In 18 Minutes: How Knowledge Graph and AI Make IT Risks Visible
migRaven.MAX at secIT digital 2026 – our presentation now available as a video
Two days of IT security, current threat scenarios, new technologies and concrete solution approaches: On September 29 and 30, we took part as a partner at secIT digital by Heise 2026 at the event. The focus of our presence was a topic that currently concerns many companies: How can organizations reliably identify, in an increasingly complex IT infrastructure, where security risks arise and what connections lie behind them?
We condensed the answer in our presentation into a compact format:
NIS2 practical example: How Knowledge Graph and AI turn IT complexity into verifiable security
18 minutes that show what classic reports often fail to show.
The real problem is not a lack of data
In most companies, there is no shortage of information. Active Directory, file servers, Microsoft 365 and other systems deliver an enormous amount of it. The problem arises where this information is viewed separately from one another.
Which identity actually has access to sensitive data via which groups? What dependencies exist between systems? How did a permission come about? What has changed? And which of these connections actually represent a risk?
Especially for requirements such as NIS2, it is not enough to present individual lists and reports. What matters is understanding the relationships and being able to demonstrate them in a comprehensible manner. This is exactly where the presentation comes in: A Knowledge Graph connects distributed information and thus creates the context on the basis of which AI can perform meaningful analysis.
From individual findings to the overall picture
In the presentation, Rüdiger Massih shows how migRaven.MAX brings together information from different areas of IT and makes relationships visible that easily remain hidden in classic evaluations.
The Knowledge Graph does not just map the current state. It creates a foundation for understanding changes and dependencies, classifying risks, and deriving concrete measures from them. AI then helps evaluate this complex overall picture and work out the relevant connections for the respective use case.
The goal is not yet another security report. The goal is a robust understanding of one's own IT.
NIS2 is the practical example – the underlying question goes further
In the presentation, we deliberately use NIS2 as a concrete use case. This is because the requirements make a fundamental problem particularly visible: Anyone who wants to ensure security, define responsibilities, or make verifiable statements to auditors must first know what exists, how it is connected, and who can access what.
This transparency is therefore not only relevant for NIS2. It also forms the basis for governance, permissions management, recertification, audits, or the secure change and migration of grown IT structures. This overarching approach was already central when conceiving the presentation: Knowledge Graph and AI are not meant to solve just a single compliance use case, but to make the underlying connections of IT understandable. 2026-08-28-Topic & lineup fo…
18 minutes for a different view of IT security
Those who are not yet familiar with migRaven.MAX get a compact introduction to our approach through this presentation. Those who are already dealing with NIS2, Identity & Access Governance, or securing grown IT structures will see, using a concrete example, why the combination of Knowledge Graph and AI goes far beyond classic data analysis.
Not an hour-long webinar, not a lengthy product presentation: In around 18 minutes, we show the essential connections.
