Skip to content
CIS Excellence AwardsEst. 2018 · San Francisco

Vol. VIII  ·  2026 Cycle Open

CIS Excellence Awards

An editorial masthead announcing the 2026 cycle of the peer-judged recognition program for Customer Identity & Access Management — now accepting entries through 14 March 2026.

Submit Your Entry for 2026
Founding desk of the CIS Excellence Awards, 2018.
The Founders' Desk — San Francisco, 2018

A Founding Chapter

A recognition program built by analysts who had covered the field for a decade.

In 2018, a small group of former KuppingerCole and Gartner identity-security analysts grew impatient with awards programs that buried IAM inside a generic "cybersecurity" bucket. They convened in a single room at 1845 Market Street to draft a charter for a dedicated program — one whose judges would be practicing CISOs and identity architects, whose categories would map to the actual taxonomy of CIAM, workforce IAM, privileged access, decentralized identity, and identity threat detection, and whose winners would carry a verifiable, cryptographically signed mark of credibility.

Seven years on, that charter is the operating document of the program. The 2025 cycle recorded 1,847 submissions from 38 countries, the largest dedicated IAM awards field on record. The judging bench is 41 strong, 100% CISSP or CIAM-certified, refreshed by 25% each year to protect independence. The founders remain on the masthead — not as figureheads, but as signatories to a methodology that has now endured three Gartner-recognized years and one Deloitte audit.

Read the full charter →

The 2026 Judging Bench

41 practicing CISOs and identity architects. No vendor representatives. Audited annually by Deloitte.

The panel is composed to reflect the working ranks of enterprise identity security — not the marketing org charts of platform vendors. One quarter of the bench turns over each year so that no single employer or category steward accumulates outsized influence.

  1. 01

    Chief Information Security Officers

    14 sitting CISOs from Fortune 500 enterprises, financial services, healthcare, and the public sector. Each holds an active CISSP and at least one vendor-neutral identity credential.

  2. 02

    Identity & Access Architects

    13 senior IAM architects responsible for deployments at scale — workforce, customer, and B2B partner programs with populations above one million identities.

  3. 03

    Identity-Program Directors

    9 directors of identity governance, IGA, and CIAM programs — the operators who measure provisioning latency, certification accuracy, and adoption against business outcomes.

  4. 04

    Independent Analysts & Academics

    5 non-vendor-affiliated identity-security researchers and faculty members, retained for category expertise in decentralized identity and identity threat detection.

Recusal policy: every judge steps aside from any category in which their current employer is a finalist. The full roster is published in the annual colophon, and the 25% annual refresh is signed off by Deloitte.

See the full 2026 panel →

Process · Audited

How independence is built into the judging process — not assumed.

Every year, Deloitte audits the judging pipeline and the recusal log. Every entry with a panel conflict is removed from the final round before scoring begins. Independence is documented, dated, and signed — not asserted.

  1. 01

    Annual Deloitte audit of the judging pipeline

    Each cycle, an external Deloitte team reviews judge selection, conflict declarations, and the integrity of the scoring workflow. The audit covers the full panel of 41 practicing CISOs and identity architects from Fortune 500 enterprises, and produces a public attestation that the methodology was followed.

  2. 02

    25% annual refresh of the 41-judge panel

    A quarter of the panel rotates out every cycle and is replaced from a vetted candidate pool. The refresh prevents repeat-judge entrenchment, opens the program to new enterprise perspectives, and is verified by the auditor before each round opens for scoring.

  3. 03

    Documented recusal policy for every conflict

    Any judge with a current or recent commercial relationship to a submitting organization is recused from that entry before ballots are distributed. Recusals are logged with date, judge, entry, and stated reason, and the log is reviewed by the auditor and the program chair before finalists are announced.

  4. 04

    Vendor funding does not determine outcomes

    Sponsorship revenue funds program operations; it does not enter the judging room. Sponsoring organizations are subject to the same recusal rules as any other entrant, and the auditor reviews sponsor-entry overlap before scoring begins. No sponsor receives visibility into its entry's panel or score.

The Benchmark

Every finalist is independently scored against the CIS Excellence Framework — a 142-criterion maturity model used by Gartner as a reference and applied uniformly across all 22 categories of the program.

CIS Excellence Framework 142 criteria · 22 categories · single benchmark

Recognition & Audit Trail

The institutional partners and editorial outlets that recognize the awards.

Three standing relationships form the audit trail behind every winner. Each one is dated, documented, and verifiable on request — not a logo on a slide.

  1. Institutional Partner

    Identity Management Institute — Official Recognition Partner since 2020

    The CIS Excellence Awards has been the official recognition partner of the Identity Management Institute (IMI) since 2020, lending the program the standing of the leading professional body for identity practitioners worldwide.

  2. Qualifying Credential

    (ISC)² endorsement — 12 CPE credits per submission

    The awards are endorsed by (ISC)². Winners and finalists earn 12 CPE credits toward CISSP recertification, positioning the program as a qualifying credential within the world's largest cybersecurity membership body.

  3. Editorial Coverage

    Featured in CSO Online, Dark Reading, and Identity Week

    Winners, finalists, and program methodology have received editorial coverage in CSO Online, Dark Reading, and Identity Week across the 2024 and 2025 cycles, extending the awards' reach into the security and identity-buying press.