› Certifications · compare
Compare certifications
Pick up to 3 certifications and compare them side-by-side on cost, exam format, recertification, salary signal, quality, and domain coverage.
ISACA · professional
CCOACertified Cybersecurity Operations Analyst
ISACA certification for SOC analysts with hybrid exam of multiple choice and performance-based questions. Focus on incident detection, response, and threat analysis. New since 2024.
Official pageGIAC / SANS · professional
GCIHGIAC Certified Incident Handler
Incident handling methodology and lifecycle.
Official pageComparing
ISACACCOA
GIAC / SANSGCIH
› Cost
Exam fee
CCOA$575
GCIH$979
Exam fee
$575
$979
Annual maintenance fee
CCOA$45/yr
GCIH—
Annual maintenance fee
$45/yr
—
3-year cost of ownership
CCOA$710
GCIH$979
3-year cost of ownership
$710
$979
› Exam mechanics
Pass mark
CCOA450/800 (scaled)
GCIH73% (scaled per attempt)
Pass mark
450/800 (scaled)
73% (scaled per attempt)
Retake policy
CCOA$575 fee · 30d wait · 4/yr cap
GCIH$999 fee · 30d wait
Retake policy
$575 fee · 30d wait · 4/yr cap
$999 fee · 30d wait
Study time
CCOA60–120 hrs
GCIH80–150 hrs
Study time
60–120 hrs
80–150 hrs
Validity
CCOA3 yrs
GCIH4 yrs
Validity
3 yrs
4 yrs
CPE / yr
CCOA20 CPEs
GCIH9 CPEs
CPE / yr
20 CPEs
9 CPEs
Delivery
CCOAtest center
GCIHonline proctored
Delivery
test center
online proctored
› Salary signal (US base)
Range
CCOA$95K – $145K
GCIH$100K – $150K
Range
$95K – $145K
$100K – $150K
Median
CCOA$115,000
GCIH$120,000
Median
$115,000
$120,000
Premium %
CCOA—
GCIH—
Premium %
—
—
Role context
CCOASOC analyst tier 2 / threat hunter, US, 2-5 years.
GCIHIncident responder / blue team analyst, US, 3–5 years.
Role context
SOC analyst tier 2 / threat hunter, US, 2-5 years.
Incident responder / blue team analyst, US, 3–5 years.
› Quality (4-axis rubric · 0–10)
Schema quality
CCOA7.0
GCIH8.5
Schema quality
7.0
8.5
Practice evidence
CCOA4.0
GCIH5.5
Practice evidence
4.0
5.5
Maintenance
CCOA6.0
GCIH7.0
Maintenance
6.0
7.0
Market recognition
CCOA4.0
GCIH8.5
Market recognition
4.0
8.5
Average
CCOA5.3
GCIH7.4
Average
5.3
7.4
› Recognition & lifecycle
Recognition
CCOAGlobal
GCIHGlobal · US · EU · UK
Recognition
Global
Global · US · EU · UK
ISO 17024 accredited
CCOA—
GCIH✓
ISO 17024 accredited
—
✓
DoD 8140 baseline
CCOA—
GCIH✓
DoD 8140 baseline
—
✓
Holders worldwide
CCOA—
GCIH25,000
Holders worldwide
—
25,000
Current version
CCOALaunched 2024 (2024-04)
GCIH2024 SEC504 refresh (2024-04)
Current version
Launched 2024 (2024-04)
2024 SEC504 refresh (2024-04)
› Domain coverage
A10Security Operations
CCOA● core
GCIH● core
A10Security Operations
● core
● core
A11Detection Engineering & Threat Hunting
CCOA● core
GCIH○ touched
A11Detection Engineering & Threat Hunting
● core
○ touched
A21Malware Analysis & Reverse Engineering
CCOA·
GCIH○ touched
A21Malware Analysis & Reverse Engineering
·
○ touched
A7Incident Response & Forensics
CCOA·
GCIH● core
A7Incident Response & Forensics
·
● core
Browse the full catalog or open any one of these on its detail page for full study materials, peer comparisons, and lifecycle notes.