GISF (GIAC Information Security Fundamentals)
GISF covers the foundations of security, computer functions and networking, introductory cryptography, and cybersecurity technologies. Its objectives also include threat frameworks, identity and data protection, cloud and connected environments, and the use of automation and AI in security operations. The audience includes people new to cyber security, non-IT security managers, career changers, and anyone who writes, implements, or must follow enterprise security policy. For DoD 8140, GIAC pairs it with SANS SEC301.
Updated
Exam Details
- Issuer
- GIAC
- Level
- Entry
- Exam type
- Multiple choice
- Questions
- 75
- Duration
- 2 hours
- Passing score
- 69%
- Exam fee
- $499
- Validity
- 4 years
- Tracks
- Foundations
Open-book, web-based exam, proctored remotely through ProctorU or onsite at a Pearson VUE test center.
Price of one certification attempt with 120 days of access. A retake after a failed attempt is $249, a 45-day extension is $249, and a practice test is $219. Prices exclude sales tax.
Requirements and Renewal
Prerequisites
None. GIAC sets no prerequisites for any certification attempt but recommends a training course first.
Renewal
Earn 36 CPEs during the four-year cycle (or retake the exam) and pay the $249 renewal fee.
Exam Domains
12 domains| Domain |
|---|
| Adversary Analysis and Threat Frameworks |
| Defensive Technologies and Emerging Intelligence |
| Foundations of Cryptography and Digital Trust |
| Foundations of Cybersecurity |
| Foundations of Network Communication |
| Identity, Access and Data Protection |
| Intrusion and Initial Access Techniques |
| Managing and Mitigating Cyber Risk |
| Network Security and Architecture |
| Post-Exploitation and Advanced Threat Techniques |
| Securing Connected and Cloud-Based Environments |
| Security Foundations and Awareness |
DoD 8140 Work Roles
7 work rolesThe DoD 8140 Qualification Matrix V2.1 lists GISF as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does GISF stand for?→
GISF stands for GIAC Information Security Fundamentals. GIAC itself was previously named Global Information Assurance Certification.
How much does GISF cost?→
A GISF certification attempt costs $499, and a retake after a failed attempt costs $249. Prices exclude sales tax.
How many questions are on the GISF exam?→
The exam has 75 questions with a 2-hour limit. GIAC set the passing score at 69% for exam versions released on or after March 7, 2026.
What happens if you fail a GIAC exam?→
Candidates can buy a retake within 30 days after the attempt deadline and must wait 30 days before sitting again. After three failed attempts the attempt ends, and a new one cannot be bought for one year.
Sources
- GIAC: GIAC Information Security Fundamentals (GISF)
- GIAC Knowledge Base: Proctor Program Overview (open book guidelines)
- GIAC: How to Renew
- GIAC Certification Pricing and Fees
- GIAC Knowledge Base: Renewal
- GIAC Knowledge Base: Retakes and Extensions
- GIAC: DoD 8140 Directive
- GIAC Company Info
- GIAC Proctoring
- GIAC Blog: Applied Knowledge exams compared with Practitioner exams
Exam details are checked against official GIAC pages. Fees, exam versions, and renewal rules change; confirm with GIAC before registering. GISF is a trademark of its owner. This site is not affiliated with or endorsed by GIAC.