Learn More About GIAC
GIAC develops and administers premier, professional information security certifications. More than 60 cybersecurity certifications align with affiliated partner SANS training and ensure mastery in critical, specialized infosec domains. GIAC certifications provide the highest and most rigorous assurance of cybersecurity knowledge and skill available to industry, government, and military clients around the world.
GIAC’s Founding & Mission
GIAC Certifications (previously Global Information Assurance Certification) was founded in 1999 to validate the skills of information security professionals. GIAC's purpose is to provide assurance that a certified individual has the knowledge and skills necessary for a practitioner in key areas of computer, information, and software security. GIAC certifications are trusted by thousands of companies and government agencies worldwide.
Program Growth
Certifications by Focus Area
GIAC certifications are unique because they measure specific skills and knowledge areas rather than general infosec knowledge. GIAC certifications are valid for four years. Students must review new course information and retake the exams or earn 36 CPEs every four years to remain certified. Different education and certification tracks are available for the following categories:
Offensive Operations
GIAC's offensive operations certifications cover critical domains and highly specialized usages, ensuring professionals are well-versed in essential offensive abilities.
View CertificationsCyber Defense
GIAC's cyber defense certifications span the entire defense spectrum and are focused in two areas: cyber defense essentials and blue teaming.
View CertificationsCloud Security
GIAC's cloud security certifications are designed to help you master the practical steps necessary for defending systems and applications in the cloud against the most dangerous threats.
View CertificationsIndustrial Control Systems
GIAC's industrial control systems certifications cover what ICS professionals need to know: how to protect and defend critical industrial systems and respond to incidents that will inevitably occur.
View CertificationsDigital Forensics & Incident Response
GIAC's digital forensics and incident response certifications encompass abilities that DFIR professionals need to succeed, confirming that professionals can detect compromised systems and identify how and when a breach occurred.
View CertificationsManagement, Legal & Audit
GIAC's management certifications confirm the practical skills to build and lead security teams, communicate with both technical teams and business leaders, and develop capabilities that strengthen your organization's security posture.
View CertificationsArtificial Intelligence (AI)
GIAC certifications provide trusted, globally recognized validation of AI-related skills—ensuring professionals can demonstrate readiness, organizations can verify capability, and innovation can move forward securely. With rigorous exams aligned to current industry demands, GIAC helps you stay ahead, lead with credibility, and thrive in the age of AI.
View CertificationsThere are no prerequisites required to begin any of the GIAC certification attempts; however, we highly recommend taking a training course before your test. Even experienced infosec professionals will benefit from a review of various subject areas before the exam. Certification attempts have a 4-month access window, giving candidates adequate time to prepare for the certification exam.
GIAC Disclaimer
The GIAC certification program only offers certification attempts to individual candidates, including verification of individual identity at multiple steps. SANS is the sole source for GIAC certification exams and exam vouchers. GIAC does not permit the resale or transfer of any certification registration or GIAC exam voucher. Each certification attempt purchased is non-transferable and any certification application / registration instance is intrinsically tied to one and only one individual account.