GRID (GIAC Response and Industrial Defense)
GRID covers active defense strategies for protecting industrial control system (ICS) networks and systems, and how ICS-specific attacks inform mitigation. Holders apply network security monitoring (NSM), digital forensics and incident response (DFIR), and active defense techniques, along with threat hunting and threat intelligence in ICS environments. The audience includes ICS incident response teams, ICS and OT security personnel, SOC analysts, and ICS red teams. GIAC pairs it with SANS ICS515.
Updated
Exam Details
- Issuer
- GIAC
- Level
- Intermediate
- Exam type
- Multiple choice
- Questions
- 75
- Duration
- 2 hours
- Passing score
- 74%
- Exam fee
- $999
- Validity
- 4 years
- Tracks
- OT and ICS Security, Forensics and Incident Response
Open-book, web-based exam, proctored remotely through ProctorU or onsite at a Pearson VUE test center.
Price of one certification attempt with 120 days of access. A retake after a failed attempt is $899, a 45-day extension is $479, and a practice test is $399. Prices exclude sales tax.
Requirements and Renewal
Prerequisites
None. GIAC sets no prerequisites for any certification attempt but recommends a training course first.
Renewal
Earn 36 CPEs during the four-year cycle (or retake the exam) and pay the $499 maintenance fee. Additional renewals within two years of a full-price renewal cost $249.
Exam Domains
7 domains| Domain |
|---|
| Active Defense in an ICS Environment |
| Detection in an ICS Environment |
| Incident Response in an ICS Environment |
| Monitoring in an ICS Environment |
| Threat Hunting and Analysis in an ICS Environment |
| Threat Intelligence in an ICS Environment |
| Visibility and Asset Awareness in an ICS Environment |
DoD 8140 Work Roles
3 work rolesThe DoD 8140 Qualification Matrix V2.1 lists GRID as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does GRID stand for?→
GRID stands for GIAC Response and Industrial Defense. GIAC itself was previously named Global Information Assurance Certification.
How much does the GRID exam cost?→
One GRID certification attempt costs $999. A retake is $899 and a practice test is $399.
How many questions are on the GRID exam?→
The exam has 75 questions and a 2-hour time limit, with a passing score of 74% for versions released on or after July 8, 2017.
What happens if you fail a GIAC exam?→
Candidates can buy a retake within 30 days after the attempt deadline and must wait 30 days before sitting again. After three failed attempts the attempt ends, and a new one cannot be bought for one year.
Sources
- GIAC: GIAC Response and Industrial Defense (GRID)
- GIAC Knowledge Base: Proctor Program Overview (open book guidelines)
- GIAC: How to Renew
- GIAC Certification Pricing and Fees
- GIAC Knowledge Base: Renewal
- GIAC Knowledge Base: Retakes and Extensions
- GIAC: DoD 8140 Directive
- GIAC Company Info
- GIAC Proctoring
- GIAC Blog: Applied Knowledge exams compared with Practitioner exams
Exam details are checked against official GIAC pages. Fees, exam versions, and renewal rules change; confirm with GIAC before registering. GRID is a trademark of its owner. This site is not affiliated with or endorsed by GIAC.