Please review my evidence for Exceptional Talent (AI and Cyber Security): do published books meet OC4?

TL;DR: Exceptional Talent in AI and Cyber Security. MC is Microsoft recognition, OC2 is mentoring and community work, and OC4 is two books with a major academic publisher (3,600+ accesses) plus a peer-reviewed citation. I’d especially like views on OC4 and on my infrastructure and consultancy background.

I’d appreciate feedback on my proposed application for the Exceptional Talent route. My background is Microsoft cloud, identity security and enterprise AI, with around 16 years in the industry. https://www.linkedin.com/in/mezbauddin/

C: Recognition as a leading talent

  1. Microsoft MVP (current award: Identity & Access and Microsoft 365), with award letters covering several years
  2. Judge for a global Microsoft student technology competition for two consecutive years (2025 and 2026)
  3. Regular contributor to a leading independent publication for Microsoft 365 professionals.

OC2: Recognition for work beyond my occupation

  1. Mentoring through BCS and two Microsoft mentoring programmes, [X] mentees
  2. Personal technical blog with 2K monthly readers, all free content, LinkedIn Reach of 3M over last 12 month.
  3. Running community Meetup groups (709 members) sponsored by Microsoft and a public GitHub security hardening framework)

OC4: Research published or endorsed by an expert

  1. Book 1: AI platform book published by Springer Nature (Apress) in 2026, with 2,000+ accesses on SpringerLink and a foreword by a former Microsoft Principal Product Manager
  2. Book 2: AI agents book published by Springer Nature (Apress) in 2026, part of a series, with 1,600+ accesses on SpringerLink
  3. Work cited in a peer-reviewed Elsevier journal paper (2026) from an EU Horizon Europe research project

Letters of recommendation

  • Former Microsoft Principal Product Manager, now founder of an open-source security company (wrote the foreword to my book) [requested]
  • Senior Microsoft MVP programme lead [requested]
  • UK founder and CEO of an AI software company [to be requested]

My questions

  1. Do practitioner technical books from a major academic publisher, with SpringerLink accesses, an expert foreword and a peer-reviewed citation, meet OC4? Or do assessors expect academic papers?
  2. My day job is in IT infrastructure and I’ve done some consultancy work, both of which are on the “unsuitable specialisms” list. If all my evidence focuses on AI and security recognition, will my job title still count against me?
  3. Would OC2 + OC4 be stronger than OC2 + OC3 in my case?
  4. One letter would come from a CEO whose company I have worked with. Is that acceptable, or is it seen as weaker than an independent expert?

Thanks in advance for any feedback!

The OC4 language is the thing to look at closely. The Guide says academic research must be endorsed by a recognised academic expert, either through peer review in a recognised publication or endorsement from a senior academic who has supervised you directly. Practitioner technical books from a major publisher sit outside that, however strong the publisher, and a foreword from an industry principal plus access counts show reach without being peer review. Your peer-reviewed citation is the closest fit, but a citation of your work is not your own peer-reviewed research, so it is thin on its own.

OC3 looks like a stronger second criterion than OC4 for you. Your enterprise AI and security work is the significant technical contribution OC3 asks for, and it is impact-led, which the Guide separates from the innovation bar in OC1. OC2 plus OC3 plays to what you already have without forcing academic framing onto work that is not academic.

The unsuitable specialisms list bites hardest when the paid role is the main story. Keep the spine of the case on the AI and security recognition and let the infrastructure and consultancy titles sit in the background, so the panel judges you on the suitable work.

A letter from a CEO whose company you have worked with carries less weight than a fully independent expert because of the commercial relationship behind it. It is not disqualifying, but I would treat it as the weakest of the three and lead with the two independent recommenders.

Thanks Akash, this was really helpful and changed my plan.

I’ve dropped OC4. The books (Springer Nature, 3,600+ SpringerLink accesses, expert foreword) and the peer-reviewed citation now sit under MC as recognition rather than research.

My plan is now MC + OC2 + OC3. For OC3, I’ve made security contributions to two product-led SaaS companies: a construction rental marketplace and an AI-powered customs compliance platform. The work covered identity security architecture, cloud security, and securing a multi-cloud integration.

I also have recommenders confirmed: a former Microsoft Principal PM (independent), a senior Microsoft MVP programme lead (independent), and the CEO of one of the SaaS companies.

Two follow-up questions:

  1. I worked with both companies as a contractor, not an employee. The OC3 wording mentions “founder, senior executive, board member or employee”. Have you seen long-running contract work accepted for OC3?
  2. The second company’s CEO has also agreed to write a letter. Can a signed letter describing my specific technical contribution be used as an OC3 evidence document, separate from the three recommendation letters?

Thanks again!

The OC3 wording does not mention contractors, and the rest of the guidance on this criterion is about your personal work and its impact, so the label matters less than what the evidence shows. The strongest version shows you embedded in the core product over a sustained period, with a clear before and after for the security architecture you owned. Short or loosely scoped engagements across two clients sit much closer to the consultancy profile on the unsuitable list, and that is the risk to manage.

A signed letter from the second CEO can work as an OC3 document. The Guide lists a letter from an employer as acceptable evidence, and for contract work the client CEO is the natural author, as long as they are a different person from your three recommenders. Letters inside the evidence pack are held to the same standard as the recommendations, including knowledge of your work over 12 months or more. A letter alone is never enough for a criterion, so pair it with an architecture document of no more than three A4 pages showing your personal contribution, plus anything that puts the result in numbers.

Hi @Mezba_Uddin,

Trust you’re doing well.

First, I would advise against mentioning “consultancy” directly in your application. If necessary, use an alternative term such as “specialist” instead.

Looking at your Mandatory Criteria (MC), the Microsoft recognition you’ve highlighted appears to be recognition within the Microsoft ecosystem rather than recognition for achievements that have advanced the wider digital technology sector. Tech Nation tends to focus on sector wide recognition.

For instance, recognitions such as your Microsoft Most Valuable Professional (MVP) can demonstrate contributions to the Microsoft ecosystem. However, for MC, assessors are usually looking for evidence that shows leadership and recognition within the wider technology sector.

Similarly, judging a Microsoft student technology competition could be useful under OC2 because it demonstrates contribution to the sector through mentoring or supporting emerging talent. However, for MC, judging is generally expected to involve assessing the work of peers, industry experts, or professionals at your level, as this better demonstrates leadership and standing in the field.

You also mentioned being a regular contributor to a leading independent publication for Microsoft 365 professionals. What evidence are you providing to support that claim? You need to be mindful that most of your MC evidence currently appears focused on the Microsoft ecosystem rather than the broader technology sector.

Based on what you’ve shared, my reasoning above, and the feedback I’ve seen lately, I don’t think the current MC evidence is strong enough to meet the requirement.

I would encourage you to gather more evidence outside the Microsoft ecosystem. Things like include speaking at recognised industry conferences or top tier events, judging the work of professionals in your area of expertise, publications by reputable media organisations where your achievements and contributions are the focus of the article, strong evidence of impact, adoption, recognition by peers, and measurable outcomes from your work.

For your Microsoft contributions, make sure you clearly demonstrate the value of your work through impact metrics, adoption data, recognition from peers, or other measurable outcomes.

For OC2, regarding your mentoring activities through BCS and the Microsoft programmes, at the moment, these seem to describe what you did and where you did it, but the key question is whether you can evidence the impact.

Can you show that you formally invited to mentor, provide invitation emails or letters, evidence of mentoring sessions, photos, videos, or event records, can you demonstrate the scale of your reach and engagement, can you provide acknowledgement emails from the organisations, are there mentoring dashboards or reports showing participation, engagement, or outcomes?

Personal blogs and LinkedIn posts are generally not considered editorial content because they have not gone through an independent editorial review process. In my experience, Tech Nation may dismise this as self authored.

Running community meet ups with Microsoft can certainly be valuable, but simply organising an event may not be enough. You need to clearly show how you personally contributed to advancing the sector. Did you teach, guide participants, provide technical support, deliver workshops? These are the kinds of activities that demonstrate active contribution.It would also strengthen your case if you could show evidence that Microsoft specifically approached, selected, or invited you to organise the meetup.

While your community involvement is noted, based on the information currently available, I don’t think the OC2 evidence is yet strong enough to meet the OC2 requirement.

Regarding your OC4, are these research papers, journal publications, conference papers, white papers, articles, or books as you stated? If they are books, that may be more difficult. So, you mention:

“AI Platform book published by Springer Nature (Apress) in 2026…”

that clearly refers to an authored book.

Tech Nation’s expectation for research related evidence is usually scholarly research output such as Peer reviewed journal articles, conference papers, research monographs or other recognised academic publications. Based on my experience, these are generally viewed more okay for OC4.

If your publications are peer reviewed journal articles, then they could be suitable evidence. However, make sure you clearly demonstrate their impact on the sector. Because beyond the publications, the impact shows how it has advanced the sector. These can be number of citations, downloads or accesses as you mentioned. References by other researchers can also be useful.

Recommendation Letters

Your recommenders look fine from what you’ve shared. However, I would still recommend reviewing their profiles carefully to ensure they meet Tech Nation’s expectation of established experts with recognised standing in the field.

Your Questions

  1. Do practitioner technical books from a major academic publisher, with SpringerLink accesses, an expert foreword, and a peer-reviewed citation, meet OC4? Or do assessors expect academic papers?

Books can be useful depending on the topic, publisher, and impact. However, the stronger expectation for OC4 is usually peer reviewed research publications.

  1. My day job is in IT infrastructure and I’ve done some consultancy work, both of which are on the “unsuitable specialisms” list. If all my evidence focuses on AI and security recognition, will my job title still count against me?

Yes, consultancy related roles can be an issue for eligibility, so your narrative needs to be carefully aligned with your evidence. The focus should remain on your achievements, impact, recognition, and contributions in AI and security rather than the consultancy aspect of your role.

  1. Would OC2 + OC4 be stronger than OC2 + OC3 in my case?

I would need to see the evidence you’re planning to use for OC3 before, I can give a useful response.

That said, one potential challenge is that OC3 is focused on product-led company, whereas your background appears to be more in consultancy IT firm.

  1. One letter would come from a CEO whose company I have worked with. Is that acceptable, or is it seen as weaker than an independent expert?

Yes, that can be acceptable. Ideally, recommenders should have worked with you directly or had oversight of your work and achievements. They should be able to speak credibly about your impact and contributions. Generally, they are expected to be senior individuals rather than colleagues at the same level or direct line managers.

I hope this feedback helps.

All the best.

Research articles (OC4): Strong publisher (Springer/Apress), good accesses, expert foreword, one peer-reviewed citation. But books are practitioner guides, not academic papers. Also, one citation is thin. To strengthen: get more citations, expert reviews, adoption letters, and highlight the existing citation clearly. If you have peer-reviewed papers, lead with those.

GitHub: Currently too thin. One framework under OC2. Repos alone prove activity, not impact. Show metrics (stars, forks, downloads, dependents), adoption, maintainer testimonials, external mentions. If your security framework is widely used, prove it. If not, either strengthen it or drop it. Consider moving GitHub to OC3 “only if you have real technical impact”.

Bottom line: OC2 (mentoring/community) + OC4 (books + citation) are your strongest. Make those bulletproof. Don’t let GitHub weaken the application unless you can show recognition and impact.

Hi @Mezba_Uddin,

In my opinion, Akash’s read early on was correct… practitioner books from a major publisher is credible but it is not a peer-reviewed research. One citation is also thin for OC4. The OC2 + OC3 strategy seems strongest here in my opinion.
(Not Immigration Advice).