Identity & Access Management Sydney 2027

Identity & Access Management Sydney is an in-person conference for senior identity, cyber security and technology leaders responsible for how organisations govern identity, access, privilege and trust. The inaugural event takes place on 10 February 2027 at Royal Randwick Racecourse and gives the IAM community a dedicated forum within the wider CISO Sydney event portfolio.

The event reflects a fundamental change in the role of identity. Organisations are no longer managing access only for employees. They must govern human users, privileged accounts, service accounts, workloads, applications, APIs, devices and increasingly autonomous AI agents. At the same time, cloud and hybrid environments are making access more distributed, dynamic and difficult to assess. Identity is becoming the control plane for authority: the layer that determines who or what can act, what they can reach, for how long and under whose accountability.

The programme examines how organisations can establish guardrails for expanding human and non-human identities, move from standing privilege towards contextual and just-in-time access, connect identity signals and attack paths to strengthen assurance, and give IAM greater influence across security, technology, risk, investment and business decision-making. It is designed around operational decisions and practical peer learning, rather than product demonstrations, so attendees can compare approaches and identify actions relevant to their own identity programmes.

When and where?
Wednesday 10 February 2027 at the Royal Randwick Racecourse, Sydney

Our top themes
Identity beyond the human
Establish guardrails as human, machine, workload, and AI identities expand, closing gaps in visibility, authority, and accountability before they become business risks.

The privilege paradox
Reconsider how access is granted and maintained as organisations move from standing privilege towards contextual, just-in-time and adaptive access.

Identity assurance
Build greater confidence in who has access, what they can reach and how that access is being used, using identity signals and attack paths to continuously assess and manage risk.

The evolving IAM mandate
Elevate the IAM function as identity becomes a strategic capability, requiring greater influence across security, technology, risk, investment, and business decision-making.