TRUST AWARDSBest Advanced Persistent Threat (APT) Protection
An advanced persistent threat (APT) product and/or service provides real-time detection of and protection against intruders gaining access to an enterprise environment to stealthily extract high-value information assets from targeted organizations in manufacturing, financial, national defense and other industries.
Check Point Software Technologies for SandBlastCisco for Advanced Mialware ProtectionCrowdStrike for FalconProofpoint for Targeted Attack Protection (TAP) for EmailSonicWALL for Capture Advanced Threat Protection
Best Mobile Security Solution
More and more employees are using smaller and smaller devices with loads of applications to access corporate data. Some examples include iPhones, iPads, Android devices, BlackBerries and more. Products in this category deal with not only a collapsing perimeter, but also consumer-owned and -controlled devices being used to get at corporate resources. At a minimum, these devices likely will require strong endpoint security, point-to-point encryption and more. This is a broad category. If your product is used to secure this type of small device/handheld, it may fit. Security can be for data at rest in the device itself, secure access to data in the enterprise, and encryption for data in motion between the enterprise and the device. It also includes anything from hard disk encryption solutions and tools that track lost mobile devices to USB/thumb drive security solutions.
KoolSpan for TrustCallOptioLabs for OptioCoreVASCO Data Security International for DIGIPASS for AppsVMware for Workspace ONEZimperium for Mobile Threat Protection
Best Vulnerability Management Solution
These products perform network/device vulnerability assessment and/or penetration testing. They may use active or passive testing, and are either hardware- or software-based solutions that report vulnerabilities using some standard format/reference.
Barracuda for Vulnerability ManagerBlack Duck for HubCore Security for Core Vulnerability InsightRiskSense for RiskSense PlatformSynack for Crowd Security IntelligenceEXCELLENCE AWARDSBest SME Security Solution
This includes tools and services from all product sectors specifically designed to meet the requirements of small- to midsized businesses. The winning solution will have been a leading solution during the last two years, having helped to strengthen the IT security industry's continued evolution.
eSentire for Managed Detection and ReponseDigiCert for CertCentralNetsurion for remote-managed securityVersasec for vSEC:CMS 4.5Webroot for SecureAnywhere® Business Endpoint ProtectionTRUST AWARDSBest Cloud Computing Security Solution
These technologies are deployed to protect data and/or applications in a cloud environment. They may also protect the cloud computing infrastructure itself. Cloud computing security concerns are numerous for both providers and their customers – and include security and privacy worries, compliance issues and legal/contractual problems. Solutions or services in this category can provide for the protection of data or applications in the cloud, protection for traffic flowing between companies and their cloud service providers, policy management and encryption capabilities, privileged user access and controls or more.
Gemalto for SafeNet ProtectVImperva for SkyfenceThreat Stack for Cloud Security PlatformVera for Vera SecurityVirtru for VirtruBest Fraud Prevention
Given the reliance on the internet by consumers from all walks of life to conduct any number of retail, banking or other transactions, fraud prevention solutions have become critical. Tools nominated in this category strive to minimize online privacy and security problems that could lead to fraud and, therefore, impact both the company and the customer. Still an evolving area of information security, there are a slew of solutions and services available that could qualify for consideration in this category – from authentication and enhanced encryption solutions to secure web communication or malware-detection offerings.
Distil Networks for Distil NetworksPindrop for PhoneprintProofpoint for Email Fraud DefenseRSA Security for RSA Adaptive Authentication for eCommerceTerbium Labs for MatchlightBest Multifactor Solution
Products here provide enhanced security to end-users or devices by offering credentials for access to an authenticator or authentication server. Software and hardware that specializes in the biometric authentication of users is also included here. These solutions may use a tangible device (something you have) for authentication and knowledge (something you know) for authentication. For biometrics, the solution provides identification and authentication using any of the following methods: finger/thumb print/retinal scan/voice recognition/hand/palm geometry/facial recognition.
CensorNet for SMS PasscodeEasy Solutions for DetectID with Biometric AuthenticationGemalto for SafeNet Authentication Serviceiovation for Customer AuthenticationRSA Security for SecurID Access
Best Web Application Solution
Application firewalls inspect the body of packets and restrict access to legitimate application traffic while blocking access to other parts of the operating system. They typically use deep-packet inspection, provide logging and reporting, block real-time traffic, provide alerting capabilities and auto-update features, perform web caching, provide content filtering, offer web-based access to reporting and/or logging, protect traffic from reaching the underlying operating system, and filter application traffic to only legitimate requests.Barracuda for Web Application FirewallContrast Security for Contrast EnterpriseF5 Networks for F5 BIG-IP Application Security Manager (ASM) and F5 Silverline Web Application FirewallImperva for Web Application Firewall (WAF)Prevoty for Runtime Application SecurityBest Security Team
Contenders should only include teams from end-user companies that have executed and are managing exceptional and strong security programs, which they have built from virtually non-existent ones. The team should have successfully established and implemented an integral and/or innovative/cutting-edge component of their security program, and should have spearheaded various areas of support for its success, such as strong end-user awareness training, good configuration management, and more.City of Los AngelesFairfax County
MasterCardPasona NAEXCELLENCE AWARDSBest Enterprise Security Solution
This includes tools and services from all product sectors specifically designed to meet the requirements of large enterprises. The winning solution will have been a leading solution during the last two years, having helped to strengthen the IT security industry's continued evolution.
Carbon Black for Cb ResponseCrowdStrike for FalconCylance for CylancePROTECTLogRhythm for Security Intelligence and Analytics PlatformSplunk for Enterprise Security
Best Computer Forensic Solution
Products in this category fall into two sub-categories: network and media. The network tools must be exclusively intended for forensic analysis of network events/data. If the product is a SIEM with forensic capabilities, it should be placed in the SIEM category. Media tools cover just about all other non-network forensic tools, including those tools that collect data from media over the network and live forensic tools. This also includes specialized forensic tools that are not intended to analyze network data.Forcepoint for SureView Insideer ThreatGuidance Software for EnCase Forensic and EnCase Endpoint InvestigatorInfocyte for HUNTLogRhythm for Network MonitorSymantec for Blue Coat Security Analytics Platform
Best Identity Management Solution
Products in this category address the identity management lifecycle in an enterprise environment, including password management, user provisioning and enterprise-access management.
CA Technologies for CA Identity SuiteCentrify for Identity ServiceCyberArk for Privileged Account Security SolutionSecureAuth for SecureAuth IdPSSH Communications Security for Universal SSH Key Manager (UKM)
Best NAC Solution
Protecting host-based computing platforms and network resources from threats that are brought in by employees, vendors, contractors and guests involves a numbers of solutions and policies. From anti-virus and firewalls to IDS/IPS solutions, the products in this category run the gamut. However, to control access to network resources at the endpoint, the tools companies often rely on are network access control (NAC) products. These solutions can be used to validate the existence of certain security measures and validate that they are properly configured and up to date. They also can validate the existence of current OS patches and can be used to manage the complexity associated with overseeing permissions and authorizations for various groups of users. Most will integrate with a common directory structure, some will provide local authentication capabilities, while others will match something on the endpoint – such as an agent or MAC address – to the authentication before allowing access to the protected network resources.Cisco for Identity Services Engine (ISE)F5 Networks for F5 BIG-IP Access Policy Manager (APM)ForeScout for CounterACTHewlett Packard Enterprise for Aruba ClearPassIntelliGO Networks for Network Access ControlBest Behavior Analytics/Enterprise Threat Detection
A still somewhat-emerging category, these products focus on detecting insider threats, targeted attacks and other fraudulent activities by examining human behaviors, sussing out patterns that are then analyzed through the application of algorithms and statistical analysis to detect anomalies that may indicate threats of loss or compromise to organizations' critical data. Offerings in this space are also referred to as so-called “user behavior analytics” products by analyst company Gartner.
CrowdStrike for FalconImperva for CounterbreachRapid7 for InsightIDR- Escape Alert Fatigue, Relentlessly Hunt ThreatsSentinelOne for Endpoint Protection ProgramSplunk for UBA 3.0 (User Behavior Analytics)EXCELLENCE AWARDSBest Regulatory Compliance Solution
Nominated solutions should help organizations comply with specific regulatory requirements demanded of companies in the health care, retail, educational, financial services and government markets. Solutions should help customers meet mandates noted in such legislation as HIPAA, SOX, GLBA, FISMA, or in guidelines noted by the likes of the FFIEC or the PCI Security Standards Council. Nominees must be prepared to offer references of customers who are engaged in, or have already completed, real, fully fledged deployments, and should be ready to address specific questions posed to them during the judging process.
Forcepoint for TRITON AP-DATANetwrix Corporation for Netwrix AuditorNextLabs for Information Risk and Compliance Suite for SAPProofpoint for Information Protection, Archive, and ComplianceSecurly for SecurlyBest Data Loss Prevention (DLP) SolutionProducts in this category include those that help organizations safeguard their intellectual property and customers' critical data persistently – inside and outside the company. Network-based and endpoint data lossprevention products will be considered. Products should prevent data from unauthorized exit from the network, or protect data on the endpoint –whether the endpoint is connected to a network or not. Products typically are policy-driven and should include scanning of all data, regardless of protocol or application leaving the network, and/or keep track of peripherals, such as removable storage and attached to the endpoint – reporting that inventory to a central location or administrator. All entrants should have the capability of being managed by a centralized administrator. Those products considered part of this category include: network DLP products, which are typically gateways; those products protecting only endpoints; and hybrid products that operate at both the gateway to the network and at the endpoint. Specifically for endpoint DLP, traffic should be monitored and encryption should be available.Bitglass for Data Leakage Prevention for the Cloud and Mobile EraDigital Guardian for Data Loss PreventionForcepoint for AP-DATA & AP-ENDPOINTSafetica North America for Safetica 7Spirion for Sensitive Data ManagerBest Risk/Policy Management Solution
These products measure, analyze and report risk, as well as enforce and update configuration policies within the enterprise, including but not limited to network, encryption, software and hardware devices. Contenders' products should offer a reporting format that covers the frameworks of multiple regulatory requirements, such as Sarbanes-Oxley, Gramm-Leach-Bliley and other acts and industry regulations. As well, this feature should be network-centric, providing reporting to a central administrator and allowing for companies to centrally manage the product.Bay Dynamics for Risk FabricSolarWinds for Network Configuration ManagerTenable Network Security for SecurityCenter Continuous View™Tufin for Network Orchestration SuiteVenafi for Trust Protection PlatformEXCELLENCE AWARDSBest Customer Service
Support as well as service of products and assistance sold are critical components of any contract. For many organizations that seek out help from information security vendors and service providers, the aid they receive from customer service representatives is crucial to the deployment, ongoing maintenance and successful running of the technologies they've bought and to which they have entrusted their businesses and sensitive data. For this new category, we're looking for vendor and service providers that offer stellar support and service – the staff that fulfilled its contracts and maybe even goes a little beyond them to ensure that organizations and their businesses are safe and sound against the many threats launched by today's savvy cybercriminals.Avecto for DefendpointBarracuda for Customer SupportID Watchdog for PlatinumProofpointWebroot for SecureAnywherePROFESSIONAL CATEGORIESBest Professional Certification Program
Programs are defined as professional industry groups offering certifications to IT security professionals wishing to receive educational experience and credentials. Entrants can include organizations in the industry granting certifications for the training and knowledge they provide.
ISACA - Certified Information Systems Auditor (CISA)SACA - Certified Information Security Manager (CISM)International Association of Privacy Professionals (IAPP)F5 NetworksFortinet
Best IT Security-related Training Program
This category is targeting companies and organizations that provide end-user awareness training programs for organizations looking to ensure that its employees are knowledgeable and supportive of the IT security and risk management plans. It also is considering those training companies or organizations that provide programs for end-user organizations' IT security professionals to help them better address components of their IT security and risk management plans, such as secure coding, vulnerability management, incident response/computer forensics, business continuity/disaster recovery, etc.
Global Learning Systems for Security Awareness Training ProgramKnowBe4 for Kevin Mitnick Security Awareness Training and Integrated Simulated Phishing PlatformPhishMe for SimulatorThe Security Awareness Company for IT Security Awareness Training Content & Program ManagementWombat Security Technologies for Security Education Platform
Best Database Security SolutionProtecting its critical information is the number one priority for many organizations. An integral component of this is to secure corporate databases. Entries here should include solutions that help customers safeguard mission-critical database environments. Features of these offerings can run the gamut – from encryption to access management to logging and monitoring. Be sure to explain the specific ways the solution protects these corporate crown jewels and the features present to ensure exposures are mitigated.
HexaTier for Unified Database Security and Compliance SolutionImperva for SecureSphereNetwrix Corporation for Netwrix AuditorProtegrity for Database ProtectorVormetric for Data Security PlatformBest Managed Security Service
These offerings provide a turnkey approach to an organization's primary technical security needs. These offerings can either be a co-located device at the client organization facility, or can be a completely outsourced solution where the application to be protected would reside at the vendor's data center.
Digital Guardian for Managed Security ProgramRadware for Attack Mitigation ServiceRapid7 for Analytic ResponseSecureWorks for Managed Security ServicesTrustwave for Managed Security Services
Best SIEM Solution
Security information and event management (SIEM) tools are used to collect, aggregate and correlate log data for unified analysis and reporting. Typically, these tools can take logs from a large number of sources, normalize them and build a database that allows detailed reporting and analysis. While forensic analysis of network events may be a feature of a SIEM, it is not the only feature, nor is it the primary focus of the tool.Hewlett Packard Enterprise for ArcSight Enterprise Security Manager (ESM) and ArcSight Data Platform (ADP)LogRhythm for Security Intelligence and Analytics PlatformRapid7 for InsightIDR- The SIEM You Always WantedRSA for NetWitness SuiteSplunk for Enterprise Security 4.5 (ES) with Adaptive ResponseEXCELLENCE AWARDSBest Security Company
Nominees should be the tried-and-true, longer-standing companies which have been offering products and services to customers for at least three years. Nominations can come from all sectors. Areas that will be accounted for in the judging process include: product line strength, customer base, customer service/support, research and development, company growth and solvency, innovation and more.
CrowdStrikeCyberArkDarktraceThycoticZscaler
Rookie Security Company of the Year
Nominated companies should be new to the IT security field – offering an initial, strong, flagship product that is within two years of its initial release. Nominees can come from any IT security product/service sector and will be continuing efforts in further product development, customer growth and overall fiscal and employee growth. Please note in your submission the launch date of your initial flagship offering. If this initial offering or any of your other products have been on the market for longer than two years, please do not submit a nomination in this category.Contrast SecurityHexaditeSafeBreachSkyport SystemsTerbium LabsEmail Security Solution Email security addresses the ability to exchange email messages with assurance, as well as the ability to filter email messages based on content, source or other criteria. Solutions should ensure the privacy of sensitive messages, limit the repercussions of email forgery, and manage other aspects of safeguarding email within the organization. These products are enterprise-centric and should have, but are not required to have, some form of centralized management. They may include spam filters, junk mail filters, malware filters, unauthorized content (sometimes called “extrusion protection” or “data leakage protection”), phishing and other types of undesirable content. However, these are not simply anti-spam filters. These email security products should be evaluated on their effectiveness, manageability, non-intrusiveness, ease of use and other factors that impact the implementation of this type of product in the enterprise environment. They typically provide features such as email encryption, digital signatures, automatic shredding of messages and attachments, and more.
Cisco for Email Security SolutionIRONSCALES for IronTrapsMimecast for Secure Email GatewayProofpoint for Email ProtectionTrustwave for Secure Email Gateway
Best UTM Security Solution
Given the continuous convergence of the market, we've decided to retire some categories this year and integrate a number of individual categories from previous years into this unified threat management (UTM) category. The former categories – Best Enterprise Firewall, Best Intrusion Detection System/Intrusion Prevention System Product, Best IPsec/SSL VPN, Best Anti-Malware Gateway and Best Web Content Management – are now integrated here. As formerly, contenders in the UTM security category should take an “in-depth” defense approach. Entrants should have an integrated, multifunction endpoint/UTM offering – not a single-function product. These products typically aggregate a wide variety of threat data into a single unified tool. Many organizations define those threat categories as anti-malware, content management, IDS/IPS and spam filtering, along with firewall/VPN. Entrants should meet this minimum functionality and can include anti-malware gateway, anti-spam gateway and anti-phishing gateway, as well as provide web content filtering for laptops, desktops and, optionally, servers that blocks or filters objectionable websites and content.5nine Software for Cloud SecurityEntensys for UserGate UTMSonicWALL for TZ Firewall SeriesSophos for UTMWatchGuard Technologies for FireBox T70EXCELLENCE AWARDSBest Emerging Technology
What cutting-edge technologies with some innovative capabilities are bursting onto the scene to address the newest information security needs facing organizations? This category welcomes both new vendors and old pros looking to provide products and services that look to help shape the future by addressing fast-evolving threats through the creation of these types of offerings. Solutions should have just hit the market in the last six to 12 months, and entries should have some customers available who can act as references. The company should also have an office in North America and provide ready support and service to customers in this country.
Cylance for CylancePROTECTExabeam for User Behavior Intelligence PlatformFlashpoint for Flashpoint PlatformJavelin Networks for Javelin ZeroMoveTrusona for Cloud Identity SuiteCSO of the Year
Contenders should include those who work for end-user companies only. No vendor CSOs will be considered. Nominees are the cream of the crop, having spearheaded a viable IT security program, gained the support of their company's executive leaders, as well as their colleagues, and helped – through their indefatigable efforts – to propel the CISO/CSO position to a footing of influence within their organization and the corporate world as a whole. Specific projects and undertakings, as well as over-arching security programs to propel these various goals, should be noted. Nominees should be prepared to answer further questions during the judging process, offer at least two references, and be open to holding confidential interviews with members of the SC Magazine editorial team, if warranted.Connie Berrera, CISO at Jackson Health SystemTim Callahan, Senior Vice President, Global Chief Security Officer at AflacEmily Heath, Global CISO at AECOMPritesh Parekh, VP, Chief Security Officer at ZuoraMyrna Soto, SVP, Global CISO at Comcast Cable
An advanced persistent threat (APT) product and/or service provides real-time detection of and protection against intruders gaining access to an enterprise environment to stealthily extract high-value information assets from targeted organizations in manufacturing, financial, national defense and other industries.
Check Point Software Technologies for SandBlastCisco for Advanced Mialware ProtectionCrowdStrike for FalconProofpoint for Targeted Attack Protection (TAP) for EmailSonicWALL for Capture Advanced Threat Protection
Best Mobile Security Solution
More and more employees are using smaller and smaller devices with loads of applications to access corporate data. Some examples include iPhones, iPads, Android devices, BlackBerries and more. Products in this category deal with not only a collapsing perimeter, but also consumer-owned and -controlled devices being used to get at corporate resources. At a minimum, these devices likely will require strong endpoint security, point-to-point encryption and more. This is a broad category. If your product is used to secure this type of small device/handheld, it may fit. Security can be for data at rest in the device itself, secure access to data in the enterprise, and encryption for data in motion between the enterprise and the device. It also includes anything from hard disk encryption solutions and tools that track lost mobile devices to USB/thumb drive security solutions.
KoolSpan for TrustCallOptioLabs for OptioCoreVASCO Data Security International for DIGIPASS for AppsVMware for Workspace ONEZimperium for Mobile Threat Protection
Best Vulnerability Management Solution
These products perform network/device vulnerability assessment and/or penetration testing. They may use active or passive testing, and are either hardware- or software-based solutions that report vulnerabilities using some standard format/reference.
Barracuda for Vulnerability ManagerBlack Duck for HubCore Security for Core Vulnerability InsightRiskSense for RiskSense PlatformSynack for Crowd Security IntelligenceEXCELLENCE AWARDSBest SME Security Solution
This includes tools and services from all product sectors specifically designed to meet the requirements of small- to midsized businesses. The winning solution will have been a leading solution during the last two years, having helped to strengthen the IT security industry's continued evolution.
eSentire for Managed Detection and ReponseDigiCert for CertCentralNetsurion for remote-managed securityVersasec for vSEC:CMS 4.5Webroot for SecureAnywhere® Business Endpoint ProtectionTRUST AWARDSBest Cloud Computing Security Solution
These technologies are deployed to protect data and/or applications in a cloud environment. They may also protect the cloud computing infrastructure itself. Cloud computing security concerns are numerous for both providers and their customers – and include security and privacy worries, compliance issues and legal/contractual problems. Solutions or services in this category can provide for the protection of data or applications in the cloud, protection for traffic flowing between companies and their cloud service providers, policy management and encryption capabilities, privileged user access and controls or more.
Gemalto for SafeNet ProtectVImperva for SkyfenceThreat Stack for Cloud Security PlatformVera for Vera SecurityVirtru for VirtruBest Fraud Prevention
Given the reliance on the internet by consumers from all walks of life to conduct any number of retail, banking or other transactions, fraud prevention solutions have become critical. Tools nominated in this category strive to minimize online privacy and security problems that could lead to fraud and, therefore, impact both the company and the customer. Still an evolving area of information security, there are a slew of solutions and services available that could qualify for consideration in this category – from authentication and enhanced encryption solutions to secure web communication or malware-detection offerings.
Distil Networks for Distil NetworksPindrop for PhoneprintProofpoint for Email Fraud DefenseRSA Security for RSA Adaptive Authentication for eCommerceTerbium Labs for MatchlightBest Multifactor Solution
Products here provide enhanced security to end-users or devices by offering credentials for access to an authenticator or authentication server. Software and hardware that specializes in the biometric authentication of users is also included here. These solutions may use a tangible device (something you have) for authentication and knowledge (something you know) for authentication. For biometrics, the solution provides identification and authentication using any of the following methods: finger/thumb print/retinal scan/voice recognition/hand/palm geometry/facial recognition.
CensorNet for SMS PasscodeEasy Solutions for DetectID with Biometric AuthenticationGemalto for SafeNet Authentication Serviceiovation for Customer AuthenticationRSA Security for SecurID Access
Best Web Application Solution
Application firewalls inspect the body of packets and restrict access to legitimate application traffic while blocking access to other parts of the operating system. They typically use deep-packet inspection, provide logging and reporting, block real-time traffic, provide alerting capabilities and auto-update features, perform web caching, provide content filtering, offer web-based access to reporting and/or logging, protect traffic from reaching the underlying operating system, and filter application traffic to only legitimate requests.Barracuda for Web Application FirewallContrast Security for Contrast EnterpriseF5 Networks for F5 BIG-IP Application Security Manager (ASM) and F5 Silverline Web Application FirewallImperva for Web Application Firewall (WAF)Prevoty for Runtime Application SecurityBest Security Team
Contenders should only include teams from end-user companies that have executed and are managing exceptional and strong security programs, which they have built from virtually non-existent ones. The team should have successfully established and implemented an integral and/or innovative/cutting-edge component of their security program, and should have spearheaded various areas of support for its success, such as strong end-user awareness training, good configuration management, and more.City of Los AngelesFairfax County
MasterCardPasona NAEXCELLENCE AWARDSBest Enterprise Security Solution
This includes tools and services from all product sectors specifically designed to meet the requirements of large enterprises. The winning solution will have been a leading solution during the last two years, having helped to strengthen the IT security industry's continued evolution.
Carbon Black for Cb ResponseCrowdStrike for FalconCylance for CylancePROTECTLogRhythm for Security Intelligence and Analytics PlatformSplunk for Enterprise Security
Best Computer Forensic Solution
Products in this category fall into two sub-categories: network and media. The network tools must be exclusively intended for forensic analysis of network events/data. If the product is a SIEM with forensic capabilities, it should be placed in the SIEM category. Media tools cover just about all other non-network forensic tools, including those tools that collect data from media over the network and live forensic tools. This also includes specialized forensic tools that are not intended to analyze network data.Forcepoint for SureView Insideer ThreatGuidance Software for EnCase Forensic and EnCase Endpoint InvestigatorInfocyte for HUNTLogRhythm for Network MonitorSymantec for Blue Coat Security Analytics Platform
Best Identity Management Solution
Products in this category address the identity management lifecycle in an enterprise environment, including password management, user provisioning and enterprise-access management.
CA Technologies for CA Identity SuiteCentrify for Identity ServiceCyberArk for Privileged Account Security SolutionSecureAuth for SecureAuth IdPSSH Communications Security for Universal SSH Key Manager (UKM)
Best NAC Solution
Protecting host-based computing platforms and network resources from threats that are brought in by employees, vendors, contractors and guests involves a numbers of solutions and policies. From anti-virus and firewalls to IDS/IPS solutions, the products in this category run the gamut. However, to control access to network resources at the endpoint, the tools companies often rely on are network access control (NAC) products. These solutions can be used to validate the existence of certain security measures and validate that they are properly configured and up to date. They also can validate the existence of current OS patches and can be used to manage the complexity associated with overseeing permissions and authorizations for various groups of users. Most will integrate with a common directory structure, some will provide local authentication capabilities, while others will match something on the endpoint – such as an agent or MAC address – to the authentication before allowing access to the protected network resources.Cisco for Identity Services Engine (ISE)F5 Networks for F5 BIG-IP Access Policy Manager (APM)ForeScout for CounterACTHewlett Packard Enterprise for Aruba ClearPassIntelliGO Networks for Network Access ControlBest Behavior Analytics/Enterprise Threat Detection
A still somewhat-emerging category, these products focus on detecting insider threats, targeted attacks and other fraudulent activities by examining human behaviors, sussing out patterns that are then analyzed through the application of algorithms and statistical analysis to detect anomalies that may indicate threats of loss or compromise to organizations' critical data. Offerings in this space are also referred to as so-called “user behavior analytics” products by analyst company Gartner.
CrowdStrike for FalconImperva for CounterbreachRapid7 for InsightIDR- Escape Alert Fatigue, Relentlessly Hunt ThreatsSentinelOne for Endpoint Protection ProgramSplunk for UBA 3.0 (User Behavior Analytics)EXCELLENCE AWARDSBest Regulatory Compliance Solution
Nominated solutions should help organizations comply with specific regulatory requirements demanded of companies in the health care, retail, educational, financial services and government markets. Solutions should help customers meet mandates noted in such legislation as HIPAA, SOX, GLBA, FISMA, or in guidelines noted by the likes of the FFIEC or the PCI Security Standards Council. Nominees must be prepared to offer references of customers who are engaged in, or have already completed, real, fully fledged deployments, and should be ready to address specific questions posed to them during the judging process.
Forcepoint for TRITON AP-DATANetwrix Corporation for Netwrix AuditorNextLabs for Information Risk and Compliance Suite for SAPProofpoint for Information Protection, Archive, and ComplianceSecurly for SecurlyBest Data Loss Prevention (DLP) SolutionProducts in this category include those that help organizations safeguard their intellectual property and customers' critical data persistently – inside and outside the company. Network-based and endpoint data lossprevention products will be considered. Products should prevent data from unauthorized exit from the network, or protect data on the endpoint –whether the endpoint is connected to a network or not. Products typically are policy-driven and should include scanning of all data, regardless of protocol or application leaving the network, and/or keep track of peripherals, such as removable storage and attached to the endpoint – reporting that inventory to a central location or administrator. All entrants should have the capability of being managed by a centralized administrator. Those products considered part of this category include: network DLP products, which are typically gateways; those products protecting only endpoints; and hybrid products that operate at both the gateway to the network and at the endpoint. Specifically for endpoint DLP, traffic should be monitored and encryption should be available.Bitglass for Data Leakage Prevention for the Cloud and Mobile EraDigital Guardian for Data Loss PreventionForcepoint for AP-DATA & AP-ENDPOINTSafetica North America for Safetica 7Spirion for Sensitive Data ManagerBest Risk/Policy Management Solution
These products measure, analyze and report risk, as well as enforce and update configuration policies within the enterprise, including but not limited to network, encryption, software and hardware devices. Contenders' products should offer a reporting format that covers the frameworks of multiple regulatory requirements, such as Sarbanes-Oxley, Gramm-Leach-Bliley and other acts and industry regulations. As well, this feature should be network-centric, providing reporting to a central administrator and allowing for companies to centrally manage the product.Bay Dynamics for Risk FabricSolarWinds for Network Configuration ManagerTenable Network Security for SecurityCenter Continuous View™Tufin for Network Orchestration SuiteVenafi for Trust Protection PlatformEXCELLENCE AWARDSBest Customer Service
Support as well as service of products and assistance sold are critical components of any contract. For many organizations that seek out help from information security vendors and service providers, the aid they receive from customer service representatives is crucial to the deployment, ongoing maintenance and successful running of the technologies they've bought and to which they have entrusted their businesses and sensitive data. For this new category, we're looking for vendor and service providers that offer stellar support and service – the staff that fulfilled its contracts and maybe even goes a little beyond them to ensure that organizations and their businesses are safe and sound against the many threats launched by today's savvy cybercriminals.Avecto for DefendpointBarracuda for Customer SupportID Watchdog for PlatinumProofpointWebroot for SecureAnywherePROFESSIONAL CATEGORIESBest Professional Certification Program
Programs are defined as professional industry groups offering certifications to IT security professionals wishing to receive educational experience and credentials. Entrants can include organizations in the industry granting certifications for the training and knowledge they provide.
ISACA - Certified Information Systems Auditor (CISA)SACA - Certified Information Security Manager (CISM)International Association of Privacy Professionals (IAPP)F5 NetworksFortinet
Best IT Security-related Training Program
This category is targeting companies and organizations that provide end-user awareness training programs for organizations looking to ensure that its employees are knowledgeable and supportive of the IT security and risk management plans. It also is considering those training companies or organizations that provide programs for end-user organizations' IT security professionals to help them better address components of their IT security and risk management plans, such as secure coding, vulnerability management, incident response/computer forensics, business continuity/disaster recovery, etc.
Global Learning Systems for Security Awareness Training ProgramKnowBe4 for Kevin Mitnick Security Awareness Training and Integrated Simulated Phishing PlatformPhishMe for SimulatorThe Security Awareness Company for IT Security Awareness Training Content & Program ManagementWombat Security Technologies for Security Education Platform
Best Database Security SolutionProtecting its critical information is the number one priority for many organizations. An integral component of this is to secure corporate databases. Entries here should include solutions that help customers safeguard mission-critical database environments. Features of these offerings can run the gamut – from encryption to access management to logging and monitoring. Be sure to explain the specific ways the solution protects these corporate crown jewels and the features present to ensure exposures are mitigated.
HexaTier for Unified Database Security and Compliance SolutionImperva for SecureSphereNetwrix Corporation for Netwrix AuditorProtegrity for Database ProtectorVormetric for Data Security PlatformBest Managed Security Service
These offerings provide a turnkey approach to an organization's primary technical security needs. These offerings can either be a co-located device at the client organization facility, or can be a completely outsourced solution where the application to be protected would reside at the vendor's data center.
Digital Guardian for Managed Security ProgramRadware for Attack Mitigation ServiceRapid7 for Analytic ResponseSecureWorks for Managed Security ServicesTrustwave for Managed Security Services
Best SIEM Solution
Security information and event management (SIEM) tools are used to collect, aggregate and correlate log data for unified analysis and reporting. Typically, these tools can take logs from a large number of sources, normalize them and build a database that allows detailed reporting and analysis. While forensic analysis of network events may be a feature of a SIEM, it is not the only feature, nor is it the primary focus of the tool.Hewlett Packard Enterprise for ArcSight Enterprise Security Manager (ESM) and ArcSight Data Platform (ADP)LogRhythm for Security Intelligence and Analytics PlatformRapid7 for InsightIDR- The SIEM You Always WantedRSA for NetWitness SuiteSplunk for Enterprise Security 4.5 (ES) with Adaptive ResponseEXCELLENCE AWARDSBest Security Company
Nominees should be the tried-and-true, longer-standing companies which have been offering products and services to customers for at least three years. Nominations can come from all sectors. Areas that will be accounted for in the judging process include: product line strength, customer base, customer service/support, research and development, company growth and solvency, innovation and more.
CrowdStrikeCyberArkDarktraceThycoticZscaler
Rookie Security Company of the Year
Nominated companies should be new to the IT security field – offering an initial, strong, flagship product that is within two years of its initial release. Nominees can come from any IT security product/service sector and will be continuing efforts in further product development, customer growth and overall fiscal and employee growth. Please note in your submission the launch date of your initial flagship offering. If this initial offering or any of your other products have been on the market for longer than two years, please do not submit a nomination in this category.Contrast SecurityHexaditeSafeBreachSkyport SystemsTerbium LabsEmail Security Solution Email security addresses the ability to exchange email messages with assurance, as well as the ability to filter email messages based on content, source or other criteria. Solutions should ensure the privacy of sensitive messages, limit the repercussions of email forgery, and manage other aspects of safeguarding email within the organization. These products are enterprise-centric and should have, but are not required to have, some form of centralized management. They may include spam filters, junk mail filters, malware filters, unauthorized content (sometimes called “extrusion protection” or “data leakage protection”), phishing and other types of undesirable content. However, these are not simply anti-spam filters. These email security products should be evaluated on their effectiveness, manageability, non-intrusiveness, ease of use and other factors that impact the implementation of this type of product in the enterprise environment. They typically provide features such as email encryption, digital signatures, automatic shredding of messages and attachments, and more.
Cisco for Email Security SolutionIRONSCALES for IronTrapsMimecast for Secure Email GatewayProofpoint for Email ProtectionTrustwave for Secure Email Gateway
Best UTM Security Solution
Given the continuous convergence of the market, we've decided to retire some categories this year and integrate a number of individual categories from previous years into this unified threat management (UTM) category. The former categories – Best Enterprise Firewall, Best Intrusion Detection System/Intrusion Prevention System Product, Best IPsec/SSL VPN, Best Anti-Malware Gateway and Best Web Content Management – are now integrated here. As formerly, contenders in the UTM security category should take an “in-depth” defense approach. Entrants should have an integrated, multifunction endpoint/UTM offering – not a single-function product. These products typically aggregate a wide variety of threat data into a single unified tool. Many organizations define those threat categories as anti-malware, content management, IDS/IPS and spam filtering, along with firewall/VPN. Entrants should meet this minimum functionality and can include anti-malware gateway, anti-spam gateway and anti-phishing gateway, as well as provide web content filtering for laptops, desktops and, optionally, servers that blocks or filters objectionable websites and content.5nine Software for Cloud SecurityEntensys for UserGate UTMSonicWALL for TZ Firewall SeriesSophos for UTMWatchGuard Technologies for FireBox T70EXCELLENCE AWARDSBest Emerging Technology
What cutting-edge technologies with some innovative capabilities are bursting onto the scene to address the newest information security needs facing organizations? This category welcomes both new vendors and old pros looking to provide products and services that look to help shape the future by addressing fast-evolving threats through the creation of these types of offerings. Solutions should have just hit the market in the last six to 12 months, and entries should have some customers available who can act as references. The company should also have an office in North America and provide ready support and service to customers in this country.
Cylance for CylancePROTECTExabeam for User Behavior Intelligence PlatformFlashpoint for Flashpoint PlatformJavelin Networks for Javelin ZeroMoveTrusona for Cloud Identity SuiteCSO of the Year
Contenders should include those who work for end-user companies only. No vendor CSOs will be considered. Nominees are the cream of the crop, having spearheaded a viable IT security program, gained the support of their company's executive leaders, as well as their colleagues, and helped – through their indefatigable efforts – to propel the CISO/CSO position to a footing of influence within their organization and the corporate world as a whole. Specific projects and undertakings, as well as over-arching security programs to propel these various goals, should be noted. Nominees should be prepared to answer further questions during the judging process, offer at least two references, and be open to holding confidential interviews with members of the SC Magazine editorial team, if warranted.Connie Berrera, CISO at Jackson Health SystemTim Callahan, Senior Vice President, Global Chief Security Officer at AflacEmily Heath, Global CISO at AECOMPritesh Parekh, VP, Chief Security Officer at ZuoraMyrna Soto, SVP, Global CISO at Comcast Cable
