thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

GIAC · Cybersecurity · Professional

GIAC Global Industrial Cyber Security Professional (GICSP) exam guide

Exam GICSP

GIAC Global Industrial Cyber Security Professional (GICSP) bridges IT security, engineering and operations for industrial control systems. With OT attacks on utilities and manufacturing rising, it is the most common baseline credential for ICS security roles in 2026.

Questions82
Time limit180 minutes
Passing score71%
Exam feeSee official page
Valid for4 years
DeliveryRemote proctored (ProctorU) or Pearson VUE test center

Format: Proctored CyberLive exam with hands-on lab questions plus multiple choice; open book. Fee note: GIAC shows the price at checkout; attempts bundled with SANS training cost less than standalone attempts. Includes practice tests.

Who it's for

Control engineers, OT security staff and IT security professionals moving into industrial environments.

What the exam covers

ICS Overview and Concepts—
ICS Components and Architecture—
PERA Level 0 and 1 Technology Overview and Compromise—
PERA Level 2 and 3 Technology Overview and Compromise—
Protocols, Communications, and Compromises—
Wireless Technologies and Compromises—
Hardening and Protecting Endpoints—
Intelligence Gathering and Threat Modeling—
ICS Program and Policy Development—
Risk-Based Disaster Recovery and Incident Response—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: None.

Recommended: Experience in OT/ICS engineering or IT security; SANS ICS410 is the aligned course.

Keeping it active

Valid four years: earn 36 CPEs in the cycle and pay GIAC's certification maintenance fee, or renew by retaking the current exam.

Skills & careers

Skills it validates

  • Understanding Purdue/PERA architecture
  • Securing PLCs, HMIs and historians
  • ICS protocols such as Modbus and DNP3
  • Network segmentation for OT
  • OT risk assessment and policy
  • ICS incident response

Job roles

ICS Security EngineerOT Security AnalystControl Systems EngineerSCADA Security SpecialistIndustrial Cybersecurity Consultant

DoD 8140

Listed in the DoD 8140 qualification matrix for some infrastructure and OT-relevant work roles. Confirm on the DoD CWQ site. Open the DoD Workforce Navigator

Where it fits in your path

You are here

GIAC Global Industrial Cyber Security Professional (GICSP)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: ICS concepts, components and PERA model.
  2. Week 2: Level 0-3 technologies and their attack surface.
  3. Week 3: ICS protocols and wireless.
  4. Week 4: Hardening, threat modelling, policy and DR/IR; practice tests and book.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • GIAC exams are open book (printed notes only); build a tabbed index of your course books before the exam.
  • Know where each device sits in the PERA/Purdue model; many questions depend on it.
  • Expect protocol questions on Modbus and DNP3 behaviour.
  • Answer with safety and availability first; OT priorities differ from IT.

Key terms for this exam

All 48 terms Study with thinQcards™

Frequently asked questions

Pass mark?

71%.

Do I need an engineering background?

No, but you must learn OT basics.

GICSP vs ISA/IEC 62443?

GICSP is a broad practitioner cert; ISA/IEC 62443 certificates focus on that standard.

Renewal?

Every four years with 36 CPEs.

Is GICSP worth it?

Yes for OT security roles; it is frequently listed in utility and manufacturing job ads.

Official page: www.giac.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.