About the Human Risk Management category
What belongs in this category
The Human Risk Management category covers products that find out which people and behaviors create the most security risk and act on it. Typical entries combine signals from email, identity, endpoint and training tools into a risk score for each person. They send timely nudges or targeted training when someone takes a risk, and show security teams and managers how human risk changes over time.
Courses and phishing simulations on their own fit Security Awareness Training; a product that does both starts in the category for its main job and can enter both. Detecting deliberate or careless misuse of data by insiders fits Insider Risk Management, and attacks that impersonate people by voice or video fit Social Engineering and Deepfake Defense.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the people the product covers: employees measured, signals and tools connected, organizations using it, and leaders who receive its reports.
- Innovation — a human risk problem solved in a new way, such as risk scores people trust, interventions at the moment of risk, or proof that behavior has changed rather than only that training was completed.
- Impact — results for customers: fewer risky actions, fewer incidents linked to people, time spent on training cut, reporting of threats increased. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.