SecProve
ProfessionalVendor-neutralGIAC· issued from US

GX-FA

GIAC Experienced Forensics Analyst

GIAC Experienced Forensics Analyst

Official page at GIAC↔ Compare with another cert
Exam fee
$979
Ongoing
$0/yr AMF · 9 CPE/yr
Study time
—
Delivery
Hybrid
Validity
4 yrs (renewal cycle)

› Quality score

29.5 / 40

Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.

Blueprint rigor
How well-defined and rigorous the exam blueprint is.
Experienced-tier blueprint requires demonstrated DFIR capability above the GCFA level. Tight scope, high bar.
8.0/10
Practical evidence
Hands-on labs / written reports vs pure MCQ.
Heavy CyberLive performance components; requires real-world casework experience to clear.
8.5/10
Currency & upkeep
How aggressively content is kept current with the field.
Newer experienced-tier credential — refresh cadence aligns to SANS DFIR course updates.
7.0/10
Market recognition
How often this signal actually moves a hiring decision.
Niche but emerging recognition for senior DFIR practitioners; pairs with GCFA / GCFE on senior resumes.
6.0/10

› Exam format

75 questions + CyberLive, 3 hours, open-book, proctored via Pearson VUE. Passing score: ~70%.

Retake policy
Fee: $999 per attempt
Wait: 30d between attempts

30-day wait between attempts. SANS course bundles typically include 2 attempts.

› Recertification

Valid for 4 years. Renewal via 36 CPE credits or renewal exam (479 USD). Each GIAC cert separate.

› NICE Framework work roles

The NIST NICE work-role IDs this cert maps to. NICCS lookup.

DD-WRL-009PD-WRL-004PD-WRL-002IN-WRL-002
Recognition
Global
Exam languages
en

› Core domains covered

The 1 domain this cert is centrally about. Passing the exam demonstrates working knowledge of each.

A14OT/ICS Security

SCADA, PLC security, Purdue model, ICS-specific threats, IT/OT convergence, IEC 62443.

› Prerequisites

Experience

No formal prerequisites. Associated SANS course strongly recommended.

› Progression

requiredrecommended

Where this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.

Required prereqs (0)

No vendor-gated prereqs.

Recommended priors (1)
GCFAGIAC / SANS
GX-FA
GIAC
Required by (0)

No certs require this one.

Recommended next (0)

No follow-on certs reference this one yet.

See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.

Highlight on the domain mapBrowse all certifications