GCIP
GIAC Critical Infrastructure Protection
GIAC Critical Infrastructure Protection
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Exam format
75 questions + CyberLive, 3 hours, open-book, proctored via Pearson VUE. Passing score: ~70%.
30-day wait between attempts. SANS course bundles typically include 2 attempts.
› Recertification
Valid for 4 years. Renewal via 36 CPE credits or renewal exam (479 USD). Each GIAC cert separately.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
Data classification, encryption-at-rest/in-transit, DLP, tokenization, privacy-by-design, plus the regulatory stack (GDPR, CCPA, HIPAA) that sets the bar.
Risk frameworks (NIST RMF, ISO 31000, FAIR), policy development, audit, regulatory compliance, third-party risk.
› Prerequisites
No formal prerequisites. Associated SANS course strongly recommended.
› Progression
requiredrecommendedWhere this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.
No vendor-gated prereqs.
No certs require this one.
No follow-on certs reference this one yet.
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- SANS ICS410 Course Materials — SANS
- GIAC Practice Tests (2 included with exam)
› Version & lifecycle
› Salary signal
Critical infrastructure / OT security analyst, US, 3-5 years.
Robert Half Salary Guide · 2024 · US base only · p25–p75 range
› How it compares
GCIP is the ICS protection focus; GICSP is the broader ICS practitioner foundation. Often paired.
↔ Compare side-by-side› Careers that commonly pursue this cert
Protect critical infrastructure — power grids, water treatment, manufacturing. Where cyber meets the physical world.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.