
Cyber Advocate
Not yet granted
For a non-technical employee who champions secure behavior and encourages others to take cybersecurity seriously.
29 monthly awards across three categories, plus 9 quarterly podium awards with Gold, Silver and Bronze tiers.
Recognize specific behaviors. Each monthly award is worth 1 leaderboard point.
Championing security and good tech habits far beyond the IST team. Β· 8 awards

Not yet granted
For a non-technical employee who champions secure behavior and encourages others to take cybersecurity seriously.

Not yet granted
Awarded to someone who took major steps in improving their understanding or behavior regarding security practices.

Granted 1 time
Given to someone who presented or shared security concepts in a clear, engaging, or creative way (e.g., lunch & learn, blog, Slack post).

Not yet granted
A nod to someone who operates behind the scenes, solving problems before they surface or working nights/weekends to ensure stability and security.

Granted 1 time
Awarded to someone who completes all security trainings early and engages actively in security awareness campaigns or events.

Not yet granted
Recognizes an employee who balances efficiency with security β taking initiative to solve problems without bypassing controls.

Not yet granted
For someone who previously had tech/security struggles but made significant improvement over time.

Not yet granted
Recognizes someone who calmly handles unexpected IT/security issues and helps others without panic or blame.
Gold, Silver and Bronze for the quarterβs top advocates. Points: 5 Β· 3 Β· 2
Incident response, uptime, policy, projects, and vulnerability defense. Β· 5 awards

Granted 2 times
For playing a critical role in managing, escalating, or preventing a security or IT incident.
Coordinated or led incident response with speed, clarity, and accountability. Prevented larger impact through decisive action.
Responded quickly to escalate a threat or outage. Provided essential logs, context, or access.
Participated in incident recovery or containment with a positive, collaborative attitude.

Granted 1 time
For maintaining high uptime, performance, and support standards.
Zero critical incidents + 100% SLA compliance across systems or support requests.
Minimal degradation or ticket escalations. Helped optimize systems or support processes.
Consistently met performance targets and reduced tech debt or recurring issues.

Not yet granted
For helping draft, refine, or champion a policy or standard.
Authored or led implementation of a new IT/Security policy or standard that's now in use company-wide.
Contributed heavily to a policy revision or awareness effort that improved adoption.
Shared meaningful feedback or use cases that helped improve how a policy is written or enforced.

Granted 1 time
For driving or securing a major IT/Security initiative that benefited the business.
Led or executed a mission-critical IT/security project on time, with impact and visibility.
Played a core role in implementation or rollout of a technical or compliance-related initiative.
Provided key support or behind-the-scenes contributions that made the project successful.

Granted 3 times
For spotting, escalating, or patching a high-risk vulnerability before it was exploited.
Detected or resolved a critical vulnerability (zero-day or severe config issue) before it could be abused.
Flagged a high-risk item through routine review or hygiene check and followed up until resolved.
Collaborated to test or verify patch/fix rollout or helped validate system security.
Responsible technology use, remote security, compliance, and access hygiene. Β· 4 awards

Not yet granted
For showing excellence in using technology and data responsibly.
Clean security and compliance record. Advocates for responsible use of tech and helps others improve their habits.
Follows policies, never misses a training, and practices consistent digital hygiene.
No issues or warnings, demonstrates positive behavior in day-to-day digital interactions.

Granted 1 time
For demonstrating secure and efficient behavior in remote/hybrid settings.
Uses VPN, secure networks, appropriate tools, and maintains productivity + data security while remote.
Completes security training early, protects devices, and avoids risky behavior while working remotely.
Follows remote work policy, flags access issues, and promotes smart work-from-anywhere habits.

Granted 3 times
For supporting audits, risk reviews, or department-wide compliance alignment.
Provided critical evidence, support, or documentation that helped us pass a compliance checkpoint or audit.
Helped team or department complete controls on time, contributed feedback, or resolved gaps.
Participated in awareness sessions or helped others meet training/compliance expectations.

Granted 1 time
For cleaning up outdated accounts, permissions, or shared access within their team or department.
Audited and removed stale access across tools or shared drives, reducing unnecessary risk.
Flagged overprovisioned roles or permissions and worked with IST to right-size them.
Took initiative to review access and ensure the principle of least privilege is followed.