Tirsdag – 5 · Kulturhuset Banken, Expedisjon
Cyber Security Engineer, NBIM
Stian Angvik is a Cyber Security Engineer on the Digital Identity team at NBIM. He combines exceptional communication skills with a proven track record of getting things done — driving initiatives over the finish line without ever losing sight of the user experience.
Senior Security Engineer, NBIM
Manish is a Senior Security Engineer at Norges Bank Investment Management (Oljefondet) with over a decade of IT industry expertise. His professional journey encompasses Application Security and Cloud Security, with a specialized focus on Zero Trust Architecture and Implementation using Azure and Microsoft 365 technologies. In recent years, he has concentrated his efforts on Identity Security, leveraging his extensive background to strengthen authentication and access management systems. His deep technical knowledge in cloud-native security solutions positions him as a key contributor to NBIM's cybersecurity initiatives.
Identity governance is often a graveyard of accumulated permissions — years of role changes, project access, and forgotten entitlements quietly compounding into a sprawling attack surface. At Norges Bank Investment Management (NBIM), we decided to tackle this head-on using AI.
Over the past year, we leveraged large language models, intelligent automation, and custom-built AI tooling to conduct a comprehensive identity and access cleanup across our organization. The result: over 10,000 stale or excessive access entitlements identified and remediated — accumulated over nearly a decade — dramatically reducing our identity attack surface.
But cleanup was just the beginning. We built an ecosystem of AI-powered tools to make identity governance sustainable and accessible to the entire organization: interactive dashboards for access intelligence, MCP (Model Context Protocol) integrations for real-time identity data querying, AI-powered chatbots for self-service access insights, and reusable AI skills that enable non-security staff to make informed access decisions.
This talk walks through our end-to-end journey — the technical architecture, the organizational change, the wins, and the hard lessons — so you can take practical ideas back to your own environment.
Programmet er oppdatert.