Doesn't seem bad to me at all. Instead of having to go sit for a test to renew each, I just keep on doing the security related training, writing, teaching, work, etc... that I would normally do anyway. It might work out that things are slightly more expensive, but I can make that work out better than I can having to squeeze in another cert test. I like it

I've had some time to review the changes and gather my thoughts.  I appreciate the fact that GIAC/SANS has taken this step.  It is a welcome change.

However, I think there may be a lack of inexpensive options for recertification.  SANS is keeping you "in the family" because they are requiring you advance SANS and attend their training courses.

It appears the three main ways to maintain your certification is to attend live training ($4k+), write a gold paper ($300), or retake the test ($300) on top of the cost to recertify ($300).  While they have options to submit work experience, write test questions, be a facilitator, be a mentor, etc, you cannot make enough credits on your own to recertify.  There needs to be money exchanged with SANS or another training provider (which GIAC will approve or not).

It just seems like there should be more options to give back, without having to open your wallet beyond the money required to obtain the recert.  A lot of times I have to come up with unique methods for training and certification, because my work only pays for so much.  I feel that I should be able to give back and recertify by being a mentor, a facilitator, an ISC handler, or write test questions as many times as I want without a cap on how many credits I receive for each.

I also wish there was not the two year restriction to start your "recertification".  For example, I just obtained my GCIH last year and I am going to be facilitating next week.  My facilitating won't count towards my recertification unless I do it in another year and a half.

Just my $.02.  feel free to discuss.

I'm with itg33k.  If we're reading these correctly, you have to do more maintenance training to update additional certs.  This is patently dumb.  I agree with the position that holding one cert doesn't automatically renew another, but we need to do something with the idea that taking a course can't count as continuing education for more than one certification.  I can apply the hours to one GIAC cert and my CISSP...  Why not two GIAC certs?

BTW, I'm not GIAC certified because I pay for everything out of pocket and the cost/benefit wasn't there for me in my current position.  I'd probably change my thinking a little if I were job hunting.

SANS is definitely for corporately funded individuals.  There are options for everyone else, (like work study) but that typically means living near a conference city.  Luckily, SANS likes Orlando.

I may not like all the options for renewal, but I'm going to live with it.  I want to go for my GSE certification, which would probably mean going FOR THE GOLD!