By the end of this session, participants will be able to:
- Describe how identity-based attacks have evolved, including AI-generated social engineering, adversary-in-the-middle session hijacking, and compromised identity providers.
- Explain why controls that verify access at the front door can’t account for what happens after it.
- Recognize multi-stage intrusions that pivot across SaaS applications and non-human identities.
- Account for the AI agents, OAuth-connected integrations, and machine identities that most security stacks were never built to see.
- Apply a practical framework for identity risk in the AI era: know what normal looks like for every identity, human or not, and surface the deviations that signal compromise.
Earn ISC2 CPE credits
This resource is ISC2 CPE eligible. Submit the credit form to claim your continuing-education credits.