- Roadmap
- Steps To
- Comparing
- Security Admin
- Management
- Audit
- Legal
- Software Security
- GSE-Malware
- GSE-Compliance
- GSE
- DoD 8570
- Retired Certifications
GIAC Certified Forensics Analyst (GCFA) 
- Type:
- Certification
- Course:
- *No Specific training is required for any GIAC certification. If candidates need help in mastering the objectives for this certification, there are many sources of information available. Practical experience is one option; there are also numerous books on the market covering Computer Information Security. Another option is SANS training, or any relevant courses from other training providers.*
- More information regarding relevant training from SANS can be found at:
- System Forensics, Investigation & Response, SEC-508
- Target:
Individuals responsible for forensic investigation/analysis, advanced incident handling, or formal incident investigation.
GIAC Certified Forensic Analysts (GCFAs) have the knowledge, skills, and abilities to handle advanced incident handling scenarios, conduct formal incident investigations, and carry out forensic investigation of networks and hosts.
- Requirements:
- 1 proctored exam - 150 questions - 4-hour time limit - 69.3% (104 of 150 questions) minimum passing score
GIAC reserves the right to change the specifications for each certification without notice. A scientific passing point study was conducted for the current GCFA exam in May 2009. The new passing point was set to 69.3%. Candidates attending SANSFIRE or purchasing certification attempts after June 25th will be subject to the new passing point.
- Renewal:
- Every 4 years
GCFA Links:
- View Certification Bulletin (Part 2 of Candidate Handbook)
- Challenge This Cert - Sign up Now!
- SANS Information Security Reading Room
- Certified Professionals (GCFA)
