• Forensics Community
  • SANS Forensic Blog
  • Whitepapers
  • Webcasts
  • Forensic Links
  • Downloads
  • About SANS Forensics
• Forensic Courses
  • SECURITY 408 - Computer Forensic Essentials
  • SECURITY 508 - Computer Forensics, Investigation, and Response
  • SECURITY 526 - Advanced Filesystem Recovery and Memory Forensics
  • SECURITY 558 - Network Forensics
  • SECURITY 563 - Mobile Device Forensics
  • SECURITY 606 - Drive and Data Recovery Forensics
  • SECURITY 610 - Reverse-Engineering Malware: Malware Analysis Tools and Techniques
  • SIFT Toolkit - Essentials
  • SIFT Toolkit - Advanced
  • Register Now
• Forensic Events
  • Forensics Events List
  • Forensics Summit - July 2009
• GIAC Forensic Certification
  • GCFA Certified Skills
  • GCFA Code of Ethics
  • GIAC Homepage
  • GIAC Certified Forensics Analysts
• SANS Instructors
  • SANS Instructors
  • Author Statement
• SANS Network
  • SANS Institute
  • Global Information Assurance Certification
  • SANS Internet Storm Center
  • SANS Technology Institute
  • SANS Software Security Institute
  • SANS Blogs

GCFA Analysts | GIAC Homepage | GCFA Ethics | GCFA Skills |

The scope and responsibilities of an information security professional are diverse. The services provided by an information security professional are critical to the success of an organization and to the overall security posture of the information technology community. Such responsibilities place a significant expectation on certified professionals to uphold a standard of ethics to guide the application and practice of the information security discipline.

GIAC is committed to upholding these standards and fostering them within the information security community. All GIAC-certified individuals agree to uphold and be bound by the following Code of Ethics.

This Code was developed through the consensus of the GIAC Advisory Board members and GIAC management. A professional certified by GIAC acknowledges that such a certification is a privilege that must be earned and upheld. GIAC certified professionals pledge to advocate, adhere to, and support the Code of Ethics. Any GIAC member, or member of the public, may submit a written complaint to the GIAC Ethics Council. Complaints may be submitted via the web-based complaint form.

It is not enough for information security professionals to simply "do the job". We must hold ourselves and our discipline to the highest standards of ethical and professional conduct.


Special thanks to Advisory Board members James O'Brien, Bill Royds, and Alan Moe for their efforts in developing the initial draft and coordinating the review process.

GIAC Certification SANS Institute