Financial services run on identity. From high-frequency trading to payment processing and customer onboarding, a single misconfiguration or malicious change in identity systems can trigger market-moving outages, blocked transactions, or regulatory breaches. We've seen this play out across the sector, with “compliant” institutions suffering massive breaches due to identity mismanagement, despite meeting GLBA requirements.
In an era where nearly half of financial breaches exploit stolen credentials, compliance alone has proven catastrophically insufficient. Now, with NHIs (non-human identities) growing 240% over the next 12 months and the rise of AI Agents, forward-thinking financial security leaders are asking: How do we secure identity in a growing ecosystem of autonomous systems making critical decisions?
This session goes beyond theory to share what works—and what doesn't when building identity resilience in financial services. Drawing on frontline lessons learned, we'll highlight why compliance does not mean resilience, why a new approach is required to meet the evolving non-human identity landscape, and the practical playbooks that have emerged in response.
© Copyright 1999 - FS-ISAC, Inc. All Rights Reserved.