SANS Security Administration technical training is second to none and with the information security job market booming certification numbers continue to rise across the board. The generalist GSEC credential leads the way numbers wise but it is the incident handler (GCIH) certification that is hot in the marketplace. The GCIH credential is coveted in the industry and it’s popularity is acknowledgement by the industry that incidents will happen and effective response is essential. Skilled incident response analysts are essential to modern information security organizations to help identify incidents and minimize the impact to the enterprise after they occur.
Predictions for 2015:
- The number of GCIH certification holders continue to rise. This is a valuable credential that blends both incident response and the ability to understand hacker tools and techniques. Expect 15,000 certification holders by end of year.
- The GICSP certification’s growth will rapidly rise in response to the increasing awareness of high impact process control related cyber security events (German Steel and Turkish pipeline recent news) and the desire to build programs to mitigate the risks.
- The GCED Enterprise Defender credential will experience rapid growth and be top 6 in overall numbers in this domain by 2016.
- The GCCC certification will grow but struggle to obtain the success of the other certifications ahead of it due to being more a generalist credential focused on implementing the SANS Top 20 Controls.
All of these SANS Administration domain credentials have a base price of $1,099 (prior to any training related discounts). All of the certifications require renewal after 4 years which can be accomplished via 36 Continuing Education Credits and a renewal fee of $399. Another option to retain the certification after the four years is to retake the exam.
Here is the Security Administration domain summary table summarizing the key information for these certifications as of January 2015.
|Certification Name||Total Certificates Issued as of 1/19/15||# of Exam Questions||Exam Time Limit (hrs)||Minimum Passing Score|
|GIAC Security Essentials (GSEC)||15749||180||5||73%|
|GIAC Certified Incident Handler (GCIH)||10439||150||4||72%|
|GIAC Certified Intrusion Analyst (GCIA)||4662||150||4||67%|
|GIAC Penetration Tester (GPEN)||3663||115||3||74%|
|GIAC Web Application Penetration Tester (GWAPT)||2292||75||2||70%|
|GIAC Certified Perimeter Protection Analyst (GPPA)||1772||75||2||69%|
|GIAC Certified Windows Security Administrator (GCWN)||1528||75||2||66%|
|GIAC Information Security Fundamentals (GISF)||1081||75||2||70%|
|GIAC Assessing and Auditing Wireless Networks (GAWN)||881||75||2||71%|
|GIAC Certified Enterprise Defender (GCED)||865||115||3||68%|
|GIAC Certified UNIX Security Administrator (GCUX)||755||75||2||65%|
|GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)||517||75||3||66%|
|Global Industrial Cyber Security Professional (GICSP)||351||115||3||69%|
|GIAC Mobile Device Security Analyst (GMOB)||345||75||2||66%|
|GIAC Critical Controls Certification (GCCC)||48||75||3||71%|