- The Number: 69% of 75 Questions
- What 69% Means in Practice
- How the Passing Standard Applies to Your Attempt
- Exam Conditions That Shape Your Score
- Spreading Your Points Across the Six Domains
- Making Open Book Work for Your Score
- The Cost of Missing the Mark
- A Domain-Ordered Preparation Sequence
- After You Pass: Validity and Renewal
- Frequently Asked Questions
- The GOSI minimum passing score is 69% on a 75-question, 2-hour, proctored web-based exam.
- Answers cannot be changed once submitted, so commit only after checking your index or notes.
- The 69% standard applies to exam versions released on or after June 17, 2023.
- GIAC publishes no domain weights, so prepare for all six domains rather than gambling on a few.
The Number: 69% of 75 Questions
If you are preparing for the GIAC Open Source Intelligence Certification (GOSI), the single most important figure to anchor on is the minimum passing score: 69%. The exam is a single proctored, web-based test containing 75 questions with a 2-hour time limit. Everything else about your preparation, from how you build your index to how you pace yourself, should be reverse-engineered from that threshold.
This article breaks down what the passing standard means, which version of the exam it applies to, how it interacts with GOSI's open-book rules, and how to plan your preparation so you clear the bar with room to spare. If you are still deciding whether to pursue the credential at all, our GOSI ROI analysis covers the career side, and the overview of GOSI certification explains what the credential represents.
What 69% Means in Practice
GIAC states the minimum passing score as a percentage. With 75 questions on the exam, 69% works out to roughly 52 correct answers if every question carries equal weight (75 x 0.69 = 51.75). Treat that arithmetic as a planning heuristic rather than an official conversion: GIAC publishes the percentage, and the assigned attempt's details are what ultimately govern. The practical takeaway is that you can miss roughly a quarter of the questions and still pass, but not much more.
Why the margin matters
A 2-hour limit across 75 questions gives you a little over a minute and a half per question on average. Open-source intelligence questions are rarely pure recall. Many require you to reason about a scenario, such as which technique, tool category, or data source fits an investigative problem, and then locate supporting detail in your reference materials. That combination of reasoning and lookup is what eats time, so the real margin you need is not just correct knowledge but correct knowledge retrieved quickly.
- Threshold: 69% minimum passing score.
- Questions: 75 in total.
- Time: 2 hours, with 15 minutes of break time allowed.
- Answer changes: not permitted once submitted.
How the Passing Standard Applies to Your Attempt
GIAC notes that the 69% passing standard applies to exam versions released on or after June 17, 2023. That is the date attached to the passing-standard notice, not the publication date of the objectives list, and GIAC does not state a separate public edition date for the objectives. If you see older material quoting a different threshold, treat it with caution.
This is a point worth taking seriously because third-party pages often lag behind issuer changes. For the broader picture of how candidates fare against this threshold, see our analysis of the GOSI pass rate, which stays qualitative where GIAC publishes no figures, and the companion piece on how hard the GOSI exam is.
Exam Conditions That Shape Your Score
The passing score is only half the story. The conditions under which you earn those points matter just as much.
| Condition | GOSI Detail | Why It Affects Your Score |
|---|---|---|
| Question count | 75 questions | Sets the scale for how many misses you can absorb |
| Time limit | 2 hours | Forces efficient lookup in your materials |
| Passing score | 69% minimum | Defines the target |
| Open book | Hardcopy books, notes, and an index allowed | Rewards a well-built index |
| Prohibited | Internet access, personal electronic references, and materials resembling practice or exam questions and answers | Rules out digital shortcuts and question-bank material in the room |
| Answer changes | Not allowed after submission | Demands deliberate commitment |
| Breaks | 15 minutes of break time | Plan when to use it |
| Delivery | Pearson VUE onsite or ProctorU remotely, subject to attempt-specific eligibility | Affects your testing environment |
Interpreting the no-changes rule
Because submitted answers cannot be changed, you cannot loop back at the end and revise a shaky response the way you might on other exams. Build your pacing so that every question gets your best answer the first time. If a question genuinely stumps you, spend the extra seconds in your index before committing rather than guessing and hoping to return.
Spreading Your Points Across the Six Domains
GIAC lists six exam-objective headings in a published order, and it does not publish percentage weights for them. That means you cannot calculate a safe strategy such as "master two heavy domains and skim the rest." Since any domain could contribute meaningfully to your 69%, the safest approach is balanced competence with deliberate depth where your background is thin. Our full breakdown lives in the GOSI exam domains guide; here is how each domain relates to scoring.
Domain 1: Investigating Businesses
Expect scenarios about researching organizations and the records and sources that reveal how companies are structured and connected.
- Know which source categories answer which business questions
- Practice linking entities, not just finding isolated facts
Domain 2: Investigating People
This area centers on researching individuals through publicly available information, with the ethical and accuracy considerations that come with it.
- Understand how to corroborate identity information across sources
- Recognize the limits and risks of attribution
Domain 3: Network Data and Infrastructure Analysis
This is where technical candidates often feel at home and non-technical analysts feel exposed. It covers researching internet infrastructure and network-related data.
- Be comfortable interpreting infrastructure-related findings
- Know what different network data sources can and cannot tell you
Domain 4: OSINT Methodology
Process questions reward candidates who think like structured investigators rather than tool operators.
- Understand how to frame a collection problem and validate results
- Know how methodology choices affect reliability
Domain 5: Privacy and Operational Security Fundamentals
This domain covers protecting yourself and your investigation while collecting from public sources.
- Understand how your own footprint can compromise an investigation
- Know the fundamentals of separating investigative activity from personal identity
Domain 6: Searching, Collecting, and Processing Data
The hands-on core: finding information effectively and turning raw collection into usable material.
- Know search technique concepts, not only tool names
- Understand how collected data gets processed and preserved
Key Takeaway
Because no official weights exist, treat a weak domain as a direct threat to the 69% line. Identify your two weakest headings early and give them extra review time rather than polishing strengths.
Making Open Book Work for Your Score
GOSI allows hardcopy books, notes, and an index. Internet access and personal electronic references are prohibited, as are materials resembling practice or exam questions and answers. The open-book allowance is real, but it is not a free pass. Candidates who treat it as one tend to burn their 2 hours flipping pages.
What a high-value index does
A strong index maps concepts, tools, and terms to locations in your materials so you can confirm an answer in seconds. Build it while you study, not the week before the exam, because the act of indexing is itself a form of review. Our GOSI cheat sheet shows the kind of compact fact review that complements an index, and the GOSI study guide covers how to fold index-building into your preparation.
- Index by concept and by tool or source name, since questions may use either.
- Note topics you found confusing; those are the likeliest to need a lookup.
- Keep your notes organized by domain so you can orient yourself quickly.
- Remember that your materials must comply with the exam rules, so do not include anything resembling practice or exam questions and answers.
The Cost of Missing the Mark
The 69% threshold carries a financial edge. A certification attempt costs USD $999, and a retake costs USD $899, with prices excluding applicable sales tax. An official practice exam is available for USD $399. SANS training tuition is separate and optional. You have 120 days from activation to complete your attempt. For a complete pricing picture, see the GOSI certification cost breakdown.
| Item | Amount (USD) |
|---|---|
| Certification attempt | $999 |
| Retake | $899 |
| Official practice exam | $399 |
| Renewal fee (standard) | $499 |
Viewed through that lens, the purpose of a practice-driven preparation plan is to convert a 69% requirement into a comfortable cushion. If you want additional timed practice beyond the official option, our GOSI practice tests are built around the exam's six domains and its scenario-driven style.
A Domain-Ordered Preparation Sequence
Generic scheduling advice only helps when it is tied to what you are actually studying. One reasonable sequence is to start with the domains that frame everything else and finish with the ones that reward repetition and speed. SANS offers SEC497: Practical Open-Source Intelligence (OSINT) as optional, recommended training, and there is no formal certification prerequisite for the exam. Note that the course's own prerequisite of basic computer knowledge is separate from GIAC eligibility; the GOSI requirements guide covers this distinction, and the GOSI training overview covers course options.
OSINT Methodology and Privacy/OPSEC
- Learn the investigative framing that every other domain assumes
- Understand operational security fundamentals early so they shape how you practice
Searching, Collecting, and Processing Data
- Drill search and collection concepts
- Begin your index with terms and tools from this domain
Investigating Businesses and Investigating People
- Work scenario-style problems that require connecting sources
- Add entries to your index as you hit confusing topics
Network Data and Infrastructure Analysis, plus full review
- Give extra time here if infrastructure research is new to you
- Run timed practice and test your index lookup speed against the 2-hour limit
Adjust the order to your background. A network engineer may move infrastructure earlier and spend more time on people and business research, while an investigator from a legal or journalism setting may do the reverse.
After You Pass: Validity and Renewal
Reaching 69% earns you a certification valid for four years. Renewal requires 36 approved CPE credits earned during the active four-year period, or a renewal exam, plus the standard USD $499 renewal fee. Planning for that now keeps the credential working for you.
Passing also opens doors that vary by employer and role. Our GOSI jobs overview and GOSI salary guide explain where the credential tends to matter, and we avoid quoting unverified numbers there just as we do here.
Frequently Asked Questions
The minimum passing score is 69%. The exam has 75 questions and a 2-hour time limit, and the 69% standard applies to exam versions released on or after June 17, 2023.
With 75 questions, 69% corresponds to roughly 52 correct answers if all questions are weighted equally. Treat that as a planning estimate; GIAC publishes the percentage, and your attempt's details are authoritative.
No. Submitted answers cannot be changed, so use your index and notes to verify before committing to each response.
GIAC lists six exam-objective headings in published order but does not publish percentage weights, so you should prepare across all six rather than assuming some count more.
You would need to purchase a retake, currently listed at USD $899 plus applicable tax. Confirm current attempt eligibility and fees at GIAC before scheduling, since the assigned attempt's terms take precedence.