GIAC Program Rules: Candidate Agreement

Updated 06/10/2021

The Global Information Assurance Certification ("GIAC") program is among the most comprehensive information security certification programs in the world. Accordingly, we take our responsibilities to candidates very seriously. In return, we expect our candidates to adhere to the highest level of commitment and abide by our rules and policies for registration, test administration, and all other aspects of the program related to your attempt to earn a GIAC certification, or take any exam, test, or assessment using the GIAC Exam Engine. This Candidate Agreement ("Agreement") serves to set forth both our responsibilities to you and your obligations as a candidate.

I hereby acknowledge and agree that the purpose of this test is to evaluate my skills in one or more content domain(s). I acknowledge that I have been provided with, had the opportunity to review, and agree to abide by the GIAC policies, procedures, and guidelines ("GIAC Program Rules") available at https://www.giac.org/policies prior to taking any test: GIAC Privacy Policy (see below); GIAC Retake Process; GIAC Open Book Testing Guidelines; GIAC Proctor Program Overview; GIAC Extension Process; GIAC Refund Policy, GIAC Disability Policy, GIAC Appeals Procedure, Exam Integrity Policy; the GIAC Code of Ethics. These policies are subject to change; to access the current version, please visit the web link shown above.

In particular, I hereby acknowledge that I have read the GIAC Privacy Policy, including its provisions to comply with California Civil Code Section 1978.83 ("CCPA") and the European Union General Data Protection Regulation ("GDPR") , and give my affirmative consent for GIAC to collect and use my personal information as provided in its Privacy Policy, including to arrange for, administer, and provide results from, the GIAC exam(s), test(s), or assessment(s) for which I am registering.

In addition to signing this Agreement at registration, I understand that this same Agreement is required to be reviewed and agreed to by me again at the time I take any GIAC exam(s), test(s), or assessment(s) using the GIAC Exam Engine. GIAC handles candidate agreements in this manner to ensure that I am fully aware of all requirements, obligations, and rights I have, and as a reminder of all this information prior to taking a test.

I understand that if I desire to register for GIAC products, or other exam(s), test(s), or assessment(s) using the GIAC Exam Engine, under the terms and conditions recited in this Agreement, I am obligated to read each of the above cited policies and affirmatively confirm my acceptance of this requirement by clicking the "I Accept" button displayed at the end of this Agreement. By doing so, I hereby confirm in writing that I acknowledge and accept the terms and conditions set forth in this Agreement. I further understand that GIAC exam attempts are non-transferable to any other person.

I understand that, once I begin a test, if I attempt to withdraw my consent to collect/use my personal information, GIAC will score that test as if it were completed and provide such test results to any entities which I have designed to receive those scores/reports. Furthermore, I understand that my rights, specifically for rectification (i.e., correction) and the right to be forgotten (i.e., erasure), may be adversely affected by the fact that test scores, reports and other results already have been processed under this Agreement, which I hereby agree constitutes a legitimate basis for GIAC to retain my test answers, whether as personal information (i.e., raw data) or non-personal information (i.e., derived data), as well as any certification status and/or results of any certification attempt, and to share that information with the appropriate test programs, clearing houses and/or others to whom I previously designated should receive that information (see below).

Consistent with the GIAC Privacy Policy, I agree and understand that GIAC shall have the right to disclose or share my test scores, certification status, and/or the results of any certification attempt (hereafter referred to as "GIAC Data") ONLY with: (a) me; (b) the entity that GIAC determines, using commercially reasonable practices, directly or ultimately paid for my training/certification exam or other related GIAC product or service; or (c) with any entity or organization that I have designated to receive my GIAC Data. GIAC shall release to such organization only appropriately limited information, including my course progress, exam appointment date, exam deadline, and the results of the test, subject to the commitment by that entity to keep GIAC Data confidential and not to further disclose it to any third party without my express written consent. I acknowledge and agree that GIAC shall have the right to aggregate publicly available information about my GIAC certifications and share this information with the entity it believes to be my current employer using commercially reasonable practices.

Further, in regards to the right to have your personal information exported to others, including other testing programs and clearing houses, GIAC hereby notifies you that such a request may be denied or adversely impacted where (a) GIAC has no existing relationship with such other testing program, (b) there is no data exchange interoperability with such other testing program, or (c) such other testing program will not accept any personal information from GIAC because it requires such information to be provided directly by the individual candidate. In other situations, GIAC will consider if it can meet the request for data portability.

With respect to the GIAC policies concerning my right to appeal test results and retesting, I acknowledge and agree that pursuant to those policies, and in its sole discretion, GIAC shall have the right to: (1) use my exam results, the proctor's report, and/or any information surrounding my test administration to conduct any investigation into any improprieties or score irregularities that may come to light, as well as to answer any questions I may have about my exam score(s), and/or as part of any appeal I make to my test score(s); and (2) invalidate my initial test results and/or require me to retest if it determines that sufficient factors exist that call into question the accuracy of my test score(s) and/or issuance of any certification(s). If I have any questions about my exam score(s) and/or certification issuance, including any retest determined by GIAC to be required, I agree to abide by GIAC's appeals process for any rights I may have to appeal my exam score(s) or certification decisions. I acknowledge and agree I have an obligation to cooperate with GIAC investigations as described above and provide requested information.

I further acknowledge and agree that GIAC shall have the right to use my test results to conduct research on future modifications to the assessments or for academic study, provided, however, that any such research or academic situation shall be conducted using anonymous data so that none of my personally-identifiable information (e.g., name, address, information from which my identity can be determined) is disclosed to anyone outside of GIAC who has not been designated by me.

I understand and agree that any and all testing materials where GIAC maintains ownership of the GIAC certificates/certifications, including all electronic media used in the administration of any GIAC test to me and/or all completed tests, become the exclusive property of GIAC and that GIAC will maintain them as strictly confidential, subject to the above-mentioned rights of GIAC. I agree that I will only claim to hold the GIAC certifications that I earned and to only claim to be proficient in the content areas covered by the certifications I have earned.

In light of the above, I understand and agree that I shall not release, disclose or share the content of any GIAC exam(s), test(s), or assessment(s) using the GIAC Exam Engine to any other party under any circumstances, including the use of social media, nor shall I attempt to copy, photograph, reconstruct, print, distribute, resell, or use the content of any test, including test content shared with me from another source, inasmuch as the test questions and protocols are copyrighted materials and their release would compromise the validity, integrity, and commercial value of the tests. Furthermore, I acknowledge and agree that I may be held liable for any reasonable damages GIAC incurs as a result of my breach of this provision.

Finally, with respect to all of the obligations and requirements to which I have agreed to abide to in this Agreement, I further acknowledge that those obligations and requirements are also embraced within the GIAC Code of Ethics to which I am bound, as a candidate and after I receive any GIAC certification. I agree that, when GIAC adheres to its above policy for sharing my test results and/or certifications with any appropriate entity, any use of that information by such entity shall be considered to be outside of GIAC's control. Accordingly, I affirmatively understand and agree that I shall have no legal rights against GIAC for any decision made by any person or entity to which I gave GIAC written consent to share this information, including my employer or organization if it paid for my training/examinations. I agree to indemnify and hold GIAC harmless against any claims of damages because of any such decisions made by others, whether based on my test results alone or in combination with any other factors, whether those damages were foreseeable or whether GIAC was aware that I might suffer such damages.

As part of the registration and testing process, I am providing all relevant information to GIAC to verify that I am the individual who has registered to take this test in consideration of my right to have it scored in accordance with the terms of this Agreement, and for GIAC to issue any certification to which my score may entitle me. I understand and agree that GIAC shall be entitled to take all commercially reasonable steps to verify and authenticate my identity for purposes of assuring that I am who I say I am and that I have the right to take any GIAC exam for which I have trained or otherwise registered. This Agreement shall be construed in accordance with the laws of the State of Maryland and the obligations, rights and remedies of the parties hereunder shall be determined in accordance with such laws.