- Roadmap
- Steps To
- Comparing
- Security Admin
- Management
- Audit
- Legal
- Software Security
- GSE-Malware
- GSE-Compliance
- GSE
- DoD 8570
- Retired Certifications
GIAC Certified Incident Handler (GCIH) 
- Type:
- Certification
- Course:
- *No Specific training is required for any GIAC certification. If candidates need help in mastering the objectives for this certification, there are many sources of information available. Practical experience is one option; there are also numerous books on the market covering Computer Information Security. Another option is SANS training, or any relevant courses from other training providers.*
- More information regarding relevant training from SANS can be found at:
- Hacker Techniques, Exploits & Incident Handling, SEC-504
- Target:
Individuals responsible for incident handling/incident response; individuals who require an understanding of the current threats to systems and networks, along with effective countermeasures.
GIAC Certified Incident Handlers (GCIHs) have the knowledge, skills, and abilities to manage incidents; to understand common attack techniques and tools; and to defend against and/or respond to such attacks when they occur.
- Requirements:
- 1 proctored exam - 150 questions - 4-hour time limit - 70% (105 of 150 questions) minimum passing score
- Renewal:
- Every 4 years
GCIH Links:
- View Certification Bulletin (Part 2 of Candidate Handbook)
- Challenge This Cert - Sign up Now!
- SANS Information Security Reading Room
- Certified Professionals (GCIH)
