Global Information Assurance Certification (GIAC) is an information security certification entity that specializes in technical and practical certification as well as new research in the form of its GIAC Gold program. SANS Institute founded the certification entity in 1999 and the term GIAC is trademarked by The Escal Institute of Advanced Technologies.
GIAC provides a set of vendor-neutral computer security certifications linked to the training courses provided by the SANS. GIAC is specific to the leading edge technological advancement of IT security in order to keep ahead of "black hat" techniques. Papers written by individuals pursuing GIAC certifications are presented at the SANS Reading Room on GIAC's website.
In March 2021, GIAC introduced CyberLive, a new hands-on testing format that assesses real-world cybersecurity skills in a virtual environment, alongside its traditional multiple-choice exams.
In December 2024, GIAC has rebranded its long-standing certifications as Practitioner Certifications, which include well-known qualifications like the GIAC Certified Forensic Examiner (GCFE). These certifications are aimed at validating professionals' abilities in real-world work environments, making them suitable for newcomers to the field as well as seasoned practitioners looking to enhance their skills and responsibilities in cybersecurity. In addition to this reclassification, GIAC has launched its new Applied Knowledge Certifications, designed to elevate testing standards and challenge candidates to showcase their mastery through hands-on, CyberLive exams that assess both their knowledge and practical skills. To achieve the prestigious designations of GIAC Security Professional or GIAC Security Expert, candidates are required to earn both Practitioner and Applied Knowledge Certifications, reflecting a comprehensive proficiency in the field.
GIAC Practitioner Certifications GIAC Practitioner Certifications are primarily based on individual SANS courses, providing a focused assessment of the skills and knowledge acquired from those specific training programs. As of November 2025, GIAC has organized its certifications into nine "Cyber Specialties." Below is the list of Practitioner Certifications arranged according to this categorization.
Cybersecurity Leadership, Artificial Intelligence (AI) CodeNameAssociated SANS CourseCommentsGSLCGIAC Security LeadershipLDR512GCCCGIAC Critical Controls CertificationSEC566GSTRTGIAC Strategic Planning, Policy, and LeadershipLDR514
Cybersecurity Leadership CodeNameAssociated SANS CourseCommentsGCPMGIAC Certified Project ManagerGLEGGIAC Law of Data Security & InvestigationsGCILGIAC Cyber Incident LeaderLDR553GSNAGIAC Systems and Network Auditor CertificationGISPGIAC Information Security Professional CertificationLDR414
Cybersecurity and IT Essentials, Cyber Defense CodeNameAssociated SANS CourseCommentsGSECGIAC Security EssentialsSEC401CyberLiveGISFGIAC Information Security FundamentalsSEC301CyberLiveGCEDGIAC Certified Enterprise DefenderSEC501
Cyber Defense, Artificial Intelligence CodeNameAssociated SANS CourseCommentsGCIAGIAC Certified Intrusion Analyst CertificationSEC503CyberLiveGOSIGIAC Open Source Intelligence CertificationSEC497GSOCGIAC Security Operations CertifiedSEC450GMONGIAC Continuous Monitoring CertificationSEC511CyberLiveGSOAGIAC Strategic OSINT AnalystSEC587CyberLiveGMLEGIAC Machine Learning EngineerSEC595CyberLive
Cyber Defense CodeNameAssociated SANS CourseCommentsGCWNGIAC Certified Windows Security AdministratorGPYCGIAC Python CoderSEC573GCDAGIAC Certified Detection AnalystSEC555GDSAGIAC Defensible Security Architect CertificationSEC530GFACTGIAC Foundational Cybersecurity TechnologiesSEC275GDATGIAC Defending Advanced ThreatsSEC599GSOMGIAC Security Operations Manager CertificationLDR551
Offensive Operations, Pen Testing, and Red Teaming CodeNameAssociated SANS CourseCommentsGPENGIAC Penetration Tester CertificationSEC560CyberLiveGXPNGIAC Exploit Researcher and Advanced Penetration TesterSEC660CyberLiveGRTPGIAC Red Team ProfessionalSEC565CyberLiveGEVAGIAC Enterprise Vulnerability Assessor CertificationGAWNGIAC Assessing and Auditing Wireless NetworksSEC617GWAPTGIAC Web Application Penetration TesterSEC542CyberLiveGMOBGIAC Mobile Device Security AnalystSEC575
Offensive Operations, Pen Testing, and Red Teaming, Cloud Security, Artificial Intelligence CodeNameAssociated SANS CourseCommentsGCPNGIAC Cloud Penetration TesterSEC588
Artificial Intelligence CodeNameAssociated SANS CourseCommentsGOAAGIAC Offensive AI AnalystSEC535CyberLive
Digital Forensics, Incident Response & Threat Hunting, Artificial Intelligence CodeNameAssociated SANS CourseCommentsGASFGIAC Advanced Smartphone Forensics CertificationFOR585GIMEGIAC iOS and macOS ExaminerFOR518
Digital Forensics, Incident Response & Threat Hunting CodeNameAssociated SANS CourseCommentsGCFEGIAC Certified Forensic ExaminerFOR500CyberLiveGEIRGIAC Enterprise Incident ResponseFOR608CyberLiveGCFRGIAC Cloud Forensics ResponderFOR509CyberLiveGREMGIAC Reverse Engineering Malware CertificationFOR610CyberLiveGLIRGIAC Linux Incident ResponderFOR577CyberLiveGCFAGIAC Certified Forensic AnalystFOR508CyberLiveGNFAGIAC Network Forensic AnalystFOR572CyberLiveGCTIGIAC Cyber Threat IntelligenceFOR578CyberLiveGBFAGIAC Battlefield Forensics and AcquisitionFOR498
Cloud Security, Artificial Intelligence CodeNameAssociated SANS CourseCommentsGPCSGIAC Public Cloud SecuritySEC510GCTDGIAC Cloud Threat DetectionSEC541
Cloud Security CodeNameAssociated SANS CourseCommentsGCLDGIAC Cloud Security Essentials CertificationSEC502GCSAGIAC Cloud Security AutomationSEC540GCADGIAC Cloud Security Architecture and DesignSEC549GWEBGIAC Certified Web Application DefenderSEC522
Industrial Control Systems Security CodeNameAssociated SANS CourseCommentsGICSPGlobal Industrial Cyber Security Professional CertificationICS410CyberLiveGCIPGIAC Critical Infrastructure Protection CertificationICS456GRIDGIAC Response and Industrial DefenseICS515
Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Digital Forensics, Incident Response & Threat Hunting CodeNameAssociated SANS CourseCommentsGCIHGIAC Certified Incident Handler CertificationSEC504CyberLive
GIAC Applied Knowledge Certifications Unlike the "classic" Practitioner Certifications from GIAC, the Applied Knowledge Certifications are based on a broader range of training and expert knowledge. They provide a more comprehensive evaluation of candidates' skills across various topics rather than focusing mostly on dedicated SANS training.
CodeNameAssociated SANS CoursesStatusGX-FEGIAC Experienced Forensics ExpertFOR500 (Primary fit course), FOR498, FOR508, FOR608GX-CSGIAC Experienced Cybersecurity SpecialistSEC401 (Primary fit course), SEC503, FOR508, SEC560, SEC542, SEC599, SEC501, FOR500, SEC660GX-FAGIAC Experienced Forensic AnalystFOR508 (Primary fit course), FOR498, FOR500, FOR501, FOR503, FOR504, FOR509, FOR572, FOR608, FOR610GX-IAGIAC Experienced Intrusion AnalystSEC503 (Primary fit course), FOR572, SEC530, SEC450, SEC511, SEC573GX-IHGIAC Experienced Incident HandlerSEC504 (Primary fit course), SEC450, SEC501, SEC503, SEC560, FOR610, FOR508, FOR500GX-PTGIAC Experienced Penetration TesterSEC560 (Primary fit course), SEC401, SEC501, SEC503, SEC504, SEC542, SEC565, SEC580, SEC617, SEC660, SEC670, SEC760
Unavailable or retired GIAC certifications
Unavailable certifications The following certifications are not found on the GIAC website and are not listed as retired:
GIAC Secure Internet Presence (GSIP) GIAC Security Audit Essentials (GSAE) GIAC Certified ISO-17799 Specialist (G7799) GIAC Certified Security Consultant (GCSC)
Retired certifications As of November 2025, GIAC lists the following certifications as retired:
GIAC .NET (GNET) GIAC Certified Incident Manager (GCIM) GIAC Certified ISO-27000 Specialist (G2700) GIAC Secure Software Programmer-C (GSSP-C) GIAC Securing Oracle Certified (GSOC) GIAC Secure Software Programmer-.net (GSSP-.net) GIAC Secure Software Programmer-Java (GSSP-Java) GIAC Perimeter Protection Analyst (GPPA) GIAC UNIX Security Administrator (GCUX)
External links
Notes