GSOM certification: exam, cost and passing score

What is the GSOM certification?

GIAC says the GSOM certification validates a practitioner’s ability to field an effective Security Operations Center. Holders, in GIAC’s words, are qualified to manage a technical team and strategically operate a SOC in alignment with an organisation’s business goals and security requirements.

That makes GSOM a management credential with a technical core. It is not about running one investigation well; it is about designing the SOC, choosing what data to collect, deciding which alerts deserve an analyst’s time, measuring whether the team is getting better and planning the next stage of its maturity.

GIAC announced GSOM on 14 June 2022. It shows no retirement or “In Abeyance” notice for GSOM; its pricing page marks five other certifications that way, not this one. As of 14 October 2026 the GSOM cert is an active, bookable GIAC certification.

Source: GIAC — GSOM certification. Checked 14 October 2026.

Who should take the GSOM?

GIAC names SOC managers or leads, security directors, lead and senior SOC analysts, technical CISOs and new security operations team members as the audience. The common thread is responsibility for how the SOC works, not only what it detects.

GIAC’s launch announcement adds that GSOM is meant for people interested in cybersecurity leadership roles. The author of the affiliated SANS course put it this way: obtaining the GSOM demonstrates a practical understanding of how a truly advanced security team operates.

Source: GIAC — Press announcement, 14 June 2022. Checked 14 October 2026.

How much does the GSOM certification cost?

A standalone GSOM certification attempt costs $999. GIAC lists its prices in USD and states that they exclude applicable sales tax.

Other published GSOM fees: an exam retake is $899, an attempt extension is $479, and an official practice exam is $399. A missed proctored appointment costs a $175 reseating fee and comes with a seven-day extension from your current deadline.

The attempt can also be bought together with SANS training. GIAC does not print that bundle price on its pricing page, so rely on the figure shown when you register.

Source: GIAC — Pricing. Checked 14 October 2026.

GSOM exam format

The GSOM exam is one proctored exam with 75 questions and a two-hour time limit. All GIAC exams are web-based and must be proctored, either remotely through ProctorU or onsite at a Pearson VUE testing center.

You have 120 days from the date a standalone attempt is activated to sit the exam. Plan backwards from that deadline and book your slot early.

GIAC exams are open book, but not open internet or open computer. You may bring an armful of printed books and notes; printed material that looks like practice test or exam questions with answers is strictly prohibited. For a management exam with ten broad objectives, a printed index that lets you find frameworks and metrics quickly is worth building.

Source: GIAC — Proctor Program Overview. Checked 14 October 2026.

GSOM passing score

GIAC has set the GSOM passing score at 66% for all candidates who receive the exam version released on or after 26 February 2022.

Two hours for 75 questions leaves roughly a minute and a half per question. Open book helps only if you already know where to look, so do not plan to research answers during the exam.

Source: GIAC — GSOM certification. Checked 14 October 2026.

What is on the GSOM exam?

GIAC publishes ten exam objectives for GSOM. They follow the life of a SOC: design and planning, data collection, tooling, alerting, threat hunting, incident response, metrics and continuous improvement. GIAC does not publish a weighting per objective.

• Continuous Improvement — using post-incident data, automation, analytic testing and adversary emulation to optimise SOC operations
• Cyber Defense Theory, Threat Intel, and Defensible Architecture
• Data Source Assessment and Collection — planning and prioritising data collection and enrichment for SOC monitoring
• Managing Alert Creation and Processing — alert creation, prioritisation and classification for efficient triage
• Managing Incident Response Execution — effective investigations through each phase of the incident response cycle
• Preparing for Incident Response — preparation requirements and the role of incident response in SOC operations
• Proactive Detection and Analysis — threat hunting, active defence and community-sourced resources
• SOC Analytics and Metrics — metrics, goals and analytics that drive a strategic plan for SOC maturity
• SOC Design and Planning — assessing business goals, threats, attack paths and risk to design and staff the SOC
• SOC Tools and Technology — common SOC tools, how they support operations and how to secure them

Source: GIAC — GSOM certification. Checked 14 October 2026.

GSOM prerequisites

GIAC lists no formal prerequisites for GSOM. You can buy an attempt without documented management experience.

SANS says the associated course has no specific prerequisites either, but suggests that students have some experience in an operational security role. That is a fair reading of the exam too: the objectives assume you know what an analyst does all day, and ask how you would organise, measure and improve that work.

Source: SANS Institute — LDR551. Checked 14 October 2026.

GSOM training: SANS LDR551

SANS, GIAC’s official training partner, states that LDR551: Building and Leading Security Operations Centers is built around the exam objectives that make up the GIAC Security Operations Manager (GSOM) certification. It runs five days instructor-led or 30 hours self-paced and carries 30 CPEs.

The self-paced OnDemand version lists at $8,260 USD; live event prices vary by location and currency. Training is optional — GIAC sells the attempt on its own.

Source: SANS Institute — LDR551. Checked 14 October 2026.

How long is the GSOM certification valid?

GIAC certifications run on a four-year cycle: you collect 36 credits over four years to keep the certification active. The renewal fee GIAC lists for GSOM is $499; additional renewals within two years of paying a full-price renewal cost $249.

SANS course CPEs count towards renewal, so a later SANS course can serve two purposes at once.

Source: GIAC — Renewal. Checked 14 October 2026.

GSOM vs GSOC

GSOC, GIAC Security Operations Certified, also has 75 questions in two hours, with a 67% passing score. GIAC says it validates a practitioner’s ability to defend an enterprise using essential blue team incident response tools — the analyst’s view of the SOC.

GSOM sits one level up. It asks how the SOC itself is designed, staffed, measured and improved. Analysts who want to prove hands-on defence skills fit GSOC; leads and managers who own the SOC’s performance fit GSOM.

Source: GIAC — GSOC certification. Checked 14 October 2026.

GSOM practice tests, dumps and practice questions

GIAC sells an official GSOM practice exam for $399. GIAC states that practice exams simulate the real test engine and question style, that the bank of practice questions is limited, and that practice exams never include actual exam questions.

Avoid exam dumps. GIAC’s Exam Integrity Policy treats any use of or reference to exam dump sites containing actual or possible GIAC questions as a violation, with sanctions up to revocation of previously issued certifications and bans from future GIAC certifications.

Certsqill GSOM practice questions are expert-developed, with an explanation for every answer option and a readiness score per domain, so you see which of the ten objectives still need work. Access comes with a 7-day money-back guarantee.

Source: GIAC — Exam Integrity Policy. Checked 14 October 2026.

GSOM questions people ask

What is the GSOM certification?

The GIAC Security Operations Manager certification, which GIAC says validates the ability to field an effective Security Operations Center. Source: GIAC, checked 14 October 2026.

How much does the GSOM exam cost?

$999 for a standalone certification attempt, in USD and excluding sales tax. A retake is $899. Source: GIAC Pricing, checked 14 October 2026.

How many questions are on the GSOM exam?

75 questions in 2 hours. Source: GIAC GSOM certification page, checked 14 October 2026.

What is the GSOM passing score?

66% for exam versions released on or after 26 February 2022. Source: GIAC GSOM certification page, checked 14 October 2026.

Is the GSOM exam open book?

Yes. GIAC exams are open book, but not open internet or open computer. Source: GIAC Proctor Program Overview, checked 14 October 2026.

Can I take the GSOM exam online?

Yes, through remote proctoring with ProctorU, or onsite at Pearson VUE. Source: GIAC, checked 14 October 2026.

Which SANS course prepares for the GSOM cert?

LDR551: Building and Leading Security Operations Centers, built around the GSOM exam objectives. It is optional. Source: SANS, checked 14 October 2026.

Do I need management experience for GSOM?

GIAC lists no prerequisites. SANS suggests some experience in an operational security role for LDR551. Checked 14 October 2026.

How do I renew the GSOM certification?

Collect 36 credits over four years and pay the renewal fee, listed at $499. Source: GIAC, checked 14 October 2026.