← Back to award categories

Chief Information Security Officer (CISO) of the Year

Criteria

About this award A Chief Information Security Officer (CISO) is an executive responsible for managing and overseeing the information security and cybersecurity strategy of an organisation. The CISO plays a crucial role in ensuring the confidentiality, integrity and availability of the organisation's information assets. This award recognises a CISO who has demonstrated outstanding leadership and measurable impact in that role. Who may apply Individuals serving as CISO (or in an equivalent senior information-security leadership role) at their organisation. Each application submitted for a different industry sector is treated as a separate application and is considered independently. What the judges assess - Leadership and vision: how you translate the organisation's mission, vision and values into concrete cybersecurity action that engages the workforce, key suppliers, partners and customers, and how you build a robust and resilient security posture. - Commitment to cybersecurity: how your actions demonstrate a sustained personal commitment, now and into the future, aligned with the organisation's mission. - Standards and tooling: your record of implementing security standards and frameworks, and of deploying security tools across the organisation. - Qualifications and experience: relevant post-qualification degrees and professional certifications in Governance, Risk & Compliance (GRC), privacy, information systems or cybersecurity, together with your commercial experience in the role. - Contribution to the community: how you have contributed to the wider GRC, privacy, information systems or cybersecurity community - for example through articles, presentations, workshops, industry forums, open-source work or mentoring. - Awards and recognition: independent recognition of your work in the field. Evidence Applicants provide supporting documentation for their role, qualifications, experience and achievements, and may be asked to present originals to the judging panel at interview. Detailed responses should be specific and concrete; generalised answers generated by AI engines are not considered.