GIAC Certified Intrusion Analyst (GCIA)

GIAC

Validates a practitioner's knowledge of network and host monitoring, traffic analysis, and intrusion detection to configure and monitor intrusion detection systems and analyze network traffic.

We have a course for this

Built from this exam's published objectives. The first module is free.

GIAC GCIA

Advanced · 20 hrs

Baseline certification levels

This certification satisfies these DoD baseline levels — the IAT / IAM / IASAE / CSSP requirement many contracts still state. It's a separate question from the 8140 work roles above, and there is no official mapping between the two.

CSSP Analyst

What this qualifies you for

Listed specifically for 7 work roles — up to Advanced proficiency. Because options cascade downward, a cert listed at Advanced also satisfies Intermediate and Basic for that role.

441Network Operations (NETOPS) SpecialistPlans, implements, and operates network services/systems, to include hardware and virtual environments.Advanced 511Cyber Defense AnalystUses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs.) to analyze events that occur within their environments for the purposes of mitigating threats.Advanced 521Cyber Defense Infrastructure Support SpecialistTests, implements, deploys, maintains, and administers the infrastructure hardware and software.Advanced 531Cyber Defense Incident ResponderInvestigates, analyzes, and responds to cyber incidents within the network environment or enclave.Advanced 651Enterprise ArchitectDevelops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures.Advanced 652Security ArchitectDesigns enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.Advanced 722Information Systems Security Manager (ISSM)Responsible for the cybersecurity of a program, organization, system, or enclave.Advanced

Also listed for 14 Cyberspace Enablers roles — but so is every other certification

The Enablers matrix isn’t role-differentiated: the same certification options are listed for all 14 roles at every proficiency level. We verified that across all 14. So this is true, and it carries no information about this credential specifically — which is why it isn’t in the count above.

211 Forensics Analyst 221 Cyber Crime Investigator 711 Cyber Instructional Curriculum Developer 712 Cyber Instructor 731 Cyber Legal Advisor 732 Privacy Compliance Manager 751 Cyber Workforce Developer and Manager 752 Cyber Policy and Strategy Planner 801 Program Manager 802 IT Project Manager 803 Product Support Manager 804 IT Investment/Portfolio Manager 805 IT Program Auditor 901 Executive Cyber Leader

Renewal

4year cycle36CPE per cycle

Certification renewal, USD 499

This is the issuer’s clock. 8140 runs a second one — 20 hours of CPD a year, at every proficiency level, which applies even if you hold no certification at all. How that works

GIAC publishes objective areas without percentage weights; all domain weights are 0 by design. GCIA is a CyberLive (hands-on) certification per GIAC's CyberLive list.

Source: GIAC - GCIA certification page · dated 2026-07-17 · checked 2026-07-17

Verifying it

GIAC publishes a lookup a third party can use without your involvement.

Name or GIAC number

Issuer lookup Track this credential

GIAC publishes objective areas without percentage weights; all domain weights are 0 by design. GCIA is a CyberLive (hands-on) certification per GIAC's CyberLive list.

Source: GIAC - GCIA certification page · dated 2026-07-17 · checked 2026-07-17

Exam blueprint

Verified against GIAC’s published outline.

GCIA

Current

106 questions · 4 hours · passing score 67%

Advanced IDS Concepts

Application Protocols

Concepts of TCP/IP and the Link Layer

Fragmentation

IDS Fundamentals and Network Architecture

Intrusion Detection System Rules

IP Headers

IPv6

Network Forensics and Traffic Analysis

Packet Engineering

SiLK and Other Traffic Analysis Tools

TCP

Tcpdump Filters

UDP and ICMP

Wireshark Fundamentals

GIAC publishes objective areas without percentage weightings, so none are shown.

GIAC publishes objective areas without percentage weights; all domain weights are 0 by design. GCIA is a CyberLive (hands-on) certification per GIAC's CyberLive list.

Source: GIAC - GCIA certification page · dated 2026-07-17 · checked 2026-07-17