About the Identity Governance and Administration (IGA) category
What belongs in this category
The Identity Governance and Administration (IGA) category covers products that decide and record who should have which access, and keep it correct over time. Typical entries automate account creation and removal, handle access requests and approvals, manage roles, run access certification campaigns in which managers confirm their staff's access, and produce evidence for auditors.
IGA is about the lifecycle and the audit trail. Products whose main job is enforcing access at the moment of a request fit Access Control, and products for administrative accounts fit Privileged Access Management (PAM). An IGA platform can also enter Identity and Access Management (IAM), and one that governs service accounts and other non-human identities can enter Non-Human Identity Management.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the scale and difficulty of what the product governs: users, applications and permissions (entitlements) covered, regulated customers, audits it supports.
- Innovation — a governance problem solved in a new way, such as access reviews that managers finish quickly and accurately, roles built from how access is really used, or governance that reaches cloud and SaaS permissions.
- Impact — what changed: time to grant and remove access, review campaigns finished on time, excess permissions removed, audit findings closed. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
