🔥 In-Demand Certification · 2025

GIAC Security Operations Manager (GSOM)

Validate your ability to effectively manage a technical team and strategically operate a Security Operations Centre aligned with your organisation's business goals. GSOM-certified professionals design, plan, and continuously improve SOC programmes — bridging the gap between technical operations and executive strategy.

SOC Management Threat Intelligence Incident Response Alert Management SOC Design Analytics & Metrics Proactive Detection Continuous Improvement

Enroll Now

SOC Design & PlanningProgramme design, staffing, and tooling strategy

Data Collection & Alert ManagementLog prioritisation, alert creation, and triage

Incident Response ManagementIR cycle, playbooks, and execution management

Metrics, Analytics & MaturityKPIs, threat hunting, and SOC maturity strategy

Exam Questions

2 hrs

Duration

66%

Passing Score

GIAC

Certified

Why It's Essential

SOC Managers Drive Detection Quality and Organisational Resilience

The effectiveness of an entire SOC depends on how well it is designed, staffed, and continuously improved. GSOM validates the skills needed to lead SOC operations strategically — not just technically.

Trending

+42%

Growth in SOC Management Roles Globally

Senior SOC roles — leads, managers, and directors — are growing rapidly as enterprises invest in detection and response capabilities.

Strategic

Bridges Technical Operations and Executive Leadership

GSOM validates skills that connect day-to-day SOC operations with business strategy — a critical and scarce combination.

Trending

High Impact

SOC Managers Directly Reduce Mean Time to Detect & Respond

Well-managed SOCs detect breaches faster and respond more effectively — GSOM proves you can build and lead those teams.

+35%

Salary Premium for SOC Management Certifications

SOC managers with validated credentials command premium salaries at enterprise organisations worldwide.

Course Content

Complete GSOM Curriculum

Click any module to expand and explore the topics covered in detail.

SOC Design, Planning & Tooling

4 Topics

Assess business goals, operational requirements, and risk profile to design an effective SOC programme

Understand how to staff the SOC and align team structure to organisational objectives

Demonstrate knowledge of common SOC tools and technologies and how to implement them securely

Apply defensible architecture and cyber threat intelligence concepts to SOC strategy

Data Collection & Alert Management

4 Topics

Plan, prioritise, and orchestrate secure data collection and log enrichment for SOC monitoring

Utilise business operations knowledge and industry frameworks (MITRE ATT&CK) in use-case development

Demonstrate knowledge of alert creation, prioritisation, and classification for efficient triage

Implement best practices to ensure timely and manageable SOC alert response workflows

Incident Response Preparation & Execution

4 Topics

Demonstrate understanding of the incident response cycle and its role in overall SOC operations

Prepare the SOC for successful incident response — tools, processes, and communication

Perform effective investigations and manage each phase of the IR cycle

Document and communicate incident findings to both technical and executive stakeholders

Continuous Improvement, Analytics & Proactive Detection

5 Topics

Use post-incident data, automation, and analytic testing to optimise SOC operations

Demonstrate familiarity with threat hunting processes and active defence techniques

Leverage community-sourced resources to supplement gaps in SOC detection capabilities

Select metrics and KPIs to measure SOC effectiveness and build a continuous maturity roadmap

Generate a strategic plan to guide long-term SOC maturity and capability development

FAQs

Frequently Asked Questions

What is the GIAC Security Operations Manager (GSOM) certification?

GSOM validates a practitioner's ability to effectively manage a technical team and strategically operate a Security Operations Centre (SOC) aligned with an organisation's business goals and security requirements.

What are the GSOM exam requirements?

The GSOM exam consists of 75 questions, is web-based and proctored, has a 2-hour time limit, and requires a minimum passing score of 66%. Proctoring is available via ProctorU (remote) or PearsonVUE (onsite).

What topics does GSOM cover?

GSOM covers SOC design and planning, data source assessment and collection, alert creation and management, incident response preparation and execution, proactive detection through threat hunting, SOC analytics and metrics, and continuous improvement strategies.

Who should take GSOM?

GSOM is ideal for SOC managers and team leads, security directors, new SOC team members building leadership skills, senior SOC analysts transitioning to management, and technical CISOs wanting operational depth.

How does GSOM relate to GSOC?

GSOC is the practitioner-level certification for blue team analysts. GSOM builds on that foundation with management, strategic planning, and operational leadership skills. GSOM is recommended for those moving into or already in SOC management roles.

Does GSOM cover threat hunting and proactive defence?

Yes — GSOM covers proactive detection strategies including threat hunting processes, active defence techniques, and the use of community-sourced resources (such as open threat intelligence) to supplement SOC detection capabilities.

Lead Your SOC with Confidence — Earn GSOM

Join Zetlan Technologies' GSOM programme and develop the strategic, operational, and analytical skills to build and run a world-class SOC. Earn your GIAC certification and step confidently into security operations leadership.

GIAC Security Operations Manager (GSOM)

SOC Managers Drive Detection Quality and Organisational Resilience

GSOM Exam Details

Complete GSOM Curriculum

Built for SOC Leaders & Senior Analysts

Frequently Asked Questions

Lead Your SOC with Confidence — Earn GSOM