Global Information Assurance Certification


Global Information Assurance Certification is an information security certification entity that specializes in technical and practical certification as well as new research in the form of its GIAC Gold program. SANS Institute founded the certification entity in 1999 and the term GIAC is trademarked by The Escal Institute of Advanced Technologies.
GIAC provides a set of vendor-neutral computer security certifications linked to the training courses provided by the SANS. GIAC is specific to the leading edge technological advancement of IT security in order to keep ahead of "black hat" techniques. Papers written by individuals pursuing GIAC certifications are presented at the SANS Reading Room on GIAC's website.
In March 2021, GIAC introduced CyberLive, a new hands-on testing format that assesses real-world cybersecurity skills in a virtual environment, alongside its traditional multiple-choice exams.
In December 2024, GIAC has rebranded its long-standing certifications as Practitioner Certifications, which include well-known qualifications like the GIAC Certified Forensic Examiner. These certifications are aimed at validating professionals' abilities in real-world work environments, making them suitable for newcomers to the field as well as seasoned practitioners looking to enhance their skills and responsibilities in cybersecurity. In addition to this reclassification, GIAC has launched its new Applied Knowledge Certifications, designed to elevate testing standards and challenge candidates to showcase their mastery through hands-on, CyberLive exams that assess both their knowledge and practical skills. To achieve the prestigious designations of GIAC Security Professional or GIAC Security Expert, candidates are required to earn both Practitioner and Applied Knowledge Certifications, reflecting a comprehensive proficiency in the field.

GIAC Practitioner Certifications

GIAC Practitioner Certifications are primarily based on individual SANS courses, providing a focused assessment of the skills and knowledge acquired from those specific training programs. As of November 2025, GIAC has organized its certifications into nine "Cyber Specialties." Below is the list of Practitioner Certifications arranged according to this categorization.

Artificial Intelligence

GIAC Applied Knowledge Certifications

Unlike the "classic" Practitioner Certifications from GIAC, the Applied Knowledge Certifications are based on a broader range of training and expert knowledge. They provide a more comprehensive evaluation of candidates' skills across various topics rather than focusing mostly on dedicated SANS training.
CodeNameAssociated SANS CoursesStatus
GX-FEGIAC Experienced Forensics ExpertFOR500, FOR498, FOR508, FOR608
GX-CSGIAC Experienced Cybersecurity SpecialistSEC401, SEC503, FOR508, SEC560, SEC542, SEC599, SEC501, FOR500, SEC660
GX-FAGIAC Experienced Forensic AnalystFOR508, FOR498, FOR500, FOR501, FOR503, FOR504, FOR509, FOR572, FOR608, FOR610
GX-IAGIAC Experienced Intrusion AnalystSEC503, FOR572, SEC530, SEC450, SEC511, SEC573
GX-IHGIAC Experienced Incident HandlerSEC504, SEC450, SEC501, SEC503, SEC560, FOR610, FOR508, FOR500
GX-PTGIAC Experienced Penetration TesterSEC560, SEC401, SEC501, SEC503, SEC504, SEC542, SEC565, SEC580, SEC617, SEC660, SEC670, SEC760

Unavailable or retired GIAC certifications

Unavailable certifications

The following certifications are not found on the GIAC website and are not listed as retired:

Retired certifications

As of November 2025, GIAC lists the following certifications as retired:
  • GIAC.NET
  • GIAC Certified Incident Manager
  • GIAC Certified ISO-27000 Specialist
  • GIAC Secure Software Programmer-C
  • GIAC Securing Oracle Certified
  • GIAC Secure Software Programmer-.net
  • GIAC Secure Software Programmer-Java
  • GIAC Perimeter Protection Analyst
  • GIAC UNIX Security Administrator