QSai LLC, a Texas limited liability company doing business as CISO Marketplace, [registered business address], Texas [ZIP] ("Sponsor"). Contact: giveaway@cyberaware.win. Sponsor is solely responsible for this Promotion.
This Promotion (the "Promotion") consists of three separate components, each with its own rules below:
The Promotion begins October 1, 2026 at 12:00:00 AM Central Time ("CT") and ends October 31, 2026 at 11:59:59 PM CT (the "Promotion Period"). Sponsor's server clock is the official timekeeper. Weekly "drops" run Oct 1–7, Oct 8–14, Oct 15–21 and Oct 22–31.
5.1 Free entry. Visit cyberaware.win, sign in with or create a free CISO Marketplace account (which verifies your email address by a one-time link sent to it), and complete the entry form (name, state, age confirmation and acceptance of these Rules). One (1) verified account = one (1) entry. Creating an account is free and requires no purchase. Limit one free entry per person and per email address for the Promotion Period. Entries by script, macro, bot or any automated means, and entries with disposable or invalid addresses, are void.
5.2 Bonus entries. Confirmed entrants may earn additional entries as follows. Bonus entries do not improve the odds of any single entry; they add entries to the pool. Every number of bonus entries available through a purchase is also available without one (Free Bonus Entry Request below).
| Action | Bonus entries | Limit |
|---|---|---|
| A friend enters via your personal share link | +1 per friend | 25 |
| Redeem a weekly Episode Code from the CISO Insights podcast | +2 (Weeks 1–3), +3 (Week 4) | One redemption per code per entrant |
| Community submission approved by Sponsor (photo / video / featured) | +1 / +2 / +5 | 50 in total |
| Free Bonus Entry Request: once signed in and entered, answer a short security-awareness question in your own words at cyberaware.win. No purchase or payment required. | +25 | Once per entrant |
| Reach Shop Rewards Tier 1 / 2 / 3 / 4 (Section 6) | +1 / +5 / +10 / +25 | Highest tier reached only, not cumulative |
5.3 Alternate method of entry (no internet). Hand-print your full name, mailing address, email address and date of birth on a 3×5 card and mail it in a stamped envelope to: CISO Marketplace CAM Giveaway, [mailing address]. Mail-in entries must be postmarked by October 28, 2026 and received by November 3, 2026. Limit one mail-in entry per person. Mail-in entries receive one (1) entry and are eligible for all Sweepstakes prizes on the same basis as online entries.
5.4 Prizes and Community Unlock. The Grand Prize, one (1) NitroPhone 5a (ARV [$___]), is awarded regardless of the number of entrants. The following prizes are added to the drawing only if the total number of confirmed entrants reaches the stated milestone during the Promotion Period. A live count is shown at cyberaware.win.
| Confirmed entrants | Prizes added to the drawing | Approx. retail value (each) |
|---|---|---|
| 250 | Five (5) bundles: Nitrokey Start + USB data blocker | [$___] |
| 500 | Three (3) Nitrokey 3 (USB-A or USB-C, by stock) | [$___] |
| 750 | Three (3) three-month CISO Marketplace Practitioner memberships, and one (1) bundle: Nitrokey Passkey + USB data blocker | [$___] / [$___] |
| 1,000 | One (1) NovaCustom NUC | [$___] |
If a milestone is not reached, its prizes are not awarded in the Sweepstakes; Sponsor may, at its sole discretion, award them through the Skill Contest or a future promotion. Winners are drawn in the order: Grand Prize first, then unlock prizes from highest to lowest value. Limit one Sweepstakes prize per person.
5.5 Drawing. On November 5, 2026, Sponsor will select potential winners at random from all eligible confirmed entries, weighted by entries, using a seeded random process. The seed and the anonymized entry export are retained for twelve (12) months as the audit record. Odds of winning depend on the total number of eligible entries received.
5.6 Winner notification. Potential winners are notified by email within three (3) business days of the drawing and must respond, and return a signed Affidavit of Eligibility, Liability Release and (where lawful) Publicity Release, plus an IRS Form W-9 where requested, within seven (7) days of notification. Failure to respond, an undeliverable notice, or non-compliance with these Rules results in disqualification and selection of an alternate winner. Limit one Sweepstakes prize per person or household.
6.1 How it works. Purchases made during the Promotion Period at ciso.diy, cyberpolicy.shop, generatepolicy.com, securitybydesign.shop, securitygadgets.shop and my.cisomarketplace.com, made with the same email address, are summed on a net basis (after discounts and refunds, before tax and shipping). Hardware purchased at securitygadgets.shop counts toward your Tier at full price; the CYBERAWARE26 discount does not apply to it (Section 6.5). Your cumulative net spend determines your Tier. Each Tier's reward is guaranteed, not a chance to win, and is not limited by stock. Rewards are cumulative up the tiers.
| Tier | Cumulative net spend | Guaranteed reward | Approx. retail value |
|---|---|---|---|
| 1 | $25 – $99.99 | One policy template or ciso.diy mini-kit (digital) | [$___] |
| 2 | $100 – $249.99 | Tier 1 + one SecurityByDesign t-shirt or awareness poster | [$___] |
| 3 | $250 – $499.99 | Tier 2 + $50 in CISO Marketplace credits | $50 + Tier 2 |
| 4 | $500+ | Tier 3 + three (3) months of CISO Marketplace Practitioner membership | [$___] |
6.2 Credits and membership. Credits and membership time are applied to the CISO Marketplace account that uses the purchasing email, have no cash value, are non-transferable, and follow the CISO Marketplace terms. Credits expire twelve (12) months after they are issued.
6.3 Refunds. A refunded or charged-back purchase removes the corresponding amount from your cumulative spend. Rewards for a Tier you no longer qualify for are withdrawn, or, if a physical item has already shipped, Sponsor may deduct its retail value from the refund.
6.4 Fulfilment. Digital rewards, credits and membership time are issued, and physical items ship to US addresses, within thirty (30) days after the Promotion Period closes. Purchasers outside the US receive a digital reward of equal or greater retail value in place of physical items.
6.5 The CYBERAWARE26 discount is a separate promotional offer: 20% off eligible digital products and membership, one use per order, not combinable with member pricing, excludes hardware, expires October 31, 2026. Use of the code is not required to participate in Shop Rewards.
7.1 Categories and prizes. (a) Best Tabletop Scenario: Nitrokey 3 + TTX-01 Executive Tabletop Exercise Kit (ARV $265). (b) Best Teardown: Nitrokey 3 + ciso.diy bundle (ARV [$___]). (c) Best 60-Second Security Tip: one weekly prize of a Nitrokey Passkey + USB data blocker (ARV [$___]), four in total.
7.2 How to enter. Submit your entry via the form at cyberaware.win/community.html#submit (or by emailing giveaway@cyberaware.win) by October 28, 2026 11:59 PM CT. Weekly Tip entries must be posted publicly on TikTok or YouTube with the hashtag #CyberAwareWin and tagged @cisomarketplace, and the link submitted through the form. Limit one entry per person per category.
7.3 Content requirements. Entries must be your original work, in English, not previously published commercially, and must not contain: third-party content you lack rights to; confidential or client information; personal data of others; anything unlawful, defamatory or that violates the hosting platform's terms. Teardowns must be of devices, software or documents you own or are authorised to examine, and must not disclose unpatched vulnerabilities in third-party products outside a coordinated-disclosure process.
7.4 Judging. A panel of at least two judges appointed by Sponsor scores each entry: technical accuracy (40%), usefulness to practitioners (30%), clarity and presentation (30%). Ties are broken on technical accuracy. Judges' decisions are final. Sponsor reserves the right not to award a category if it receives fewer than three (3) eligible entries.
7.5 Licence. You keep ownership of your entry. By entering you grant Sponsor a perpetual, worldwide, royalty-free, non-exclusive licence to reproduce, adapt, publish and distribute your entry (with attribution) across CISO Marketplace properties, the podcast and social channels, and, for the winning Tabletop Scenario, to include it in tabletopsec.com. You represent you have the right to grant this licence.
Information collected is used to administer the Promotion, verify eligibility, deliver prizes, and, only if you tick the separate, optional newsletter box, to send the CISO Marketplace newsletter. Subscribing is never a condition of entry. You may unsubscribe at any time without affecting your entry. Sponsor does not sell entrant data. Entrant data is processed by Cloudflare (hosting), Stripe (payments), Resend (email) and CISO Marketplace ID (account sign-in). Residents of the EU/UK/EEA: the lawful basis is consent (Art. 6(1)(a) GDPR); you may request access, correction or deletion at giveaway@cyberaware.win. See the Privacy Notice.
Except where prohibited, acceptance of a prize constitutes permission for Sponsor to use the winner's first name, last initial, city/state (or country), likeness, entry and statements for promotional purposes in any media without further compensation. Skill Contest winners' entries are published with attribution as described in Section 7.5.
By participating, you release and hold harmless Sponsor, its members, officers, employees, contractors and agents, and Nitrokey GmbH, NovaCustom, YouTube/Google, TikTok and Podbean (the "Released Parties") from any claim, liability, loss or damage arising from participation in the Promotion or the acceptance, possession, use or misuse of any prize, including any injury, loss of data, or breach of a device. The Released Parties' aggregate liability to any participant shall not exceed the approximate retail value of the prize at issue. Nothing in these Rules limits liability that cannot be limited under applicable law.
These Rules and the Promotion are governed by the laws of the State of Texas without regard to conflict-of-law principles. Except where prohibited, any dispute arising from the Promotion shall be resolved individually, without resort to any form of class action, exclusively in the state or federal courts located in [county] County, Texas, and participants waive any right to a jury trial. Any claim for damages is limited to actual out-of-pocket costs (excluding attorneys' fees) and excludes indirect, punitive, incidental and consequential damages.
Winners (first name, last initial, state or country) are posted at cyberaware.win/winners by November 15, 2026 and remain for at least sixty (60) days. To request the list by mail, send a self-addressed stamped envelope to the address in Section 5.3 by December 31, 2026.
This Promotion is in no way sponsored, endorsed, administered by, or associated with YouTube, Google LLC, TikTok, ByteDance, Podbean or any social media platform. Participants release those platforms from any responsibility. Any questions, comments or complaints regarding the Promotion must be directed to Sponsor, not to any platform. Participation on a platform is subject to that platform's terms of service.