What Is A GAWN?

The Short Answer: What a GAWN Actually Is

A GAWN is a certification issued by GIAC Certifications, the body formerly known as Global Information Assurance Certification. The letters stand for GIAC Assessing and Auditing Wireless Networks. It validates that a candidate can assess, attack, and audit wireless environments, covering far more than just Wi-Fi.

The acronym "GAWN" is occasionally shared by unrelated credentials elsewhere, so it is worth being precise. On this site, GAWN always means the GIAC wireless credential and nothing else. If you want the naming angle in more depth, see What Does GAWN Stand For? and GAWN Meaning.

The most useful way to think about a GAWN is as a proof of hands-on wireless security literacy. It sits in the offensive-and-assessment corner of the GIAC catalog: someone holding it should be able to look at an unfamiliar radio environment, identify what is transmitting, understand how it could be abused, and recommend how to harden it.

What the Credential Proves

Wireless security is unusual among security specialties because the attack surface is physical and varied. A candidate who is strong on enterprise Wi-Fi may know nothing about Bluetooth Low Energy, and one who understands RFID may never have touched software-defined radio. The GAWN objective list deliberately spans these worlds.

Holding the credential signals three things to an employer:

• Breadth across radio technologies: 802.11, Bluetooth, BLE, NFC, and both high- and low-frequency RFID all appear in the objectives.
• Attack-side understanding: topics like fuzzing, weak-encryption attacks, rogue networks, and client attacks require you to think like an adversary.
• Audit-side judgment: the word "Auditing" in the title matters. You are expected to assess exposure and recommend defenses, not just exploit.

The 16 Objective Areas, Grouped by Radio Technology

GIAC publishes 16 objective headings for this certification. They are headings, not weighted domains, and GIAC does not publish percentage allocations on its credential page, so no area should be assumed to be "worth more" than another. For a heading-by-heading walkthrough, read the GAWN Exam Domains guide. Here, the headings are grouped to show how they relate.

Foundations and 802.11 attack surface

Short-range and proximity technologies

Advanced and cross-domain topics

Exam Mechanics: Format, Timing and Open-Book Rules

The credential page specifies a single web-based, proctored examination with these parameters:

Two hours for 75 questions works out to roughly 1.6 minutes per question. That pace is tight enough that an unorganized pile of notes becomes a liability. The exam is open book, but electronic references and internet access are prohibited. Submitted answers cannot be reviewed or changed, so you must commit to each answer as you go. Hardcopy materials that resemble practice or exam questions and answers are also prohibited.

For details on how the 70% line works in practice, see GAWN Passing Score. For a realistic sense of difficulty, How Hard Is the GAWN Exam? covers what trips candidates up, and GAWN Pass Rate addresses what data is and is not available.

Registration, Fees and the 120-Day Window

GIAC's standard fees, in USD and excluding applicable sales tax, are:

Training is priced separately and is not included in any of the figures above. Candidates have 120 days from activation to complete an attempt, which makes the activation date a planning decision: activate when you are ready to study intensively, not months before. If life intervenes, an extension is available at the listed fee.

The full financial picture, including how training factors in, is covered in GAWN Certification Cost, and scheduling logistics are discussed in GAWN Exam Dates.

Who Holds a GAWN and Who Hires for It

Because the credential centers on assessing and attacking radio-based systems, it fits roles where wireless exposure is part of the job description. Typical holders and target roles include:

• Penetration testers who add wireless engagements to a broader offensive practice
• Red team operators who need physical-proximity and radio capabilities for realistic simulations
• Security consultants performing wireless assessments for clients across retail, healthcare, and corporate campuses
• Security architects and auditors responsible for validating that wireless controls actually hold
• Researchers exploring IoT, access-control, and embedded-device radio behavior

Employers who value this skill set include security consultancies, enterprises with large wireless footprints, organizations running physical access-control systems built on RFID or NFC, and any shop with isolated or high-assurance networks where air-gap assumptions need testing. For a closer look at roles and employers, see GAWN Jobs, and for compensation context, GAWN Salary Guide. Whether the investment makes sense for your situation is examined in Is the GAWN Certification Worth It?

Prerequisites Versus Preparation

GIAC requires no formal prerequisites to begin a certification attempt. Affiliated SANS training is optional, and preparation may come from practical experience, college coursework, or independent study. The SANS course commonly associated with this material, SEC617 (Wireless Penetration Testing and Ethical Hacking), has its own course prerequisites, but those are not exam eligibility requirements.

That distinction matters: you can sit the exam without taking the course, but the course curriculum is a useful map of the practical topics. Keep in mind that course labs and its capture-the-flag exercise do not tell you the exam's question composition. Full detail on eligibility lives in GAWN Requirements, and training pathways are compared in GAWN Training.

Staying Certified: The Four-Year Cycle

A GAWN remains valid for four years. To renew, you need either 36 approved continuing professional education (CPE) credits earned during the active cycle or a successful re-examination, in both cases alongside the applicable renewal fee ($499 at current standard pricing). Because wireless technology evolves quickly, many holders use the CPE route to keep pace with new protocols and attack tooling rather than re-sitting the exam.

Sequencing Your Preparation Around the Objectives

Rather than generic study advice, the more useful question is the order in which to tackle the 16 headings. One sensible approach sequences by dependency: foundations first, then 802.11 attacks, then proximity technologies, then advanced radio work. A sample plan:

Use original practice questions and authorized lab scenarios throughout; avoid anything marketed as leaked exam content. Practice questions that mirror the objective areas are available on the GAWN practice test site, and the full preparation approach is laid out in the GAWN Study Guide. If you are weighing your readiness before booking an attempt, a timed run through our practice exams will show which headings need another pass.

For readers who arrived with other naming questions, these companion pieces cover the same ground from different angles: What Is GAWN?, What Is GAWN Certification?, What Does GAWN Mean?, and the overview at GAWN Certification.

Frequently Asked Questions