Program Sikkerhetsfestivalen 2026

Cloud & Security Architecture

Your Source Code Is Under Attack. Who’s Defending It?

Onsdag 10 · HeartBox, Byscenen

EnglishDeep-dive 40 min

Craig Forshaw

Craig Forshaw

Cloud Architect

Craig Forshaw is a Cloud and IaC solution architect working at Atea. He is a Microsoft MVP in cloud security and holds certifications Microsoft certified Azure Solutions Architect Expert, Microsoft Cybersecurity Architect and Identity and access administrator. Craig is also a founding member and organiser of the Microsoft Security User Group community. He is an active speaker and has 18+ years of experience inside IT infrastructure, cloud security , DevOps & IaC.

Code now powers everything—applications, infrastructure, automation, and increasingly the AI systems that help us build it.

As development accelerates, organisations need to ensure they maintain strong governance and control over who can access and change their source code.

In this session, we explore the growing risks around source code security, from human error to compromised identities and supply‑chain attacks. We’ll look at how organisations can use GitHub Enterprise and Microsoft Defender for Cloud to establish robust governance, enforce secure development practices, and protect their repositories at scale.

Expect practical guidance, real‑world examples, and a clear roadmap for building a secure and well‑governed code environment that keeps your developers productive—and your organisation safe.

  1. Building TPT: From alert chaos to clear priorities 1 · Frimurerlosjen, rom 1
  2. Delegating your attack surface through OAuth consents 1 · Frimurerlosjen, rom 2
  3. Cryptanalysis with Claude Code 10 · HeartBox ,Teatersalen
  4. Risiko med to briller: FRIA og DPIA i KI-prosjekter 11- Breiseth, Storlon
  5. GenAI in the War Room: Crafting, Facilitating, and Analyzing OT Tabletops 2 · Home hotel Hammer, moen nede
  6. Lykketiøringen som forsvant: En leksjon i strategisk blindhet og grå nesehorn. 2 · Home hotel Hammer, moen oppe
  7. Bry deg! Hvorfor arbeidsmiljø er et av våre viktigste tiltak 3 · Hvelvet, Gullsalen
  8. Når leverandøren blir angrepet – hvem tar regningen? 4 · Kommunestyresalen, Lillehammer rådhus
  9. Virksomhetslommebok – hva er det? 5 · Kulturhuset Banken, Expedisjon
  10. When freedom is at stake - from Ukraine's frontline to Norwegian preparedness 5 · Kulturhuset Banken, Festsalen
  11. Minimum Viable Company - Når alt står på spill: Hva er det viktigste? 5 · Kulturhuset Banken, Holbøsalen
  12. Reducing business risk through proactive digital forensics 5 · Kulturhuset Banken, Kafeen
  13. Steering the AI Revolution: Building Trust and Accountability with AI Governance 6 · Lillehammer kino, sal 2
  14. Cybersikkerhet er også kultur: Empiriske funn om nasjonale forskjeller 6 · Lillehammer kino, sal 4
  15. Hunting international cyber criminals 9 · Victoria Scandic, sal 1+2
  16. AI i SOC-en: hva vi lærte av å bygge en agentisk triage-assistent 9 · Victoria Scandic, sal 3