Traditional IAM focuses on proving users had the right access at the time of an audit. But as Frontier AI accelerates attack speed and sophistication, organizations must continuously assess whether trusted identities remain secure. This session explores the shift from compliance-driven IAM to threat-informed identity security, and how to build resilient identity programs that defend against real-world attacks, not just regulatory requirements.