About the Cyber Asset Attack Surface Management (CAASM) category
What belongs in this category
The Cyber Asset Attack Surface Management (CAASM) category covers products that connect to the tools an organization already runs, such as endpoint agents, directories, cloud accounts, scanners and IT service records, and combine their data into one inventory of devices, users, applications and cloud resources. Typical entries then show the gaps: devices with no endpoint agent, systems never scanned, or accounts with no owner.
Discovery from outside, as an attacker sees an organization, fits Attack Surface Management. Ranking the exposures found across the inventory fits Exposure Assessment Platform. Since an asset inventory underpins every exposure program, a CAASM product may also be put forward in Cyber Exposure Management, the broad exposure category.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the inventory the product builds: tools connected, assets and identities covered, and customers that use it as their main record of what they own.
- Innovation — an asset problem solved in a new way, such as matching records from many tools into one asset, questions about coverage answered in plain language, or gaps fixed automatically.
- Impact — results for customers: assets found that no tool listed, coverage gaps closed, time to answer audit questions about assets. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
