GISF certification: cost, exam format and training

What is the GISF certification?

GISF stands for GIAC Information Security Fundamentals. GIAC describes it as a certification that validates a practitioner’s expertise in core information security concepts and the ability to apply best practices to protect an organisation from threats and risks.

GIAC’s own list of who it is for starts with anyone new to cyber security who needs an introduction to security fundamentals, and continues with non-IT security managers, professionals with basic technical and computer knowledge, career-changers, managers, information security officers and system administrators, and anyone who writes, implements or must follow an enterprise security policy.

GIAC lists no prerequisites. You do not need a degree, a prior cert or a course to buy an attempt, so GISF can be the first step on a security path, ahead of more technical GIAC certifications such as GSEC.

Source: GIAC — GIAC Information Security Fundamentals (GISF). Checked 10 October 2026.

How much does the GISF certification cost?

GIAC’s pricing page lists a standalone GISF certification attempt at US$499. That is half the US$999 GIAC charges for a GSEC attempt.

The other GISF fees on the same page: an exam retake is US$249, an attempt extension US$249, a renewal US$249 and a practice exam US$219. GIAC sells no demo questions for GISF. A missed proctored appointment costs a US$175 reseating fee.

All prices are in US dollars and exclude sales tax, and GIAC states that orders are non-transferable and non-refundable once access has been granted — so buy the attempt when you are ready to start the 120-day clock, not months in advance.

Source: GIAC — Certification pricing and fees. Checked 10 October 2026.

GISF exam format and passing score

The GISF exam is one proctored exam with 75 questions and a time limit of 2 hours, so you have a little over a minute and a half per question.

GIAC has set the passing score at 69% for all candidates who receive the exam version released on or after 7 March 2026. That date matters: the exam was refreshed this year, so older descriptions of GISF may describe a different exam. GIAC tells candidates to check the Certification Information section of their GIAC account for the format and passing score that apply to their own attempt.

You choose between remote proctoring through ProctorU and onsite proctoring at a Pearson VUE test center; GIAC notes that both options may not be available for every attempt. After activation you have 120 days to sit the exam.

Source: GIAC — GIAC Information Security Fundamentals (GISF). Checked 10 October 2026.

Is the GISF exam open book?

Yes, in the GIAC sense. GIAC states that its exams are open book format: you may bring printed books and handwritten or printed notes into the testing area.

They are not open internet or open computer. You cannot access anything stored electronically, phones and tablets are not allowed, and printed material that looks like practice test or exam questions with answers is prohibited. A short, well-organised set of notes on the twelve objectives below is more useful in a 2-hour exam than a stack of books you cannot search quickly.

Source: GIAC — Proctor program overview. Checked 10 October 2026.

What is on the GISF exam?

GIAC publishes twelve exam certification objectives for GISF. It does not publish a weighting, so treat them as equally important. The list reaches further than the name suggests: next to networking and cryptography basics it covers adversary analysis with threat frameworks, attacker techniques from initial access to post-exploitation, and the use of automation and AI in defence.

• Adversary Analysis and Threat Frameworks
• Defensive Technologies and Emerging Intelligence
• Foundations of Cryptography and Digital Trust
• Foundations of Cybersecurity
• Foundations of Network Communication
• Identity, Access and Data Protection
• Intrusion and Initial Access Techniques
• Managing and Mitigating Cyber Risk
• Network Security and Architecture
• Post-Exploitation and Advanced Threat Techniques
• Securing Connected and Cloud-Based Environments
• Security Foundations and Awareness

Source: GIAC — GIAC Information Security Fundamentals (GISF). Checked 10 October 2026.

GISF training: SANS SEC301

GIAC links GISF to training from SANS, available live and OnDemand. The course SANS maps to GISF is SEC301: Cybersecurity Fluency for Business Professionals — five days instructor-led or 30 hours self-paced, worth 30 CPEs. SANS lists the OnDemand version at US$3,000.

SANS describes SEC301 as designed primarily for non-technical professionals whose work intersects with cybersecurity, and states that no prior cybersecurity, coding or IT experience is required.

Training is optional. GIAC does not require a course to sit the GISF exam, so self-study against the objectives is a legitimate route — especially if you already work in IT and mainly need to fill gaps.

Source: SANS Institute — SEC301 course page. Checked 10 October 2026.

GISF study guide: how to prepare

Start from GIAC’s own objective list above; it is the only official definition of what the exam covers. For each objective, write down what you would need to explain to a colleague — how a TLS handshake establishes trust, what separates authentication from authorisation, how an attacker moves from initial access to persistence.

Then build your printed notes and an index. Because the exam is open book but time-limited, the index is what turns your material into fast answers.

GIAC sells an official GISF practice exam for US$219. GIAC states that practice exams never include actual exam questions and that the bank of practice questions is limited, so you may see the same question on more than one practice test. Use it as a timing and coverage check, not as a source of answers.

Source: GIAC — GIAC Information Security Fundamentals (GISF). Checked 10 October 2026.

GISF exam dumps

GIAC’s exam integrity policy explicitly lists any use of or reference to “exam dump” sites containing actual or possible GIAC questions or answers as misconduct, along with sharing or accepting knowledge of test content.

The listed sanctions include revocation of previously issued GIAC certifications and bans from future GIAC programmes. Printed dump material is also banned from the open-book exam room. For a fundamentals cert built to prove understanding, a dump would also defeat the purpose.

Source: GIAC — Exam integrity policy. Checked 10 October 2026.

GISF renewal

GIAC certifications are renewed by collecting 36 credits over four years. The GISF renewal fee on GIAC’s pricing page is US$249.

GIAC’s renewal page explains how credits are assigned and justified in your GIAC account. Log them as you earn them rather than trying to collect all 36 in the final year.

Source: GIAC — Certification renewal. Checked 10 October 2026.

GISF vs GSEC

GSEC, GIAC Security Essentials, is the broader GIAC security cert and a heavier exam: 106 questions in 4 hours with a 72% passing score on the version released on or after 6 April 2026, and a standalone attempt costs US$999 against US$499 for GISF.

GISF suits people who need security fluency for their role or are entering the field. GSEC targets security professionals and administrators who apply those concepts hands-on. GIAC publishes no salary data for either cert, so choose by the job you do or want next.

Source: GIAC — GIAC Security Essentials (GSEC). Checked 10 October 2026.

GISF practice questions

Certsqill’s GISF practice questions come with an explanation for every answer option and a readiness score for each of GIAC’s twelve objectives, so you can see which area still needs work before you book the exam.

GISF questions people ask

What is the GISF certification?

GIAC Information Security Fundamentals, GIAC’s entry-level security cert for newcomers, managers and career-changers. GIAC lists no prerequisites. Source: GIAC, checked 10 October 2026.

How much does the GISF exam cost?

US$499 for a standalone certification attempt; a retake costs US$249 and a practice exam US$219, excluding sales tax. Source: GIAC pricing, checked 10 October 2026.

How many questions are on the GISF exam?

75 questions in one proctored exam with a 2-hour limit. Source: GIAC GISF page, checked 10 October 2026.

What is the GISF passing score?

69% for the exam version released on or after 7 March 2026. Source: GIAC GISF page, checked 10 October 2026.

Is the GISF exam open book?

Yes, for printed books and notes; no electronic material, internet or stored files. Source: GIAC proctor program overview, checked 10 October 2026.

Do I need training to take the GISF exam?

No. GIAC lists no prerequisites. SANS SEC301 is the course mapped to GISF, but it is optional. Source: GIAC and SANS, checked 10 October 2026.

How long do I have to take the GISF exam?

120 days from activation of a standalone attempt; an extension costs US$249. Source: GIAC, checked 10 October 2026.

How do I renew GISF?

Collect 36 credits over four years and pay the US$249 renewal fee. Source: GIAC, checked 10 October 2026.

What salary can I expect with GISF?

GIAC publishes no salary data for GISF holders, so this page gives no figure. GISF documents fundamentals; pay depends on the role it helps you reach.