GIAC Program Overview 2015 Q4 Version

(1)

GIAC Program Overview

(2)

What is GIAC?

•  GIAC is the ‘Global Information

Assurance Certification’ program

•  GIAC assesses candidate knowledge in

specific subject areas and grants

credentials in the field of IT Security

•  GIAC has issued more than 75,000

credentials since 1999

(3)

The GIAC Certification Program:

•  Validates real-world competency

•  Focuses on hands-on concepts

•  Offers specific skills based certifications

aligned with critical infosec job duties

•  Is highly respected among both industry

leaders and technical practitioners

(4)

Benefits of Certification

•  Personal Perks

–  Increased salary and upward mobility

–  Prestige, confidence and demonstrated ability

•  Industry Benefits

–  Confirms individuals have specific technical skill sets –  Stronger community bonds

•  Reinforcement of Education

–  Management Tool

(5)

GIAC Earns SC Magazine’s Award for Best

Professional Certification Program

•  The prestigious, performance-based GIAC Security Expert Credential was named 'Best Professional Certification' by SC Magazine in 2011

•  GIAC Credentials have been finalists in SC Magazine’s 2009, 2010, 2011, 2012, 2013, 2014, & 2015 Best Professional Certification Program category

(6)

GIAC Certifications

•  GSEC - Security Essentials •  GPPA - Perimeter Protection •  GCIA - Intrusion Analyst •  GCIH - Incident Handler •  GCFA - Forensics Analyst •  GCUX - Unix Security

•  GCWN - Windows Security •  GSSP - Secure Coding

•  GCED - Enterprise Defender •  GCFE - Forensics Examiner •  GWEB - Web App Defender •  GXPN - Advanced Pen Test •  GNFA - Network Forensics

•  GISF - Information Security Fundamentals •  GSLC - Security Leadership

•  GSNA - System & Network Auditor

•  GISP - Information Security Professional •  GAWN - Auditing Wireless Networks

•  GREM - Reverse-Engineering Malware •  GPEN - Penetration Tester

•  GWAPT - Web App Pen Testing

•  GCPM - InfoSec Project Management •  GLEG - InfoSec Legal Issues

•  GMOB - Mobile Device Security Analyst •  GICSP - Industrial Control

•  GCCC - Critical Controls

•  GMON – Continuous InfoSec Monitoring

(7)

GIAC Certification Options

GIAC Certification

–  Multiple choice exam

GIAC Gold Status

–  Add a research project and technical report

GIAC Expert Status

(8)

Registration

•  Register for GIAC certification at the

conference

– Only $659, after the conference ends the price goes up to $999

– Go to the conference registration desk or call (301) 654-7267

– You have four months to complete the certification

(9)

ISO/ANSI 17024 Accredited

•  ISO/IEC/ANSI 17024 is a quality standard for organizations granting certifications

•  The GIAC program was accredited by the

American National Standards Institute (ANSI) 17024 standard in 2007, GSEC and GSLC

•  In 2009 added GCIH, GCIA, and GCFA •  In 2013 added GPEN, GCED and GSNA •  In 2014 added GCFE, GICSP and GMOB

(10)

US Department Of Defense 8570

•  DoD Directive 8570 provides guidance and procedures for the training, certification, and management of the DoD workforce conducting Information Assurance functions. It also

provides guidance on reporting metrics.

•  The GIAC certification program has multiple certifications included on the official 8570 list •  GSEC, GCIA, GCIH, GSLC, GSNA, GCED, GCFA

(11)

GIAC Exam Details

•  All GIAC certification exams are taken at Pearson-VUE testing centers

•  Exams are open book and notes (think paper), not open electronic devices (no Google or pdfs)

•  Common GIAC Exam formats:

–  75 question, two hour exams –  115 question, three hour exams –  150 question, four hour exams

–  GSEC is 180 question, five hour exam

•  You receive 2 complimentary practice tests ($258 value) •  Certification exams associated with this conference must

(12)

Preparing for Your GIAC Exam

•  Be familiar with exam objectives

•  Reread all the slides and notes

sections from your course material

•  Build your hands-on skills by

revisiting in-class exercises

•  Listen to the course audio mp3 files

•  Utilize your practice tests

(13)

Study Time

•  Put in regular study time, don’t cram

•  On average, students who pass their

GIAC exams put in 55 hours of study

time, in addition to classroom training

•  For GSEC the average is higher, over 70

hours

(14)

You’re Certified!

•  Name and expiration dates for ALL GIAC

certifications are posted on the GIAC Certified Professionals website

•  Utilize the official GIAC logos: http://

www.giac.org/certified-professionals/business-card-logos

•  Claim your Digital Badge: https:// www.giac.org/digitalbadges

(15)

GIAC Advisory Board

•  Open to anyone who earns an exam

score of at least 90% when obtaining a

GIAC certification

•  More than 2,000 active members

•  Honors and demonstrated interest

•  Opportunities

(16)

Certification Maintenance

•  Security changes rapidly!

•  GIAC certifications are valid for four years

•  $399 certification renewal fee due once every four years, includes option for current training material from SANS

•  Multiple renewal options

–  Retest, continuing education, published technical paper

•  Discounts available for multiple certifications due within the same two-calendar-year period

–  After first one, all others within 2 calendar years are $199

•  Benefits to maintaining your certification:

–  The longer you hold the certification, the more valuable it is

(17)

GIAC Certification –

SANS Training Not Required

•  Attempting GIAC Certification without

training from SANS

• Subject matter experts

• Industry experience

•  Same requirements apply, price is $1,149

•  Practice exams are provided

(18)

SANS Technology Institute

•  GIAC is one of the assessment and grading arms of the SANS Technology Institute

•  STI is a Master’s degree program

•  STI is accredited by the Middle States

Commission on Higher Education to award MS Degrees

•  Applications are being accepted

(19)

Where Do I Go for Information?

•  GIAC web site: http://www.giac.org •  SANS web site: http://www.sans.org •  Copy of this presentation:

http://www.giac.org/overview/program_overview.pdf

•  GIAC FAQ page:

–  http://www.giac.org/FAQ.php

•  GIAC general e-mail address:

–  [email protected]

•  GIAC proctor questions:

(20)

GIAC Program Overview 2015 Q4 Version