Following the successful launch of the CYBER AWARDS last year, MITA-NCC is delighted to announce that it will be hosting another edition this year.
These prestigious awards aim to recognise and promote innovation and excellence in cybersecurity practices, while celebrating outstanding contributions across the National Cybersecurity Community. Through this initiative, we hope to inspire higher standards, encourage continuous improvement, and foster a strong culture of collaboration within the sector.
Award Categories
For the second edition of the CYBER AWARDS there will be six distinct categories:
- Cyber Leader of the Year
- Rising Star in Cybersecurity
- Top Performer in Cyber Skilling Programme
- Cyber Project Excellence in the Public Administration
- Cyber Project Excellence in the Private Sector
- Outstanding Community Contributor

Recognising leadership that drives cybersecurity excellence and innovation by:
- Honouring senior-level cybersecurity professionals
- Recognising extraordinary leadership and innovation
- Rewarding commitment to advancing cybersecurity excellence in Malta
To be considered for the Cyber Leader of the Year Award, a nominee must meet the following mandatory conditions:
- Be a registered member of the National Cybersecurity Community at the time of nomination.
- Holds a senior-level cybersecurity role or serve in an equivalent capacity within their organisation with the overall responsibility of the security function of that organization. Typical roles include (but not limited to):
- Chief Information Security Officer
- Director of Information Security
- Information Security Manager
- Information Security Officer
- In the absence of a dedicated information security role within the organisation, individuals with the following positions will also be considered as eligible:
- Chief Technology Officer
- Head of IT
- IT Manager
- Individuals holding mid-level roles who have the delegated responsibility for cybersecurity from top management shall also be considered as eligible (provided that the eligibility criteria detailed in this procedure is also satisfied).
- In possession of a minimum of twelve (12) consecutive months of experience in the designated cybersecurity role within an organisation. Any nominee who has not continuously held such a position for at least twelve (12) months during their career will be disqualified from consideration.
- Must have significantly contributed to improving the organisation’s cybersecurity resilience through measurable achievements. These include, but are not limited to:
- Implementing cybersecurity frameworks and best practices (Ex. ISO27001, NIST CSF, CIS Controls, DORA)
- Enhancing incident response and recovery times
- Reduction of risk exposure
- Development of security awareness programmes
- Adoption of innovative security technologies (Ex. AI-driven threat detection, Zero Trust architectures, cloud security enhancement, advanced SOC capabilities)
- Successful cybersecurity audits and certifications
- Any nominee who has a negative media check will be disqualified. Non-compliance or breach with the National Cybersecurity Community Code of Conduct will also lead to disqualification.
- Must have attended at least three (3) events organised by the MITA-NCC within the last twenty four (24) months to demonstrate active participation and engagement in cybersecurity discussion and initiatives.
- Any Nominee who has already received the same award within the past two (2) award cycles shall not be considered.
- A Nominee may only be shortlisted for one (1) award during the current award cycle. If shortlisted for multiple awards, the MITA-NCC shall retain the Nominee on the shortlist for the highest-priority award and remove them from all others, in line with the prioritisation below:Award Prioritisation (highest to lowest):
-
- Top Performer in Cyber Skilling Programme
- Rising Star in Cybersecurity
- Cyber Leader of the Year
- Outstanding Community Contributor
Nominations for the Cyber Leader of the Year Award are a fundamental part of recognising outstanding contributions within the cybersecurity community.
Who Can Submit a Nomination?
- Members and Non-Members of the National Cybersecurity Community may submit nominations. However, these Members must have or have had direct experience working with the nominee.
- Peer and colleague nominations are encouraged, ensuring that the achievements and contributions of cybersecurity professionals are recognised by those within the industry.
- Self-nominations are permitted, allowing individuals to put themselves forward for consideration. Individuals who are self-nominating must provide one (1) reference to substantiate their claims.
Nomination Restrictions
To uphold fairness, transparency, and prevent any conflicts of interest, the following nomination restrictions shall be enforced:
| Prohibited from Submitting Nominations | Prohibited from Being Nominated |
| · Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council· Members of the Award Committee (both Internal and External Members) |
· Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council · Members of the Award Committee (both Internal and External Members) |
The selection will be conducted through a structured qualitative-based evaluation, following a three-stage approach, emphasising leadership, innovation, and contributions to the cybersecurity community, as follows:.
- Nomination and Eligibility Verification
Individuals can self-nominate or be nominated by others (including members and non-members of the National Cybersecurity Community). Nominees must meet the eligibility criteria, ensuring that only qualified candidates progress to the next stage.
- Shortlisting of the top 3 nominees
Once nominations have been received by the MITA-NCC, a process of identifying and shortlisting the top 3 nominees will be performed by the Award Committee. The Award Committee will assess the strength of each nomination submission. Nominations must clearly articulate the nominee’s accomplishments, leadership, and contributions in line with the four evaluation themes: Leadership & Vision, Innovation, Risk Management Excellence, and Organisational Impact. Nominations that are vague, lack specificity, or do not provide sufficient detail will not be shortlisted.
- Final evaluation by the Award Committee
The Award Committee will conduct a thorough qualitative assessment of the shortlisted nominees based on the following key criteria. In this respect, nominators are requested to clearly address and demonstrate how the nominee meets each of the specified criteria within the supporting 500-word nomination statement, which forms part of the nomination form submission.
- Leadership and vision (25%)
- Demonstrated ability to lead and inspire teams in the implementation of effective cybersecurity strategies.
- Evidence of shaping the organisation’s security culture by fostering a proactive cybersecurity mindset among employees.
- Contributions towards cybersecurity governance, including advocacy for policies, frameworks, and strategic initiatives.
- Innovation in cybersecurity (25%)
- Adoption of new technologies, frameworks, or methodologies to enhance cybersecurity resilience.
- Development and implementation of novel approaches to solving cybersecurity challenges.
- Introduction of automation, AI-driven security solutions, or other innovative techniques to improve security operations.
- Risk management excellence (25%)
- Implementation of comprehensive risk management practices, ensuring proactive identification and mitigation of cyber threats.
- Establishment of effective risk governance structures and frameworks within the organization.
- Evidence of risk-based decision-making in policy implementation and resource allocation.
- Impact on organisational security (25%)
- Demonstrable improvements in the organization’s security metrics, such as:
- Reduction in security incidents or breach attempts.
- Improved incident response times.
- Enhanced compliance with regulatory standards.
- Alignment of cybersecurity initiatives with business objectives, ensuring security remains an enabler of business growth and continuity.
- Demonstrable improvements in the organization’s security metrics, such as:
The shortlisted nominees may be subject to sit for an interview with the Award Committee for the final evaluation for the award.
Celebrating emerging talent shaping the future of cybersecurity by:
- Honouring early-career cybersecurity professionals who entered the field within the past two years.
- Recognising recent graduates (with up to two years of experience) and career shifters transitioning from a different professional role into a cybersecurity-specific role.
- Including professionals who have gained entry through industry-recognised certifications, specialised courses, or structured training programmes instead of a traditional degree.
To be considered for the Rising Star in Cybersecurity Award, a nominee must meet the following mandatory conditions:
- Maltese national and/or Maltese resident employed by a company registered locally. Remote workers for foreign organisation are not eligible.
- In possession of not more than 2 years of professional experience in cybersecurity or a professional who has transitioned into cybersecurity from other fields within the past 2 years.
- Any nominee who has a negative media check will be disqualified.
- Any Nominee who has already received the same award within the past two (2) award cycles shall not be considered.
- A Nominee may only be shortlisted for one (1) award during the current award cycle. If shortlisted for multiple awards, MITA-NCC shall retain the Nominee on the shortlist for the highest-priority award and remove them from all others, in line with the prioritisation below:Award Prioritisation (highest to lowest):
-
- Top Performer in Cyber Skilling Programme
- Rising Star in Cybersecurity
- Cyber Leader of the Year
- Outstanding Community Contributor
Nominations for the Rising Star in Cybersecurity Award are a fundamental part of recognising and celebrating excellence within the Community.
Who Can Submit a Nomination?
- Members and Non-Members of the National Cybersecurity Community may submit nominations. However, they must have or have had direct experience working with the nominee.
- Peer and colleague nominations are encouraged, ensuring that the achievements and contributions of cybersecurity professionals are recognised by those within the industry.
- Self-nominations are permitted, allowing individuals to put themselves forward for consideration. Individuals who are self-nominating must provide one (1) reference from a professional within the cybersecurity industry to substantiate the nominee’s qualifications and achievements. This reference should provide insight into the nominee’s contributions and potential within the field.
Nomination Restrictions
To uphold fairness, transparency, and prevent any conflicts of interest, the following nomination restrictions shall be enforced:
| Prohibited from Submitting Nominations | Prohibited from Being Nominated |
| · Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council · Members of the Award Committee (both Internal and External Members) |
· Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council · Members of the Award Committee (both Internal and External Members) |
The selection will be conducted through a structured qualitative-based evaluation, following a three-stage approach, emphasising foundational skill development, adaptability, and engagement with learning opportunities in the field of cybersecurity.
- Nomination and Eligibility Verification
Individuals can self-nominate or be nominated by others (including members and non-members of the National Cybersecurity Community). Nominees must meet the eligibility criteria, ensuring that only qualified candidates progress to the next stage.
- Shortlisting of the top 3 nominees
Once nominations have been received by the MITA-NCC, a process of identifying and shortlisting the top 3 nominees will be performed the Award Committee. The Award Committee will assess the strength of each nomination submission. Nominations must clearly articulate the nominee’s accomplishments, leadership, and contributions in line with the three evaluation themes: Impact on Cybersecurity Advancement, Innovation and Novel Approaches, and Dedication to Cybersecurity Excellence. Nominations that are vague, lack specificity, or do not provide sufficient detail will not be shortlisted.
- Final Evaluation by the Award Committee
The Award Committee will conduct a thorough qualitative assessment of the shortlisted nominees based on the following key criteria. In this respect, nominators are requested to clearly address and demonstrate how the nominee meets each of the specified criteria within the supporting 500-word nomination statement, which forms part of the nomination form submission.
- Impact on Cybersecurity Advancement (40%)
- Demonstration of the nominee’s impact on advancing cybersecurity within their current or previous cybersecurity roles over the past two years.
- Contributions to the broader cybersecurity profession and community.
- Examples of positive, significant contributions to the cybersecurity field and the wider community, showcasing how the nominee has driven improvements and fostered a secure cyber world.
- Innovation and Novel Approaches (35%)
- Showcase of the nominee’s innovative accomplishments, including creative and forward-thinking solutions to complex cybersecurity challenges.
- Explanation of how these innovations led to fundamental changes within the organisation or industry, and their lasting impact on improving cybersecurity practices.
- Emphasis on the originality and effectiveness of the nominee’s approach to addressing emerging cybersecurity threats.
- Dedication to Cybersecurity Excellence (25%)
- Description of the nominee’s ongoing dedication to advancing the cybersecurity profession through seeking mentorship, knowledge-sharing, and leadership.
- Evaluation of how their dedication has inspired and influenced others, fostering a culture of continuous growth, collaboration, and cybersecurity excellence.
- Evidence of sustained efforts to elevate standards and encourage development within the cybersecurity community.
The shortlisted nominees may be subject to sit for an interview with the Award Committee for the final evaluation for the award.
The top two (2) nominees with the highest total scores shall be considered as the winners of the award.
Rewarding excellence in cybersecurity training and professional development by:
- Honouring the top performer from the last three rounds out of seven of the Security Operations Centre (SOC) Analyst Training under the MITA‑NCC Cybersecurity Skilling Programme.
- Recognising exceptional dedication to learning and excellence in both practical and theoretical sessions.
- Rewarding significant progress and demonstrated proficiency in cybersecurity.
Note: The award is exclusive to participants of the SOC Analyst Training Course under the MITA-NCC’s Cybersecurity Skilling Programme.
To be considered for the Top Performer in Cyber Skilling Programme Award, nominees must be:
- Participants from the last three rounds out of seven of the SOC Analyst Training Course and who have successfully passed the Advanced Course will become eligible for the award.
The selection process will follow a quantitative two-stage based approach emphasizing dedication to learning, excellence in both practical and theoretical sessions, and significant progress and proficiency in cybersecurity. The Award Committee will determine the top performer based entirely on quantitative data, specifically the scores achieved by participants throughout the SOC Analyst Training Course. This ensures that awards based on performance are decided objectively, maintaining fairness and transparency in the selection process.
- Eligibility Verification
Participants must meet the eligibility criteria, ensuring that only qualified candidates progress to the next stage.
- Final Evaluation by the Award Committee
The Award Committee will then conduct a thorough quantitative assessment of the eligible participants based on different criteria which are as follows:
- Participant’s Foundational Course Total (30%)
- Reflecting the participant’s overall performance in the Foundational Course based on the participant’s assessment scores.
- Participant’s Advanced Course Total (70%)
- Reflecting the participant’s overall performance in the Advanced Course based on the participant’s assessment scores.
Highlighting impactful cybersecurity projects in Malta’s public administration by:
- Celebrating projects that make a positive and meaningful contribution to cybersecurity at organisational, sectoral, or national level.
- Recognising innovative approaches that address cybersecurity challenges through sound planning and modern practices.
- Encouraging collaboration and setting a benchmark for stronger cybersecurity across Malta.
For the purposes of this Award:
-
- The term “Public Administration” shall bear the meaning assigned to it under the Public Administration Act (Chapter 595 of the Laws of Malta) and comprises two principal components:
- The Public Service — consists of Government Ministries, departments, and agencies staffed by public officers appointed under the Constitution of Malta and governed by the Public Service Commission.
- The Public Sector — encompasses a wider set of entities, including public entities, authorities, and bodies established by or under any law, as well as local councils, and foundations or other bodies in which the Government holds a controlling interest.
- A “Meaningful contribution” is one that demonstrates novelty, innovation, and a clear advancement in the Entity’s cybersecurity posture, going beyond routine or standard implementations.
- A ‘Cyber Project’ refers to any structured, cybersecurity-related project delivered by a Public Sector Entity operating in Malta. The term “project” refers to a defined undertaking with clear objectives, scope, and outcomes. Ongoing Cyber Projects may qualify provided they can demonstrate defined deliverables and measurable results within a defined period. There are no restrictions on domain, scale, or technology. The Cyber Project’s primary purpose is to strengthen cybersecurity posture, resilience, or capability. Standalone cybersecurity principles or individual security controls (e.g., implementing multi-factor authentication alone) do not constitute a sufficient basis for an eligible project.
- The term “Public Administration” shall bear the meaning assigned to it under the Public Administration Act (Chapter 595 of the Laws of Malta) and comprises two principal components:
To be considered for the Cyber project Excellence in the Public Administration Award, a project must meet the following mandatory conditions:
- Cybersecurity at the Core.
The Cyber Project must represent a genuine cybersecurity project which has the primary purpose to strengthen cybersecurity posture, resilience, or capability. The project must have been undertaken to strengthen the Entity’s own security posture, to benefit its sector, or to contribute to Malta’s national cybersecurity landscape. Standalone cybersecurity principles or individual security controls do not constitute a sufficient basis for eligibility.
- Innovation and Novelty
The Cyber Project must demonstrate clear qualities of innovation and novelty, representing a meaningful advancement in the Entity’s cybersecurity posture, to benefit its sector, or to contribute to Malta’s national cybersecurity landscape. Projects that are routine, require minimal effort, or represent standard baseline implementations will not be considered eligible. The project should reflect forward-thinking design, the adoption of modern practices, or the application of established approaches in a new and effective way.
- Demonstrable Impact
Must have been implemented within the last 12 months. It must demonstrate a measurable and evidenced impact in relation to one or more of the following cybersecurity domains:
- Governance, risk management, and compliance
- Threat detection, monitoring, and incident response
- Identity, access, and privileged access management
- Cloud security and secure architecture
- Data protection and encryption
- Security automation and orchestration
- Supply chain and third-party risk management
- Cybersecurity awareness, culture, and human factors
- Secure development practices and DevSecOps
- Business continuity and resilience
- Adoption of emerging technologies such as AI/ML-driven security, Zero Trust, SASE/SSE, quantum-readiness, or behavioural analytics
The project must demonstrate how it has contributed to strengthening the Entity’s cybersecurity posture, to benefit its sector, or to contribute to Malta’s national cybersecurity
landscape beyond standard or baseline practices.
- Strategic Relevance
The Cyber Project must demonstrate alignment with the Entity’s strategic priorities or broader business objectives. This ensures that the nominated projects are not isolated technical exercises but are embedded within the Entity’s organisational strategy.
- Framework Alignment
The project must demonstrate alignment with at least one recognised international cybersecurity framework or standard (e.g., ISO 27001, NIST CSF, CIS Controls, NIS2, ENISA best practices). Formal certification is not required.
- Endorsement by the Legal Representative
The nomination must be endorsed by the Entity’s Legal Representative (or equivalent authorised signatory), confirming that the information provided in the nomination is accurate, that the Entity authorises the submission, and that the Cyber Project described was genuinely undertaken by the Entity. Nominations submitted without this endorsement will not be considered.
Nominations for the Cyber Project Excellence in Public Administration Award are essential for recognising projects within Malta’s Public Administration that contribute to enhancing Malta’s national cybersecurity landscape through innovative approaches.
Who Can Submit a Nomination?
- Only self-nominations will be accepted.
- Nominations may be prepared by any representative of the Public Administration Entity who is directly involved in or responsible for the Cyber Project (e.g., project lead, project manager, cybersecurity team member, or equivalent).
- Self-nomination should provide detailed information about the Cyber Project, including which cybersecurity domains the project addresses, the approach taken, the outcomes achieved, its value to the organisation, and its contribution to cybersecurity more broadly.
- Nominations must be formally endorsed by the Entity’s Legal Representative (or equivalent authorised signatory). The endorsement confirms that the information provided is accurate, that the Entity authorises the submission, and that the Cyber Project described was genuinely undertaken by the Entity. Nominations submitted without this endorsement will not be considered eligible.
Nomination Restrictions
To uphold fairness, transparency, and prevent any conflicts of interest, the following nomination restrictions shall be enforced:
| Prohibited from Submitting Nominations | Prohibited from Being Nominated |
| · Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council · Members of the Award Committee (both Internal and External Members) |
· MITA and the MITA-NCC |
The selection will be conducted through a structured qualitative-based evaluation, following a phased approach as detailed below:
- Self-nomination of Cyber Projects
Public Administration Entities are invited to nominate their own Cyber Projects for the award. Nominations may be prepared and submitted by any representative of the Public Administration Entity who is directly involved in or responsible for the Cyber Project. However, the nomination must be formally endorsed by the Entity’s Legal Representative (or equivalent authorised signatory) to confirm the accuracy of the submission and authorise the Entity’s participation.
- Eligibility verification of nominations
Nominated projects must first meet a set of predefined eligibility criteria to ensure that only eligible projects move forward to the next stage. The full list of criteria, along with the nomination process, is outlined in the following section.
- Shortlisting of the Top 3 nominated Cyber Projects
Once nominations have been received by the MITA-NCC, a process of identifying and shortlisting the top 3 nominated Cyber Projects will be performed by the Award Committee. The Award Committee will assess the strength of each nomination submission. Nominations must clearly, specifically and sufficiently articulate the project’s alignment with the evaluation criteria: Innovation and Technical Excellence, Measurable Impact and Outcomes, Strategic Alignment and Organisational Value, and Contribution to the National Cybersecurity Ecosystem. Nominations that are vague, lack specificity, or do not provide sufficient detail will not be shortlisted.
- Final evaluation by the Award Committee
The Award Committee will conduct a thorough qualitative assessment of the shortlisted nominees based on the following key criteria. In this respect, nominators are requested to clearly address and demonstrate how the nominee meets each of the specified criteria within the supporting 500-word nomination statement, which forms part of the nomination form submission.
- Innovation and Technical Excellence (30%)
- The project should demonstrate thoughtful and effective approaches to addressing cybersecurity challenges.
- This may range from the adoption of established best practices applied in a new context to the introduction of novel technologies, architectures, or methodologies.
- Projects that demonstrate a significantly greater effort beyond routine or minimal-effort implementations will score higher under this criterion.
- The project must also demonstrate alignment with at least one recognised international cybersecurity framework or standard.
- Measurable Impact and Outcomes (30%)
- The project should deliver identifiable outcomes that contribute to the improvement of the Entity’s cybersecurity practices.
- Success should be supported by defined metrics, performance indicators, or demonstrable operational improvements.
- Strategic Alignment and Organisational Value (25%)
- The project should demonstrate alignment with the Entity’s strategic priorities, risk management approach, and broader business objectives.
- It should show how cybersecurity has been positioned as a valued component of the organisation’s operations.
- Contribution to the National Cybersecurity Ecosystem (15%)
- The project should demonstrate a positive contribution that extends beyond the Entity’s own environment.
- This may include knowledge sharing, sectoral collaboration, contribution to national capabilities, or activities that support the cybersecurity baseline in Malta.
- Where the project’s impact is primarily internal, the nomination should describe how the project sets a good example that could be adopted or followed by other entities.
Designated representatives from the Public Administration Entity for the shortlisted projects may be subject to sit for an interview with the Award Committee for the final evaluation for the award.
Recognising innovative cybersecurity projects driving private sector resilience by:
- Celebrating projects that make a positive and meaningful contribution to cybersecurity at organisational, sectoral, or national level.
- Recognising innovative approaches that address cybersecurity challenges through sound planning and modern practices.
- Encouraging collaboration and setting a benchmark for stronger cybersecurity across Malta’s private sector.
For the purposes of this Award:
-
- A Private Sector Entity refers to any organisation operating within the private sector in Malta, including but not limited to enterprises of all sizes across all industries and sectors.
- A “Meaningful contribution” is one that demonstrates novelty, innovation, and a clear advancement in the Entity’s cybersecurity posture, going beyond routine or standard implementations.
- A ‘Cyber Project’ refers to any structured, cybersecurity-related project delivered by a Private Sector Entity operating in Malta. The term “project” refers to a defined undertaking with clear objectives, scope, and outcomes. Ongoing Cyber Projects may qualify provided they can demonstrate defined deliverables and measurable results within a defined period. There are no restrictions on domain, scale, or technology. The Cyber Project’s primary purpose is to strengthen cybersecurity posture, resilience, or capability. Standalone cybersecurity principles or individual security controls (e.g., implementing multi-factor authentication alone) do not constitute a sufficient basis for an eligible project.
To be considered for the Cyber project Excellence in the Private Sector Award, a project must meet the following mandatory conditions:
- Registered Membership of the National Cybersecurity Community
The nominated Entity must be a registered member of the National Cybersecurity Community at the time of nomination. Membership must be active, valid and in good standing.
- Cybersecurity at the Core
The Cyber Project must represent a genuine cybersecurity project which has the primary purpose to strengthen cybersecurity posture, resilience, or capability. The project must have been undertaken to strengthen the Entity’s own security posture, to benefit its sector, or to contribute to Malta’s national cybersecurity landscape. Standalone cybersecurity principles or individual security controls do not constitute a sufficient basis for eligibility.
- Innovation and Novelty
The Cyber Project must demonstrate clear qualities of innovation and novelty, representing a meaningful advancement in the Entity’s cybersecurity posture, to benefit its sector, or to contribute to Malta’s national cybersecurity landscape. Projects that are routine, require minimal effort, or represent standard baseline implementations will not be considered eligible. The project should reflect forward-thinking design, the adoption of modern practices, or the application of established approaches in a new and effective way.
- Demonstrable Impact
The nominated Cyber Project must have been implemented within the last 12 months. It must demonstrate a measurable and evidenced impact in relation to one or more of the following cybersecurity domains:
- Governance, risk management, and compliance
- Threat detection, monitoring, and incident response
- Identity, access, and privileged access management
- Cloud security and secure architecture
- Data protection and encryption
- Security automation and orchestration
- Supply chain and third-party risk management
- Cybersecurity awareness, culture, and human factors
- Secure development practices and DevSecOps
- Business continuity and resilience
- Adoption of emerging technologies such as AI/ML-driven security, Zero Trust, SASE/SSE, quantum-readiness, or behavioural analytics
The project must demonstrate how it has contributed to strengthening the Entity’s cybersecurity posture, to benefit its sector, or to contribute to Malta’s national cybersecurity landscape beyond standard or baseline practices.
- Strategic Relevance
The Cyber Project must demonstrate alignment with the Entity’s strategic priorities or broader business objectives. This ensures that the nominated projects are not isolated technical exercises but are embedded within the Entity’s organisational strategy.
- Framework Alignment
The project must demonstrate alignment with at least one recognised international cybersecurity framework or standard (e.g., ISO 27001, NIST CSF, CIS Controls, NIS2, ENISA best practices). Formal certification is not required.
- Endorsement by the Legal Representative
The nomination must be endorsed by the Entity’s Legal Representative (or equivalent authorised signatory), confirming that the information provided in the nomination is accurate, that the Entity authorises the submission, and that the Cyber Project described was genuinely undertaken by the Entity. Nominations submitted without this endorsement will not be considered.
Nominations for the Cyber Project Excellence in the Private Sector Award are essential for recognising Cyber Projects within the Private Sector that contribute to cybersecurity through meaningful and constructive approaches.
Who Can Submit a Nomination?
- Only self-nominations will be accepted.
- Nominations may be prepared by any representative of the Private Sector Entity who is directly involved in or responsible for the Cyber Project (e.g., project lead, project manager, cybersecurity team member, or equivalent).
- Self-nomination should provide detailed information about the Cyber Project, including which cybersecurity domains the project addresses, the approach taken, the outcomes achieved, its value to the organisation, and its contribution to cybersecurity more broadly.
- Nominations must be formally endorsed by the Entity’s Legal Representative (or equivalent authorised signatory). The endorsement confirms that the information provided is accurate, that the Entity authorises the submission, and that the Cyber Project described was genuinely undertaken by the Entity. Nominations submitted without this endorsement will not be considered eligible.
Nomination Restrictions
To uphold fairness, transparency, and prevent any conflicts of interest, the following nomination restrictions shall be enforced:
| Prohibited from Submitting Nominations | Prohibited from Being Nominated |
| · Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council · Members of the Award Committee (both Internal and External Members) |
· MITA and the MITA-NCC |
The selection will be conducted through a structured qualitative evaluation methodology, following a phased approach as detailed below:
- Self-Nomination of Cyber Projects
Private Sector Entities are invited to nominate their own Cyber Projects for the award. Nominations may be prepared and submitted by any representative of the Private Sector Entity who is directly involved in or responsible for the Cyber Project. However, the nomination must be formally endorsed by the Entity’s Legal Representative (or equivalent authorised signatory) to confirm the accuracy of the submission and authorise the Entity’s participation.
- Eligibility Verification of Nominations
Nominated projects must first meet a set of predefined eligibility criteria to ensure that only eligible projects move forward to the next stage. The full list of criteria, along with the nomination process, is outlined in the following section.
- Shortlisting of the Top 3 Nominated Cyber Projects
Once nominations have been received by the MITA-NCC, a process of identifying and shortlisting the top 3 nominated Cyber Projects will be performed by the Award Committee. The Award Committee will assess the strength of each nomination submission. Nominations must clearly, specifically and sufficiently articulate the project’s alignment with the evaluation criteria: Innovation and Technical Excellence, Measurable Impact and Outcomes, Strategic Alignment and Organisational Value, and Contribution to the National Cybersecurity Ecosystem. Nominations that are vague, lack specificity, or do not provide sufficient detail will not be shortlisted.
- Final Evaluation by the Award Committee
The Award Committee will conduct a thorough qualitative assessment of the shortlisted nominees based on the following key criteria. In this respect, nominators are requested to clearly address and demonstrate how the nominee meets each of the specified criteria within the supporting 500-word nomination statement, which forms part of the nomination form submission.
- Innovation and Technical Excellence (30%)
- The project should demonstrate thoughtful and effective approaches to addressing cybersecurity challenges.
- This may range from the adoption of established best practices applied in a new context to the introduction of novel technologies, architectures, or methodologies.
- Projects that demonstrate a significantly greater effort beyond routine or minimal-effort implementations will score higher under this criterion.
- The project must also demonstrate alignment with at least one recognised international cybersecurity framework or standard.
- Measurable Impact and Outcomes (30%)
- The project should deliver identifiable outcomes that contribute to the improvement of the Entity’s cybersecurity practices.
- Success should be supported by defined metrics, performance indicators, or demonstrable operational improvements.
- Strategic Alignment and Organisational Value (25%)
- The project should demonstrate alignment with the Entity’s strategic priorities, risk management approach, and broader business objectives.
- It should show how cybersecurity has been positioned as a valued component of the organisation’s operations.
- Contribution to the National Cybersecurity Ecosystem (15%)
- The project should demonstrate a positive contribution that extends beyond the Entity’s own environment.
- This may include knowledge sharing, sectoral collaboration, contribution to national capabilities, or activities that support the cybersecurity baseline in Malta.
- Where the project’s impact is primarily internal, the nomination should describe how the project sets a good example that could be adopted or followed by other entities.
Designated representatives from the Public Administration Entity for the shortlisted projects may be subject to sit for an interview with the Award Committee for the final evaluation for the award.
Celebrating individuals strengthening the cybersecurity community through active engagement by:
- Recognising individuals who demonstrate outstanding and consistent engagement with the National Cybersecurity Community and its activities throughout the calendar year.
- Celebrating Community Members who go beyond passive membership through active participation and contribution.
- Highlighting individuals who regularly attend MITA-NCC events, express interest to contribute, and maintain a visible and positive presence within the cybersecurity community.
To be considered for the Outstanding Community Contributor Award, a candidate must meet the following mandatory conditions:
- The Candidate must be a Registered Member of the National Cybersecurity Community at the time the evaluation period closes. Only Individuals who are formally registered as Community Members are eligible for this award.
- The Candidate must have attended at least two (2) CYBER Breakfasts organised by the MITA-NCC within the calendar year. This ensures that every Candidate has shown a minimum level of consistent engagement with the community’s main events.
- Any Candidate who has a negative media check will be disqualified. Any Candidate found to be in breach of the National Cybersecurity Community Code of Conduct will also be automatically disqualified.
- A Candidate may only be shortlisted for one award during the current award cycle. If shortlisted for multiple awards, MITA-NCC shall retain the Nominee on the shortlist for the highest-priority award and remove them from all others, in line with the prioritisation below:Award Prioritisation (highest to lowest):
-
- Top Performer in Cyber Skilling Programme
- Rising Star in Cybersecurity
- Cyber Leader of the Year
- Outstanding Community Contributor
- Award Candidature
Candidates are identified by the MITA-NCC internal records, as follows.- Attendance records – Registration and attendance records for CYBER Breakfast, CYBER Talk, and CYBER ROOT events organised by the MITA-NCC.
- Recorded expressions of interest to contribute – Expression of Interest forms or other recorded submissions through which the Candidate expressed interest in contributing to MITA-NCC events.
- Qualitative observations of active participation – Examples of active participation may include contributing to discussions, asking relevant questions, sharing useful feedback, supporting group activities, or leading working group discussions during an event. These examples may be considered during the qualitative assessment even where there is no formal speaker role.
- No-show records – Cases where a Candidate registered and confirmed attendance at MITA-NCC event but did not attend without giving prior notice.
The qualitative assessment of active participation and overall community presence is carried out later by the Award Committee during the final evaluation stage.
- Nomination Restrictions
To ensure fairness, prevent conflicts of interest, and maintain the credibility of the award, the following Individuals are not allowed to be considered for this award:
| Prohibited from Being Considered |
| · Staff Members of MITA and the MITA-NCC
· Members of the Consultation Council · Members of the Award Committee (both Internal and External Members) |
Selection will be conducted through a structured, hybrid evaluation process to ensure a fair and transparent assessment.
- Eligibility Verification
Candidates are identified through MITA-NCC internal records. Each Candidate must meet all of the eligibility criteria listed under the Eligibility Criteria for Candidates section before they can be considered for the next stage. The full list of criteria and the process for candidate identification and evaluation are described in the sections that follow.
- Shortlisting of the Top 3 Candidates
Once Candidates have been identified by the MITA-NCC, the top 3 Candidates will be shortlisted based on how many CYBER Breakfast events they attended during the previous calendar year.
- Final Evaluation by Award Committee
The Award Committee will carry out a detailed assessment of the shortlisted Candidates. The final evaluation is based on the following five (5) criteria:
- CYBER Breakfast Attendance (35%)
- Assesses the Candidate’s attendance at CYBER Breakfast during the evaluation period.
- CYBER Talk Attendance (10%)
- Assesses the Candidate’s attendance at CYBER Talks during the evaluation period.
- CYBER ROOT Attendance (15%)
- Assesses whether the Candidate attended CYBER ROOT during the evaluation period.
- Recorded Expression of Interest to Contribute (20%)
- Assesses whether the Candidate submitted recorded expressions of interest to contribute to MITA-NCC events during the evaluation period
- Active Participation and Strong Positive Community Presence (20%)
- Assessment of the Candidate’s overall visibility and constructive engagement during MITA-NCC events and within the community during the evaluation period. Such include contributions to discussions, relevant questions, useful feedback, support during group activities, or leading working group discussions during an event.
The shortlisted individuals may be subject to sit for an interview with the Award Committee for the final evaluation for the award.






