Here is a brief overview of the award process: The awards program first selects a group of finalists for each award category (after nominations and voting periods have ended).

The finalists are selected based on two main criteria: (1) the strength of the nomination (demonstrated leadership, excellence and results in cybersecurity, depending on the specific category and the supporting information provided); and (2) the popular votes and comments received from the cybersecurity community.

Award winners are determined by the strength of the nomination and the provided information. The popular vote will only be considered if two or more nomination are tied for an award (in other words, a weaker nomination with more votes will not outperform a stronger nomination with fewer votes).

The winners in each category are selected from the group of shortlisted finalists using the same criteria outlined above. Finalists and winners are announced on the Cybersecurity Excellence Awards website.