Eligibility
Who can apply.
Individuals or teams. Each applicant must identify their own contribution.
- Security architecture, detection, response, assurance, privacy engineering or secure-development practice.
- A fix, control or programme whose effect on risk can be described.
Achievement recognised
What the entry must show.
This category recognises work that improves the security, resilience or trustworthiness of a technology system. It is for demonstrated defensive or assurance work, not for a security claim without evidence.
Evidence required
- The risk or weakness addressed, without publishing an exploit or sensitive configuration.
- The control, design or practice the applicant contributed.
- How it was tested, reviewed or observed in operation.
- The change in exposure, response time, assurance or user trust, stated as far as the evidence allows.
- Do not include employer secrets, confidential third-party material, or personal data about other people.
Assessment criteria
How the entry is read.
These are the published criteria for this category. They are not a claim that an independent judging panel is already appointed.
Technical quality and rigour30%
Whether the control or method is technically sound and proportionate to the risk described.
Originality and problem-solving25%
A specific improvement on the previous state, rather than a restatement of general security advice.
Demonstrated impact25%
Evidence that risk, assurance or response actually changed.
Evidence and clarity of the applicant’s contribution20%
A clear account of the applicant’s role, with sensitive detail withheld rather than invented.
Process and fee
From application to a decision.
01Application
Submit the application for this category on this website, naming the work and your own contribution. Submitting the form does not charge the applicant. Fee-payment instructions will follow before evaluation begins.
02Evidence review
The submission is checked for whether the evidence can be considered. Incomplete, confidential or unsupported claims may need further material, or may be set aside.
03Evaluation
The entry is read against the published criteria and weights for its category. That reading is what the US$200 evaluation fee covers, when collection is open.
04Decision
An award is made only when the standard is met. A category may have one recipient, more than one, or none. A decision that no award is made is a completed assessment.
Entry evaluation fee: US$200 per entry, per category.
The US$200 evaluation fee covers the administration and assessment of your entry. Payment does not guarantee shortlisting or an award. Entries may be unsuccessful following assessment.
The evaluation fee is not refundable solely because an entry is unsuccessful, subject to applicable law and the published cancellation and refund terms.
Each category is a separate assessed entry. Entering more than one category requires its own application and its own US$200 evaluation fee.
SASACO membership is a separate programme. Membership does not influence award scores, shortlisting or selection, and it does not guarantee recognition.
The detailed cancellation and refund terms are not published yet, so live charges stay off. A successful payment, when collection is enabled, means the entry is paid for assessment. It does not grant an award.
Integrity
- Submit truthful information, and only work you have authority to submit.
- Disclose any relevant conflict, including a close connection with SASACO.
- Confidential or unsupported claims may need further evidence before they can be considered.
- A category may have no recipient if the published standard is not met.
- This is a SASACO-administered recognition programme. It does not confer professional accreditation, employment, funding, immigration outcomes or indexed publication.