IAM systems are designed to identify, authenticate, and authorize identities; enabling approved users and devices to access hardware, software, or other resources. The sub-segments within IAM include access management for workforce, customers, and non-human identities (machines, bots, IoT and other connected devices), identity governance administration (IGA), and privileged access management (PAM). This paper focuses on customer IAM (CIAM) — its contribution to achieving a robust enterprise security posture, why CISOs must be involved in choosing a CIAM vendor, and the parameters to consider when selecting the right fit. Further division of CIAM into B2B, B2C and government/citizen identities is beyond the scope of this research. CIAM systems verify external identities, and control access to applications and services. Some CIAM outcomes overlap with overall security and identity mandates, but there are many other divergent expectations as compared to other IAM components. CIAM is sometimes treated as an extension of workforce IAM, however the fundamental differences between the two require thorough examination before they choose an approach. CIAM solutions are designed to secure customer journeys and enable seamless CX and engagement at scale across channels. Protecting customer identities from fraud, breaches, and privacy violations is vital to retain customer trust and confidence. Author: Deepali Sathe