The Global Industrial Cyber Security Professional certification, offered by GIAC, validates extensive knowledge across ten detailed domains of industrial control systems, operational technology security architecture, threat modeling, endpoint hardening, risk management, and incident response to protect modern infrastructure and connected production systems effectively during everyday facility operations across various industrial sectors.
Industrial control system engineers, information technology professionals, plant operators, and security analysts aiming to secure operational technology environments and manage risks across infrastructure systems successfully.
Carefully review official exam documentation, domain lists, and reference materials covering operational technology security, industrial control systems, and risk management frameworks to successfully master the ten exam domains before sitting for the test, ensuring you meet the required passing score during your testing session without any unexpected complications.
This domain focuses heavily on securing endpoint devices, executing hardening procedures, and protecting operating systems used within unique industrial control environments and operational technology networks against potential intrusions.
Candidates explore industrial control system components, underlying architectures, and typical operational topologies to understand how different hardware and software layers interact within the overall production framework and enterprise structure.
This section covers the fundamental concepts, basic principles, and operational overviews of industrial control systems, establishing a strong baseline for understanding broader technology deployments across various manufacturing and utility sectors.
This domain addresses the systematic development of governance programs, security policies, and administrative guidelines specifically tailored for complex industrial cybersecurity and operational technology environments operating under strict regulatory demands.
Learners focus on gathering actionable intelligence and performing threat modeling exercises designed to identify vulnerabilities and predict adversary movements within industrial settings while maintaining high levels of system availability.
This topic examines Purdue Enterprise Reference Architecture Level 0 and Level 1 physical technologies, underlying hardware components, and associated compromise vectors that threaten fundamental industrial processes and field devices.
This domain covers Purdue Enterprise Reference Architecture Level 2 and Level 3 supervisory control technologies, networking components, and the specific compromise vectors affecting these intermediate layers within the automation pyramid.
Registered candidates analyze communication protocols utilized across industrial systems, reviewing their unique messaging structures alongside respective security vulnerabilities and potential compromise methods during active facility operations in modern industrial plant environments.
This area focuses on risk-based disaster recovery planning, business continuity strategies, and structured incident response procedures tailored specifically for responding to operational emergencies in industrial environments and energy plants.
Registered candidates examine wireless communication technologies deployed in modern industrial settings, thoroughly evaluating their architectural designs, implementation challenges, and associated security compromises impacting remote site connectivity during critical operational tasks.
Manage your time effectively across the 82 questions during the 180-minute duration. Ensure you meet the passing score of 71%. Check with GIAC for the current certification path.
The certification exam consists of a total of 82 questions covering ten distinct domains of industrial cyber security and operational technology across your testing session.
To successfully pass this certification examination and earn your credential, the required passing score is set at 71% for all registered candidates taking the test.
Candidates taking this examination are given a total duration of 180 minutes to carefully read, analyze, and answer all questions presented on the test without rushing.
Yes, this page covers the current version of the Global Industrial Cyber Security Professional certification. Check with GIAC for the current certification path details before applying.
Verified 2026-08-30
This editorial page was constructed using official GIAC exam guidelines and verified facts regarding the exam structure, domain content, and testing criteria.