- The Short Answer: What GOSI Stands For
- Why the Acronym Causes Confusion
- The Organization Behind the Name
- What the Credential Actually Covers
- The Six Exam Domains
- Exam Format and Rules
- Fees, Scheduling, and Renewal
- How SANS SEC497 Relates to GOSI
- Who Benefits From This Credential
- Sequencing the Domains in Your Prep
- Frequently Asked Questions
- GOSI stands for GIAC Open Source Intelligence Certification, issued by GIAC Certifications.
- The exam is one proctored, open-book test: 75 questions, 2 hours, 69% minimum to pass.
- Six published domains span businesses, people, network infrastructure, methodology, operational security, and data collection.
- A certification attempt costs USD $999; the credential stays valid for four years.
The Short Answer: What GOSI Stands For
On this site, GOSI stands for GIAC Open Source Intelligence Certification. It is a professional credential for practitioners who find, collect, verify, and report on information from publicly available sources. The "OSI" in the acronym is the discipline itself: open source intelligence, usually shortened to OSINT in job postings and training catalogs.
The letters break down simply:
- G for GIAC, the certifying body
- O for Open
- S for Source
- I for Intelligence
Put together, the credential signals that its holder can run a disciplined, defensible OSINT workflow, not merely that they can use a search engine well. If you want the broader overview, our explainers on what GOSI certification is and GOSI meaning cover the same ground from different angles.
Why the Acronym Causes Confusion
Search for "GOSI" and you will quickly discover that the same four letters are used by several unrelated organizations and credentials around the world. Some are government bodies, some are other professional programs, and some are simply product or company abbreviations. None of them have anything to do with the GIAC credential discussed here.
This matters practically. Candidates who land on the wrong page can come away with the wrong price, the wrong format, or the wrong idea of what the test covers. Everything in this article refers only to the GIAC exam. For the dedicated disambiguation pages, see what GOSI means and what a GOSI is.
The Organization Behind the Name
GIAC stands for Global Information Assurance Certification, and the organization now operates as GIAC Certifications, administered by GIAC, LLC. GIAC is the certification arm connected with the SANS Institute ecosystem, and its credentials are built around the idea of validating hands-on, job-relevant skill rather than memorized trivia.
For the GOSI specifically, exams are delivered through Pearson VUE at a testing center or remotely through ProctorU, subject to the eligibility rules attached to each attempt. Your assigned attempt's details, including objectives, format, and passing score, are published on the GIAC attempts page, and those details take precedence over any third-party summary, including this one.
What the Credential Actually Covers
The GOSI validates that a candidate can plan and execute open source investigations responsibly. That means more than knowing which websites to visit. It includes understanding how to structure a collection requirement, how to protect yourself and your organization while investigating, how to examine business and personal records, how to interpret internet infrastructure, and how to process what you collect into something an analyst or decision-maker can use.
Because OSINT touches real people and real organizations, the discipline carries an ethical and legal dimension. The privacy and operational security content in the objectives reflects that: a competent practitioner knows what they can collect, how to avoid exposing their own identity or tooling, and how to keep a clean, defensible record of their work.
The Six Exam Domains
GIAC publishes six exam-objective headings for the GOSI, listed in the order GIAC presents them. The published list does not assign official percentage weights to these areas, so treat all six as examinable and avoid relying on invented weighting claims. For a deeper walkthrough, see our complete guide to all 6 GOSI content areas.
Domain 1: Investigating Businesses
Researching companies and organizations from public information.
- Corporate structure, ownership, and registration records
- Relationships between entities, subsidiaries, and personnel
- Building a picture of an organization without direct contact
Domain 2: Investigating People
Researching individuals using lawful, publicly available sources.
- Identity attributes, usernames, and online presence
- Connecting accounts and records to a person with appropriate confidence
- Awareness of the privacy and ethical boundaries of person-focused work
Domain 3: Network Data and Infrastructure Analysis
Interpreting the technical footprint behind domains, hosts, and services.
- Domain and IP-related research
- Understanding how infrastructure links separate assets together
- Reading technical data that reveals ownership or operational patterns
Domain 4: OSINT Methodology
The structured process that turns raw searching into reliable intelligence.
- Defining requirements and planning collection
- Evaluating source reliability and information credibility
- Documenting, analyzing, and reporting findings
Domain 5: Privacy and Operational Security Fundamentals
Protecting the investigator and the investigation.
- Limiting exposure of your own identity and attribution
- Safe handling of collected data
- Understanding the privacy implications of your techniques
Domain 6: Searching, Collecting, and Processing Data
The hands-on core of OSINT tradecraft.
- Advanced searching across varied sources
- Capturing and preserving evidence
- Processing and organizing large volumes of collected material
Exam Format and Rules
The GOSI is a single, proctored, web-based exam. The logistics are straightforward, but a few rules deserve attention because they shape how you prepare.
| Element | GOSI Detail |
|---|---|
| Number of exams | One proctored, web-based exam |
| Questions | 75 total |
| Time limit | 2 hours |
| Minimum passing score | 69% |
| Reference materials | Open book: hardcopy books, notes, and an index |
| Prohibited | Internet access, personal electronic references, and materials resembling practice or exam questions and answers |
| Answer changes | Submitted answers cannot be changed |
| Break time | 15 minutes allowed |
The 69% passing standard applies to exam versions released on or after June 17, 2023. Always confirm the standard attached to your own assigned attempt on the GIAC attempts page.
Fees, Scheduling, and Renewal
GIAC separates the cost of the exam from the cost of training, so budgeting means planning for several line items. All prices exclude applicable sales tax.
| Item | Amount (USD) |
|---|---|
| Certification attempt | $999 |
| Retake | $899 |
| Official practice exam | $399 |
| Renewal fee | $499 |
| SANS training tuition | Separate from the above |
Once your attempt is activated, you have a 120-day window to complete it. That deadline is the single most important scheduling fact, because it determines how long your preparation can realistically run. See our exam dates and scheduling guide for planning around it, and the full cost breakdown for the complete budget picture.
Validity and Renewal
The certification is valid for four years. To renew, you can earn 36 approved CPE credits during the active four-year period or take a renewal exam, and in either case you pay the standard renewal fee. Planning CPE activity from the start is far easier than scrambling in year four.
Eligibility
There are no formal certification prerequisites for the GOSI. Training is optional and recommended rather than mandatory. For the nuances of eligibility, review GOSI requirements.
How SANS SEC497 Relates to GOSI
The natural preparation path is the SANS course SEC497: Practical Open-Source Intelligence (OSINT). It is the training associated with this certification, though it is a separate product with its own tuition. Keep two distinctions clear:
- Course prerequisites are not certification eligibility. SEC497 lists basic computer knowledge as its prerequisite, while the GIAC certification itself has no formal prerequisites.
- Course sections are not exam domains. The SEC497 curriculum is unweighted preparation material. It does not establish exhaustive exam coverage or define the official domain structure, which is the six-heading list above.
The live detailed syllabus for SEC497 covers practical topics such as ArchiveBox evidence capture, API-based data collection, analysis of AI-generated content, Whisper audio and video transcription, metadata and image analysis, infrastructure research, dark web research, data processing, and report writing. These are preparation curriculum topics, not additional GIAC exam-objective headings. The course also includes a capstone, which is a training exercise and not a separate GOSI assessment.
For a fuller treatment of preparing with and without the course, see our GOSI training overview and the GOSI study guide.
Who Benefits From This Credential
OSINT skills are applied across a wide range of roles, and the credential is most relevant where investigation, research, and verification are part of the job description. Typical fits include:
- Threat intelligence and security analysts who research adversary infrastructure and exposed data
- Corporate investigators and due-diligence teams who examine businesses and the people behind them
- Fraud, trust and safety, and brand-protection teams tracing accounts, domains, and impersonation
- Journalists and researchers who verify claims and trace sources
- Government and public-sector analysts who incorporate publicly available information into assessments
Employers value the certification as evidence of a repeatable method, not just tool familiarity. Whether it makes sense for your career depends on your target role, which we examine in is the GOSI certification worth it, the salary guide, and GOSI jobs. We deliberately avoid quoting unverified earnings figures here; use those pages for context and check live job postings for your market.
Sequencing the Domains in Your Prep
Because the six domains build on one another, order matters more than raw hours. The plan below is one reasonable sequence tied directly to the GOSI content, assuming you stay inside the 120-day activation window.
Foundations first
- Domain 4 (OSINT Methodology) and Domain 5 (Privacy and Operational Security Fundamentals)
- These frame every later technique, so learning them first prevents bad habits
Collection mechanics
- Domain 6 (Searching, Collecting, and Processing Data)
- Practice capture, preservation, and organizing material you collect
Subject-focused investigation
- Domain 1 (Investigating Businesses) and Domain 2 (Investigating People)
- Apply methodology to entity and individual research scenarios
Technical depth and exam simulation
- Domain 3 (Network Data and Infrastructure Analysis)
- Build and index your open-book materials, then run timed practice at 75 questions in 2 hours
Key Takeaway
Build your index as you study, domain by domain, not in the final week. A well-organized index that mirrors the six published domains lets you locate details quickly during a 2-hour open-book exam. Use our cheat sheet as a reference for must-know facts, and test your speed with realistic questions on the GOSI practice test site.
Remember that practice questions you use for study cannot be brought into the exam room: materials resembling practice or exam questions and answers are prohibited. Keep your reference notes conceptual and procedural. You can also gauge expectations with our look at the GOSI pass rate, and when you are ready to rehearse under timed conditions, return to GOSI Exam Prep.
Frequently Asked Questions
GOSI stands for GIAC Open Source Intelligence Certification. It is issued by GIAC Certifications and validates practical skill in open source intelligence investigation, collection, and analysis. Other organizations use the same four letters, but they are unrelated to this credential. For a dedicated explainer, see what does GOSI stand for.
No. OSINT is the discipline of gathering and analyzing publicly available information. GOSI is the GIAC certification that validates your competence in that discipline. You can practice OSINT without holding the credential, but the certification offers a recognized way to demonstrate it.
The exam has 75 questions with a 2-hour time limit, and the minimum passing score is 69%. The exam is open book, allowing hardcopy books, notes, and an index, but internet access and personal electronic references are not permitted. Answers cannot be changed once submitted.
No. There are no formal certification prerequisites, and training is optional and recommended. SANS SEC497 is the associated course, but its prerequisite of basic computer knowledge is separate from certification eligibility, and its tuition is separate from the exam fee.
The certification is valid for four years. You renew by earning 36 approved CPE credits during the active period or by taking a renewal exam, and you pay the standard USD $499 renewal fee in either case. Always confirm current renewal rules on GIAC's renewal pages.