
Security Champion of the Month
Not yet granted
Recognizes someone who actively promotes security awareness, reports suspicious activity, or supports secure practices in the organization.
29 monthly awards across three categories, plus 9 quarterly podium awards with Gold, Silver and Bronze tiers.
Recognize specific behaviors. Each monthly award is worth 1 leaderboard point.
Spotting threats, speaking up, and making secure the default. Β· 11 awards

Not yet granted
Recognizes someone who actively promotes security awareness, reports suspicious activity, or supports secure practices in the organization.

Granted 1 time
Awarded to the employee who most effectively identifies and reports phishing or suspicious emails.

Granted 1 time
For team members who report valid issues or anomalies that relate to system bugs, access misconfigurations, software glitches, or odd technical behavior that could lead to a larger problem if ignored.

Granted 1 time
Given to someone who demonstrates excellence in following and upholding compliance controls, policies, or audit readiness activities (e.g., ISO 27001, SOC 2).

Granted 1 time
Celebrates developers or engineers who lead secure development efforts, remediate SAST/DAST findings quickly, or contribute to secure coding standards.

Not yet granted
Awarded for identifying and articulating a risk before it materialized β especially if they prevented an incident.

Not yet granted
Recognizes someone who advocates or implements strong IAM principles β like pruning excessive access or implementing just-in-time (JIT) permissions.

Not yet granted
Recognizes someone who consistently follows security best practices (e.g., strong passwords, secure file sharing, locking screens).

Granted 1 time
Celebrates an individual who helped prevent a security issue by speaking up, reporting something odd, or asking before taking risky action.

Not yet granted
Given to someone who demonstrates strong understanding and application of company policies (e.g., acceptable use, data handling, remote access).

Granted 1 time
For users who use collaboration tools (e.g., Slack, Teams, SharePoint) securely and appropriately, protecting data while staying productive.
Gold, Silver and Bronze for the quarterβs top advocates. Points: 5 Β· 3 Β· 2
Incident response, uptime, policy, projects, and vulnerability defense. Β· 5 awards

Granted 2 times
For playing a critical role in managing, escalating, or preventing a security or IT incident.
Coordinated or led incident response with speed, clarity, and accountability. Prevented larger impact through decisive action.
Responded quickly to escalate a threat or outage. Provided essential logs, context, or access.
Participated in incident recovery or containment with a positive, collaborative attitude.

Granted 1 time
For maintaining high uptime, performance, and support standards.
Zero critical incidents + 100% SLA compliance across systems or support requests.
Minimal degradation or ticket escalations. Helped optimize systems or support processes.
Consistently met performance targets and reduced tech debt or recurring issues.

Not yet granted
For helping draft, refine, or champion a policy or standard.
Authored or led implementation of a new IT/Security policy or standard that's now in use company-wide.
Contributed heavily to a policy revision or awareness effort that improved adoption.
Shared meaningful feedback or use cases that helped improve how a policy is written or enforced.

Granted 1 time
For driving or securing a major IT/Security initiative that benefited the business.
Led or executed a mission-critical IT/security project on time, with impact and visibility.
Played a core role in implementation or rollout of a technical or compliance-related initiative.
Provided key support or behind-the-scenes contributions that made the project successful.

Granted 3 times
For spotting, escalating, or patching a high-risk vulnerability before it was exploited.
Detected or resolved a critical vulnerability (zero-day or severe config issue) before it could be abused.
Flagged a high-risk item through routine review or hygiene check and followed up until resolved.
Collaborated to test or verify patch/fix rollout or helped validate system security.
Responsible technology use, remote security, compliance, and access hygiene. Β· 4 awards

Not yet granted
For showing excellence in using technology and data responsibly.
Clean security and compliance record. Advocates for responsible use of tech and helps others improve their habits.
Follows policies, never misses a training, and practices consistent digital hygiene.
No issues or warnings, demonstrates positive behavior in day-to-day digital interactions.

Granted 1 time
For demonstrating secure and efficient behavior in remote/hybrid settings.
Uses VPN, secure networks, appropriate tools, and maintains productivity + data security while remote.
Completes security training early, protects devices, and avoids risky behavior while working remotely.
Follows remote work policy, flags access issues, and promotes smart work-from-anywhere habits.

Granted 3 times
For supporting audits, risk reviews, or department-wide compliance alignment.
Provided critical evidence, support, or documentation that helped us pass a compliance checkpoint or audit.
Helped team or department complete controls on time, contributed feedback, or resolved gaps.
Participated in awareness sessions or helped others meet training/compliance expectations.

Granted 1 time
For cleaning up outdated accounts, permissions, or shared access within their team or department.
Audited and removed stale access across tools or shared drives, reducing unnecessary risk.
Flagged overprovisioned roles or permissions and worked with IST to right-size them.
Took initiative to review access and ensure the principle of least privilege is followed.