About the Cyber Resilience Services category
What belongs in this category
The Cyber Resilience Services category covers services that make organizations ready for the day an attack succeeds. Typical entries assess resilience against frameworks and regulations, such as DORA (the EU's resilience rules for financial firms). They plan which services must keep running and run crisis exercises for executives. They also design and test recovery, and help clients recover after an attack.
Products that support resilience fit Cyber Resilience, and incident response during an attack fits Incident Response. Exercises and simulations, whether a product or a service, also fit Cyber Readiness and Validation; a provider whose exercises are part of wider resilience work can enter both. A provider that runs resilience on an ongoing basis can also enter Managed Security Service.
Related categories to enter
Each category is judged separately, so you can enter a service in every category that matches what it delivers, with a separate nomination for each. Tailor each nomination to that category's focus. The provider behind the service can also be recognized in Cybersecurity Service Provider of the Year or Best Managed Security Service Provider (MSSP).
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against providers of similar size and region, so a small regional provider is not ranked against a global firm. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the resilience work the service delivers: clients served, exercises run, recoveries supported, and regulated or critical sectors covered.
- Innovation — a resilience service problem solved in a new way, such as exercises that change how leaders respond, recovery plans tested end to end, or new resilience rules met quickly.
- Impact — results for clients: recovery time cut in tests or real events, gaps closed after exercises, regulatory findings resolved, client retention. Give figures from clients, anonymized if needed.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A provider can enter its own service, and a PR agency can enter it on the provider's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as client names, contract figures or service levels. Deadlines, pricing and entry steps are on the How it Works page.