About the AI Identity Governance and Access Reviews category
What belongs in this category
The AI Identity Governance and Access Reviews category is about AI used for security in identity governance: deciding and reviewing who can access what. Typical entries compare identities, roles, usage and risk to recommend whether to grant, keep or remove access, explain each recommendation with the evidence behind it, and hold back when identity data is missing or stale. They handle privileged access, exceptions, role changes and separation of duties (rules that stop one person from controlling a whole process). They make clear who reviews, approves and carries out each change, and confirm that removed access is gone from the target application. Products range from recommendations built into an identity governance platform to AI assistants that run reviews and access changes when staff join, move or leave.
Identity governance without AI at its core fits Identity Governance and Administration (IGA), and an IGA platform with strong AI recommendations can enter both. Securing the identities and access of AI agents themselves fits AI Agent Identity Security. Finding risky identity settings across directories and clouds fits Identity Security Posture Management (ISPM), and detecting attacks on accounts fits Identity Threat Detection and Response (ITDR).
This category matches a category in the AI Security Market Map by Cybersecurity Insiders, which describes what buyers need from these products and how to test them.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the access the product helps govern: identities, applications and entitlements covered, review campaigns run with its recommendations, and regulated customers.
- Innovation — an access decision problem solved in a new way, such as recommendations a reviewer can check against evidence, catching excess access even when a whole team shares it, or override rates showing reviewers check rather than approve by default.
- Impact — results for customers: inappropriate approvals and unnecessary removals reduced, more excess access verified as removed, reviewer time cut without new disruption to the business. Give figures from customers or controlled tests.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
