

linkedinXsearch

Skill covered

Identity and Access Management (IAM)