Vol. IX · 2026 Cycle · Edition 01
Recognizing the people, projects, and partnerships redefining Customer Identity & Access Management worldwide.
The peer-judged standard for CIAM & IAM — a mark of credibility boards, buyers, and the market already recognize.
Why CIS Excellence Awards
Generic cybersecurity awards treat identity as a sub-category. Customer Identity & Access Management is its own discipline, with its own architecture, its own threat model, and its own buyer. The CIS Excellence Awards exists because IAM programs deserve a defensible, peer-judged standard — not a sidebar trophy.
Founded in 2018 by former KuppingerCole and Gartner identity-security analysts, the program is now in its ninth cycle. The taxonomy covers CIAM, workforce IAM, privileged access, decentralized identity, and identity threat detection — the deepest category structure in dedicated IAM awards. Every finalist is independently benchmarked against the CIS Excellence Framework, a 142-criterion maturity model.
Winners receive a verifiable digital badge backed by cryptographic proof-of-award, recognized as a qualifying credential by (ISC)² for 12 CPE credits toward CISSP recertification, and cited in enterprise procurement shortlists as an independent selection criterion.
What Sets the Program Apart
Not a marketing badge. A peer-judged, framework-benchmarked, annually audited recognition that enterprise buyers, boards, and procurement teams already reference.
Every judge is a practicing CISO or identity architect from a Fortune 500 enterprise, 100% CISSP or CIAM-certified. The panel is refreshed 25% annually for independence, and the full roster and methodology are audited each year by Deloitte.
Every finalist is independently benchmarked against the CIS Excellence Framework — a 142-criterion maturity model covering CIAM, workforce IAM, privileged access, decentralized identity, and identity threat detection. The framework is referenced by Gartner as a maturity reference and used by enterprise IAM teams for internal program assessment.
Winners receive a verifiable digital badge backed by cryptographic proof-of-award, preventing the badge-fraud common in vendor-run programs. Badges are independently checkable and embed submission cycle, category, and jurisdiction — a trust artifact procurement teams can verify without contacting the program office.
The 2025 cycle recorded 1,847 submissions from 38 countries — up 62% year-over-year — making it the largest dedicated IAM awards field on record. Coverage spans CIAM, workforce IAM, privileged access, decentralized identity, and identity threat detection, the deepest taxonomy in the dedicated IAM awards category.
The 2025 Cycle · At a Glance
Independently audited by Deloitte. Recognized as Cybersecurity Recognition Program of the Year at the 2024 Cybersecurity Excellence Awards.
The Taxonomy · 22 Categories in Six Families
Every finalist — across all six families and twenty-two categories — is independently benchmarked against the CIS Excellence Framework, a 142-criterion maturity model referenced by Gartner analysts and used by practitioners as the working standard for CIAM and IAM program measurement.
The CIAM family covers consumer-facing identity programs: registration and verification, progressive profiling, consent and preference management, social login, and customer journey analytics at enterprise scale.
The workforce family covers employee, contractor, and B2B identity — covering SSO, identity governance, joiner-mover-leaver processes, and the operational integration of HRIS, ITSM, and identity fabric platforms.
Two tightly related families covering standing and just-in-time privilege, secrets management, session recording, and the emerging discipline of identity threat detection and response (ITDR) against credential-based attacks.
The forward-looking family covers verifiable credentials, wallets, decentralized identifiers, and issuer trust frameworks — alongside annual special-recognition categories for individual leadership, lifetime contribution, and rising-team honors.
Coverage spans CIAM, workforce IAM, privileged access, decentralized identity, and identity threat detection — the deepest taxonomy in the category.
View the full 22-category taxonomy →The Methodology · Judging Architecture
The final-round panel comprises forty-one practicing CISOs and identity architects from Fortune 500 enterprises. Every judge holds an active CISSP or CIAM certification, and the panel is refreshed by twenty-five percent each cycle to preserve independence. Members serve staggered two-year terms and are recused from any submission originating from their own organization or sector.
Submissions are scored against the CIS Excellence Framework — a 142-criterion maturity model covering architecture, governance, user experience, security posture, measurable outcomes, and program maturity. Every finalist receives a benchmark report; the panel's aggregated scoring and panel-composition records are audited annually by Deloitte to attest to process integrity.
Winners receive verifiable digital badges backed by cryptographic proof-of-award, preventing the badge-fraud common in vendor-run programs. The program is the official recognition partner of the Identity Management Institute and is endorsed by (ISC)² — winners earn twelve CPE credits toward CISSP recertification.
