Skip to content
In PersonIn personPast event

Using DevSecOps to Control AI Agent Access: Contracts, Drift and Evidence

Event artwork for Using DevSecOps to Control AI Agent Access: Contracts, Drift and Evidence

This event has ended

This listing is kept as an archive. Explore upcoming events to find your next one.

See upcoming events in London

Supporting this event

Sponsors

DevSecOps SGIRMA (Information Risk Management and Assurance) specialist group
About this event

What to expect

As AI agents gain access to Model Context Protocol (MCP) servers, APIs, and internal tools, teams often struggle with fragmented permission models scattered across configuration files, scopes, prompts, and infrastructure settings. This practical DevSecOps session demonstrates how to implement AI agent access as explicit permission contracts that can be automatically validated, monitored for drift, and stored as auditable evidence within your CI/CD pipeline.

What You'll Learn

The session uses a real product case study to show how teams can move from implicit trust to reviewable access decisions. You'll see how to define what AI agents are allowed to access, what actions they can take, and how that access should be reviewed over time. The talk focuses on automation, secure delivery workflows, and practical controls that help teams maintain visibility and control as AI tooling becomes part of production delivery.

Key topics include security considerations around risky permissions and capability sprawl, automated validation workflows, change monitoring for unintended drift, and building auditable evidence for review and compliance purposes. The session is engineering-led with real implementation detail, security trade-offs, and usable takeaways for delivery teams.

Speaker

Viola Lykova, CTO at nuclecode and Senior Software Engineer, brings deep expertise in application security, authentication, trust architecture, and secure software delivery. As creator and lead architect of an AI security product focused on controlling how AI agents gain access to tools and services, Viola makes security decisions more visible, testable, and practical for engineering teams, especially where product workflows become security boundaries.

Event Format

The evening begins at 6:00 PM with tea, coffee, and networking, followed by a short presentation on the DevSecOps and IRMA (Information Risk Management and Assurance) specialist groups at 6:15 PM. The main talk runs from 6:30 PM to 7:30 PM, with questions and answers plus light refreshments until 8:30 PM.

This event is hosted by the BCS DevSecOps Specialist Group and supported by the IRMA specialist group at the BCS London office near Moorga

Create With Conference · Brighton

The UK's leading event for AI builders.

600+ builders, honest implementation stories and hands-on workshops, once a year. The next edition is being planned.

The main stage at Create With 2026 with a full room
Hackathon participants with their laptops
A panel on the main stage

Running an AI event in London?

List it here, free.

Meetups, workshops and conferences go in front of thousands of builders after a quick review.

List your event