- Who Can Sit for the GOSI Exam
- No Formal Prerequisites, But Real Expectations
- The Exam Snapshot Every Candidate Should Know
- The Six Domains You Are Qualifying Against
- SEC497 Prerequisites vs. GIAC Eligibility
- Registration, Fees, and the 120-Day Window
- Exam-Day Rules That Affect Your Eligibility to Pass
- A Practical Readiness Checklist
- Sequencing Your Preparation by Domain
- After You Pass: Validity and Renewal
- Who Benefits From the Credential
- Frequently Asked Questions
- GOSI has no formal certification prerequisites; SANS training is optional but recommended.
- The exam is one proctored session: 75 questions, 2 hours, 69% minimum passing score.
- A certification attempt costs USD $999; retakes are USD $899, excluding applicable sales tax.
- You have 120 days from activation to complete your attempt, so schedule before activating.
Who Can Sit for the GOSI Exam
The GIAC Open Source Intelligence Certification (GOSI) is administered by GIAC, LLC, the certification body formerly known as Global Information Assurance Certification. When people search for "GOSI requirements," they usually want to know one thing: do I have to meet some gate before I can register? For this certification, the answer is refreshingly simple. There are no formal certification prerequisites. You do not need a prior GIAC credential, a degree, a specific job title, or a minimum number of years in the field.
That said, "no prerequisites" is not the same as "no preparation." The exam tests applied open source intelligence skills across six defined domains, and candidates who walk in without hands-on practice tend to struggle with the time limit and the open-book format. If you are still orienting yourself, our explainers on what GOSI certification is and what GOSI stands for cover the basics before you commit to a registration.
No Formal Prerequisites, But Real Expectations
GIAC does not gate entry to GOSI behind prior credentials, and training is described as optional and recommended rather than mandatory. In practice, that means two paths exist:
- Training-supported path: Take the SANS Institute course SEC497: Practical Open-Source Intelligence (OSINT), the preparation course associated with this certification, then register for the exam.
- Self-directed path: Build the skills through your own casework, practice, and reference material, then register without taking the course.
Both paths lead to the same exam. Neither grants special treatment on exam day. If you are weighing the course against going solo, see our breakdown of GOSI training options and the full GOSI certification cost breakdown, since SANS tuition is billed separately from the certification attempt fee.
The Exam Snapshot Every Candidate Should Know
Before you register, you should understand the format you are qualifying for. The key facts, taken from GIAC's published exam information, are below.
| Item | GOSI Detail |
|---|---|
| Issuer | GIAC Certifications, administered by GIAC, LLC |
| Format | One proctored, web-based exam |
| Questions | 75 total |
| Time limit | 2 hours |
| Minimum passing score | 69% |
| Testing provider | Pearson VUE onsite or ProctorU remotely, subject to attempt-specific eligibility |
| Open book? | Yes, hardcopy books, notes, and an index only |
| Breaks | 15 minutes of break time allowed |
| Answer changes | Submitted answers cannot be changed |
| Prerequisites | None formally required |
One nuance deserves attention: the 69% passing-standard notice applies to exam versions released on or after June 17, 2023. GIAC also states that the objectives, format, and passing score shown for your assigned attempt take precedence over general descriptions, so always check your attempt details on GIAC's exam portal rather than relying on any third-party summary, including this one. For a deeper look at the scoring side, read our guide to the GOSI passing score.
The Six Domains You Are Qualifying Against
GIAC publishes six exam-objective headings for GOSI. They are listed in published order and, importantly, GIAC does not publish percentage weights for them, so any article claiming "Domain 3 is 20% of the exam" is inventing a number. Here is what each heading covers and what a candidate should be able to do.
Domain 1: Investigating Businesses
Researching organizations using public sources.
- Identifying corporate structures, registrations, and ownership relationships
- Tracing business footprints across public records and online sources
- Documenting findings so they can be reviewed and reproduced
Domain 2: Investigating People
Researching individuals responsibly and effectively.
- Building a subject profile from legitimate public sources
- Connecting accounts, identifiers, and online presence
- Understanding the ethical limits of person-focused research
Domain 3: Network Data and Infrastructure Analysis
Understanding the technical footprint behind a domain, host, or service.
- Interpreting domain, hosting, and network registration data
- Pivoting between technical indicators during infrastructure research
- Recognizing what technical data does and does not prove
Domain 4: OSINT Methodology
The structured approach that separates investigation from browsing.
- Defining requirements and planning collection before searching
- Evaluating source reliability and avoiding bias
- Reporting findings clearly for the intended audience
Domain 5: Privacy and Operational Security Fundamentals
Protecting yourself and your investigation while collecting.
- Reducing your own exposure during research
- Separating investigative identities and environments
- Understanding how collection activity can leave traces
Domain 6: Searching, Collecting, and Processing Data
Turning raw information into usable, organized evidence.
- Constructing effective searches across different source types
- Capturing and preserving content before it disappears
- Processing and organizing collected data for analysis
For a full walk-through of each heading, see our complete guide to all 6 GOSI exam domains. Understanding these areas is part of "qualifying" in the truest sense, because they define what the exam will actually ask of you.
SEC497 Prerequisites vs. GIAC Eligibility
A common point of confusion is mixing up two different questions: what the SANS course expects of students, and what GIAC requires of certification candidates. They are separate.
- SEC497 course prerequisite: basic computer knowledge. That is a requirement for the training course, not for the certification.
- GIAC certification eligibility: no formal certification prerequisites.
SEC497 is a preparation resource, not a gate. Its curriculum is organized into course sections that are unweighted preparation material, so they should not be read as the exam's official domain structure. The live detailed syllabus describes topics such as ArchiveBox evidence capture, API data collection, AI-generated-content analysis, Whisper audio and video transcription, metadata and image analysis, infrastructure research, dark web research, data processing, and report writing. These are course topics that support your preparation; they are not additional GIAC exam-objective headings.
Two further details are worth knowing. First, the currently linked SEC497 brochure differs from the live syllabus: it does not name the ArchiveBox, API, AI-generated-content, or Whisper examples, and it still includes cryptocurrency material that is absent from the live Section 5 topic list. If you are comparing sources, treat the live syllabus as the more current description of course content. Second, the SEC497 capstone is a training exercise, not a separate GOSI certification assessment. Completing it does not earn you the certification.
Key Takeaway
Do not let course prerequisites become a false barrier. If you are skilled at open source research but have never taken SEC497, you are still eligible to attempt GOSI. If you have taken SEC497 but have no investigative practice, you are still eligible too, just not necessarily ready.
Registration, Fees, and the 120-Day Window
Once you decide to qualify, the mechanics matter, because a few policy details can cost you money or time if you miss them.
Fees
GIAC publishes the following pricing, which excludes applicable sales tax:
- Certification attempt: USD $999
- Retake: USD $899
- Official practice exam: USD $399
SANS training tuition is separate from all of the above. If you are building a budget, the GOSI certification cost guide lays out how these pieces combine, and our ROI analysis helps you decide whether the spend makes sense for your situation.
The 120-Day Completion Window
After your attempt is activated, you have 120 days to complete it. This is one of the most practical "requirements" in the whole process, because it creates a deadline you control. Activate your attempt only when you have a realistic plan to finish preparing and sit the exam inside that window. Activating early "to lock in a price" can backfire if your preparation stalls. For scheduling specifics, see our guide to GOSI exam dates and scheduling.
Choosing Your Proctoring Method
GIAC lists Pearson VUE onsite and ProctorU remote as testing providers, with availability subject to attempt-specific eligibility. Not every option is guaranteed for every attempt, so confirm which one your assigned attempt allows before you plan travel or set up a home testing space.
Exam-Day Rules That Affect Your Eligibility to Pass
Qualifying to sit the exam is one thing; complying with its rules is another. GIAC's policies, including the GIAC Candidate Agreement (updated February 18, 2025), set conduct expectations you should read before exam day. The most important ones for GOSI:
- Open book, with limits: You may use hardcopy books, notes, and an index. Internet access, personal electronic references, and materials resembling practice or exam questions and answers are prohibited.
- No changing answers: Once you submit an answer, it cannot be changed. This makes pacing and confidence important.
- Break allowance: You get 15 minutes of break time, but you are still working against a 2-hour limit across 75 questions.
If you are curious how demanding the combination of open book, 75 questions, and 2 hours really is, our GOSI difficulty guide discusses what tends to trip candidates up.
A Practical Readiness Checklist
Since there is no formal gate, use this checklist as a self-assessment before you pay for an attempt:
- Can you plan an investigation before collecting? OSINT Methodology is a full domain, and structured requirement-setting is central to it.
- Can you research a business and a person using only public sources? Domains 1 and 2 are applied, not theoretical.
- Can you interpret infrastructure data and explain what it implies? Domain 3 expects you to reason about technical indicators, not just recognize terms.
- Can you protect your own identity and environment while collecting? Privacy and Operational Security Fundamentals is its own domain for a reason.
- Can you capture, process, and organize what you find? Domain 6 rewards repeatable collection and processing habits.
- Have you built an index you can navigate quickly? Open book only helps if you can find things fast.
If several of these answers are "not yet," the official practice exam (USD $399) can give you a realistic read on your readiness before you spend the USD $999 on a certification attempt. Our free practice resources at the GOSI practice test site can also help you identify weak domains early, and the GOSI study guide explains how to turn those gaps into a plan.
Sequencing Your Preparation by Domain
Generic study advice is plentiful, so here is a GOSI-specific ordering with the reasoning behind it. Because GIAC publishes the six headings without weights, treat them as roughly equal in importance and sequence them by dependency rather than by percentage.
OSINT Methodology and Privacy/OPSEC
- Start here because planning and operational security shape how you approach every other domain.
- Draft your index entries for requirements, source evaluation, and reporting.
Searching, Collecting, and Processing Data
- Practice capture and preservation workflows so evidence collection becomes routine.
- Index search techniques and processing steps for fast lookup.
Investigating Businesses and Investigating People
- Run practice investigations end to end, then note which sources and steps you used.
- Add subject-profiling and business-research entries to your index.
Network Data and Infrastructure Analysis, then full review
- Work through infrastructure pivots, since this domain is the most technical for many candidates.
- Finish with a timed practice session to test your index under the 2-hour limit.
This sequence is a suggestion, not an official path. Adjust it to your background: a former corporate investigator may compress Week 3, while a network analyst may spend extra time on person-focused research. For a one-page recap to use near the end of your preparation, see the GOSI cheat sheet.
After You Pass: Validity and Renewal
Qualifying does not end at the exam. GOSI certification is valid for four years. To keep it active, you have two options:
- Earn 36 approved CPE credits during the active four-year period, or
- Pass a renewal exam.
Either route also requires the standard USD $499 renewal fee. GIAC provides renewal guidance, CPE information, and a renewal how-to guide on its site, so plan to document qualifying activities as you go rather than scrambling in year four. This long-term cost belongs in your overall decision, which our GOSI ROI analysis considers alongside the upfront fees.
Who Benefits From the Credential
Because there are no formal prerequisites, GOSI attracts a varied audience. The skills in the six domains are relevant wherever organizations need to research people, businesses, and technical infrastructure from public information. That includes security teams, threat intelligence functions, investigative and compliance roles, fraud and risk analysis, and journalism-adjacent research work. We avoid quoting specific pay or hiring figures here because we do not have verified numbers for them; if you want to explore the career side, our guides to GOSI jobs and the GOSI salary guide discuss the landscape in more detail.
Frequently Asked Questions
No. GIAC lists no formal certification prerequisites for GIAC Open Source Intelligence Certification (GOSI). Training is optional and recommended, not required, so you can register without a prior credential or course.
No. SEC497: Practical Open-Source Intelligence (OSINT) is a recommended preparation option, and its own prerequisite is basic computer knowledge. That course prerequisite is separate from GIAC certification eligibility, and the SEC497 capstone is a training exercise rather than a certification assessment.
You have 120 days from activation to complete the attempt. Because that clock starts when the attempt is activated, plan your preparation and scheduling before you activate.
A certification attempt is USD $999, a retake is USD $899, and the official practice exam is USD $399, all excluding applicable sales tax. SANS training tuition is billed separately. Always confirm current pricing on GIAC's official pricing page before purchasing.
GOSI is valid for four years. To renew, earn 36 approved CPE credits during that period or pass a renewal exam, and pay the standard USD $499 renewal fee.