GIAC (SANS)GIAC Global Industrial Cyber Security Professional
The GIAC Global Industrial Cyber Security Professional (GICSP) certification validates your ability to secure industrial control systems across IT and OT environments. It bridges expertise in IT, engineering, and cybersecurity, preparing you to protect critical infrastructure throughout the ICS lifecycle. This vendor-neutral, practitioner-focused credential is ideal for professionals who engineer or support control systems and share responsibility for their security.
448 practice questions · Updated 2026-07-30
3Domains
10Objectives
70Concepts
448Questions
GICSP Curriculum
Every domain, objective, and concept the GICSP exam measures.
- ICS Components Overview
- Sensors and Actuators
- Controllers (PLC, RTU, DCS)
- Human-Machine Interface (HMI)
- Communication Protocols and Networks
- ICS Architecture Layers
- Field Devices and Instrumentation
- Control Loop Fundamentals
- ICS Data Flow and Integration
- Redundancy and Reliability in ICS
- ICS Definition and Purpose
- ICS Components
- ICS vs. IT Systems
- ICS Architecture Layers
- ICS Communication Protocols
- ICS Operational Technology (OT) Environment
- ICS Security Challenges
- PERA Model Overview
- Level 0 Technology
- Level 1 Technology
- Communication Between Levels 0 and 1
- Compromise of Level 0 and 1
- PERA Model Overview
- Level 2 Technology Components
- Level 3 Technology Components
- Data Flow Between Levels 2 and 3
- Compromise Vectors for Level 2
- Compromise Vectors for Level 3
- Impact of Compromise on Operations
- Intelligence Gathering Methods
- Threat Modeling Frameworks
- Attack Surface Analysis
- Threat Actor Profiling
- Vulnerability Identification
- Risk Assessment and Prioritization
- Protocol Vulnerabilities
- Communication Compromises
- Attack Vectors in ICS
- Mitigation Strategies
- Wireless Attack Vectors
- Wireless Encryption Weaknesses
- Wireless Reconnaissance Techniques
- Wireless Intrusion Detection
- Wireless Security Controls
- Endpoint Hardening Fundamentals
- Patch Management
- Configuration Management
- Access Control for Endpoints
- Endpoint Monitoring and Logging
- Endpoint Protection Tools
- Physical Security of Endpoints
- Endpoint Lifecycle Management
- ICS Program Definition
- Policy Development Process
- Regulatory and Standards Alignment
- Risk Management Integration
- Roles and Responsibilities
- Policy Implementation and Enforcement
- Training and Awareness
- Continuous Improvement
- Risk-Based Disaster Recovery Planning
- Business Impact Analysis (BIA)
- Recovery Strategies and Alternatives
- Incident Response Lifecycle
- Incident Response Team Roles and Responsibilities
- Incident Detection and Analysis
- Containment, Eradication, and Recovery
- Post-Incident Activities and Lessons Learned
- Integration of Disaster Recovery and Incident Response
- Testing and Exercising Plans
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for GICSP, so none is invented.