Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

Global Industrial Cyber Security Professional Certification (GICSP)

OT & ICS Certification Overview

Validates skill securing industrial control systems, from architecture and hardening to incident response, threat modeling, and program governance.

Explore ICS410 CourseRegister for the Exam
GICSP Badge
Jump to:

What Is the GICSP Certification?

The GICSP certification confirms a practitioner can secure industrial control systems across their full lifecycle, spanning IT, engineering, and cyber security. It's a vendor-neutral credential held by professionals across a range of roles who share responsibility for control system security.

By the numbers

3 hrs

Exam duration

82

Questions

71%

Min. passing score

What GICSP Covers

The objectives group into five practical domains that map directly to ICS410's section structure.

ICS Fundamentals & Architecture

Covers ICS Overview & Concepts and ICS Components & Architecture, including the Purdue Reference Architecture.

Threat Surface & Level 0/1 Attacks

Covers Intelligence Gathering & Threat Modeling and PERA Level 0 & 1 Technology Overview and Compromise.

Protocols & Wireless Security

Covers Protocols, Communications, & Compromises and Wireless Technologies & Compromises.

Level 2/3 Systems & Endpoint Hardening

Covers PERA Level 2 & 3 Technology Overview and Compromise and Hardening & Protecting Endpoints.

Program, Policy & Incident Response

Covers ICS Program & Policy Development and Risk Based Disaster Recovery & Incident Response.

Prepare With This Course

ICS410: ICS/SCADA Security Essentials

Course Details

How ICS410 Prepares You for GICSP

ICS410 is built around the exam objectives that make up the GICSP certification: 

  • Section 1, ICS Overview builds skills tested under ICS Overview & Concepts and ICS Components & Architecture.
  • Section 2, Architectures and Processes aligns with Intelligence Gathering & Threat Modeling and PERA Level 0 & 1 Technology Overview and Compromise.
  • Section 3, Communications and Protocols aligns with Protocols, Communications, & Compromises and Wireless Technologies & Compromises.
  • Section 4, Supervisory Systems aligns with PERA Level 2 & 3 Technology Overview and Compromise and Hardening & Protecting Endpoints.
  • Section 5, ICS Security Governance aligns with ICS Program & Policy Development and Risk Based Disaster Recovery & Incident Response.
  • Section 6, Capstone CTF applies the full objective set in a live incident-response exercise.

Across all six sections, 15 hands-on labs and a capstone Capture the Flag challenge give you the chance to apply each skill in a live ICS/OT network before you sit the exam. 

Read the full GICSP certification overview: GIAC's GICSP page 

ICS410 Author

Justin Searle
Justin Searle

Justin Searle

Director of ICS Security at InGuardians, Inc.

Justin Searle has redefined industrial cybersecurity by leading the development of NIST IR 7628, a cornerstone in smart grid security, and creating open-source tools like ControlThings that have become essential for ICS/IIoT assessments.

Read more about Justin Searle

Who It's For

IT & OT Support Practitioners

ICS/OT Security Analysts & Engineers

Industry Managers & Professionals

Control System Vendors & Integrators

Engineering Teams

Frequently Asked Questions

GICSP certification holders can secure industrial control systems across their full lifecycle, spanning IT, engineering, and cyber security. It's a vendor-neutral credential held by professionals across a range of roles who share responsibility for control system security.

The GICSP exam is a single proctored exam, 82 questions, taken over 3 hours, with a minimum passing score of 71%.

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC's renewal page.

GICSP is designed for IT and OT support practitioners, ICS/OT security analysts and engineers, industry managers and professionals, control system vendors and integrators, and engineering teams.

ICS410: ICS/SCADA Security Essentials is built around GICSP's exam objectives, with 15 hands-on labs, including programming a physical PLC you keep after class, and a capstone Capture the Flag exercise built around an ICS/OT incident-response scenario.

Ready to earn your GICSP certification?

Add the GICSP exam attempt when you register for FOR500.

Register for FOR500

Already trained? Register for the exam directly through GIAC here.