About the Incident Response category
What belongs in this category
The Incident Response category covers products and services that help an organization handle a security incident from first report to recovery. Products include platforms for coordinating response, tracking tasks and evidence, and meeting breach notification deadlines. Services include retainers and response teams that investigate, contain attackers, remove them and help restore systems, often working alongside legal and insurance partners.
Collecting and analyzing evidence fits Digital Forensics, and restoring systems and data after an attack fits Ransomware Recovery or Cyber Resilience. Continuous detection and response delivered as a service fits Managed Detection and Response (MDR), and case management for the SOC's daily alert flow fits Security Operations.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the incidents the product or service has handled: number and severity of cases, sectors served, response times, and customers on retainer.
- Innovation — a response problem solved in a new way, such as containing attacks faster, coordinating legal, insurance and technical teams in one place, or recovering systems sooner.
- Impact — results for customers: time to contain, time to recover, scope of damage limited, regulatory deadlines met. Give figures from real cases, anonymized if needed.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.