About the Cyber Risk Quantification (CRQ) category
What belongs in this category
The Cyber Risk Quantification (CRQ) category covers products that turn security data into financial figures: the likely cost of cyber events and how much each control or investment reduces it. Typical entries model loss scenarios, often with methods such as FAIR (Factor Analysis of Information Risk). They use data from security tools and industry loss records, compare the value of different investments, and produce reports for boards, finance teams and insurers.
Cyber insurance offerings, whose own category was retired, enter the industry awards Best Cybersecurity Industry Solution or Financial Services; tools that insurers and brokers use to model cyber risk can enter here. Platforms that manage risk registers and controls fit Governance, Risk and Compliance (GRC), and products that measure the security program for leaders fit Cybersecurity Performance Management.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the decisions the product supports: organizations and business units modeled, data sources used, and boards, finance teams or insurers that rely on its figures.
- Innovation — a risk problem solved in a new way, such as models that update from live security data, figures finance teams accept, or quantification fast enough to use in each budget decision.
- Impact — results for customers: more spending decisions based on risk figures, insurance terms improved, financial risk reduced, time to produce a board report cut. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.