Global Information Assurance Certification (GIAC) is aninformation security certification entity that specializes in technical and practical certification as well as new research in the form of its GIAC Gold program.SANS Institute founded the certification entity in 1999 and the term GIAC is trademarked byThe Escal Institute of Advanced Technologies.
GIAC provides a set of vendor-neutralcomputer security certifications linked to the training courses provided by theSANS. GIAC is specific to the leading edge technological advancement ofIT security in order to keep ahead of "black hat" techniques. Papers written by individuals pursuing GIAC certifications are presented at the SANS Reading Room on GIAC's website.
In March 2021, GIAC introduced CyberLive, a new hands-on testing format that assesses real-world cybersecurity skills in a virtual environment, alongside its traditional multiple-choice exams.[1]
In December 2024, GIAC has rebranded its long-standing certifications asPractitioner Certifications, which include well-known qualifications like the GIAC Certified Forensic Examiner (GCFE). These certifications are aimed at validating professionals' abilities in real-world work environments, making them suitable for newcomers to the field as well as seasoned practitioners looking to enhance their skills and responsibilities in cybersecurity. In addition to this reclassification, GIAC has launched its newApplied Knowledge Certifications, designed to elevate testing standards and challenge candidates to showcase their mastery through hands-on, CyberLive exams that assess both their knowledge and practical skills. To achieve the prestigious designations of GIAC Security Professional or GIAC Security Expert, candidates are required to earn both Practitioner and Applied Knowledge Certifications, reflecting a comprehensive proficiency in the field.[2]
GIAC Practitioner Certifications are primarily based on individual SANS courses, providing a focused assessment of the skills and knowledge acquired from those specific training programs. As of November 2025, GIAC has organized its certifications into nine "Cyber Specialties." Below is the list of Practitioner Certifications arranged according to this categorization.
Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Digital Forensics, Incident Response & Threat Hunting
Unlike the "classic" Practitioner Certifications from GIAC, the Applied Knowledge Certifications are based on a broader range of training and expert knowledge. They provide a more comprehensive evaluation of candidates' skills across various topics rather than focusing mostly on dedicated SANS training.
Code
Name
Associated SANS Courses
Status
GX-FE
GIAC Experienced Forensics Expert
FOR500 (Primary fit course), FOR498, FOR508, FOR608
