Frequently Asked Questions

Frequently Asked Questions

  • Application and Tuition Questions

Application and Tuition Questions

General Questions

What is the SANS Technology Institute?

The SANS Technology Institute is a master's level graduate school focused exclusively on cybersecurity degree programs and research. It was founded in 2005 as an independent subsidiary of the SANS Institute, with its own Board of Directors, Faculty, staff, and programs. The SANS Technology Institute aspires to be the preeminent graduate institution translating contemporary information security practice and scholarship into effective educational experiences.

What degrees are offered by the SANS Technology Institute?

The SANS Technology Institute is authorized to grant Master of Science degrees in Information Security Engineering (MSISE) and Information Security Management (MSISM). These are described in greater detail below.

What is the SANS Institute?

The SANS Institute ( is the oldest and by far the largest and most trusted research and cybersecurity training organization in the world. Since 1989, the SANS Institute has trained over 100,000 information security professionals, including the leaders of cybersecurity for the biggest and most important government agencies, defense institutions, and commercial entities from the world's largest banks and technology companies to healthcare organizations and power companies.

Is the SANS Technology Institute accredited?

Yes, the SANS Technology Institute is accredited by the Middle States Commission on Higher Education (3624 Market Street, Philadelphia, PA 19104, 267-284-5000), which is the institutional agency recognized by the U.S. Secretary of Education to conduct accreditation activities for Maryland, New Jersey, New York, Pennsylvania, Puerto Rico, and the U.S. Virgin Islands, including distance education and correspondence education programs offered at those institutions. The Middle States Commission on Higher Education is also recognized by the Council for Higher Education Accreditation.

What is the importance of regional accreditation?

Accreditation by the Middle States Commission on Higher Education is an expression of confidence in an institution's mission and goals, its performance, and its resources. Accreditation is typically a prerequisite condition for corporate tuition reimbursement plans or other funding sources. Because of the strength of the peer review process and the quality standards required of members, many employers and consultants consider it a best practice to offer reimbursement only when the educational institution is regionally accredited, rather than just nationally accredited, and many institutions will only accept credit for transfer when the credits were earned at an institution that is also regionally accredited.

What are the key qualities of the master's degree programs?

The SANS Technology Institute degree programs are comprised of world-class, cutting-edge technical courses, updated as often as three times per year, that establish and specialize your skills. Our programs offer personal interaction with teaching faculty that have an unparalleled reputation for industry leadership and who bring the material to life. Simulations and group projects teach students to write, present, and persuade effectively, and are often focused on employer-sponsored topics to align your work with your studies. The programs are designed for full-time, working information technology or information security professionals, with the flexibility to attend courses when and where you need them, either in live classrooms with faculty or online from home. Lastly, SANS is broadly known throughout the industry for the quality of our educational programs, and a SANS degree augments a graduate's own reputation.

Who are the faculty of the SANS Technology Institute?

The approximately fifty members of the teaching faculty of the SANS Technology Institute are some of the most important practitioner-scholars in the cybersecurity field today. Most faculty spend the majority of their time active in their roles as trusted advisors to the White House, government agencies, and major corporations, or working at senior-level information security jobs. They are the authors of authoritative books, they engage in information security research, speak at conferences to share their work, and they are called in for many of the most high-profile incidents - in short, they have the front-line, in-the-trenches experience doing the types of jobs that you will seek or be required to do or oversee as a graduate. As importantly, new faculty are not appointed until they have proven themselves as highly rated teachers in a multi-year competition to become a SANS Certified Instructor. Many experts cannot teach, but the SANS faculty development process ensure that the faculty are gifted teachers as well as being exceptional security technologists.

What is the program leading to the M.S. degree in Information Security Engineering?

The MSISE degree requires 36 credit hours of course work that spans core topics in information security engineering, advanced technical electives, and the management capabilities required for effective implementation. The curriculum is built in part on SANS classes, but the program also includes courses that were independently developed by SANS Technology Institute faculty and tailored to the goals of the master's program. Many courses in the program use GIAC certifications as assessments of learning outcomes, and graduates of this degree program acquire more than seven GIAC certifications even before you graduate, including the GIAC Security Expert (GSE) certification, used as a capstone assessment. Applied research is emphasized, and master's students must produce several peer-reviewed research papers, present their research to faculty and peers at live events, and complete labs and simulations that ensure they possess mastery of the technical material and its use in the real world. You can learn more about the required and elective courses in the MSISE program at our website or by downloading the latest set of MSISE Course Descriptions.

What is the program leading to the M.S. degree in Information Security Management?

Similar to the MSISE degree, the MSISM program also requires 36 credit hours of course work. The core of the program is different in that it rebalances the focus on technical depth with an emphasis on the breadth of management, policy, and implementation topics. There are fewer elective choices in the MSISM degree program, but additional required courses covering topics in Information Security Audit and Legal issues and policy. With a greater focus on communications skills, the Information Security Management program requires additional written research. You can learn more about the required and elective courses in the MSISM program at our website or by downloading the latest set of MSISM Course Descriptions.

Engaging in the Master's Programs

Are courses taken live in classrooms, online, or both?

The master's degree programs are taken in a mix of live and online instruction, which offers enormous flexibility for you to choose how to engage and progress through your course of studies. While the majority of the program may be done at-a-distance, some elements of the program require a graduate student to be present at a live event, typically once a year. There are many choices for the specific time, date, and location for live event attendance. Most technical courses in the program may be taken either at events in live classrooms or online; assessments and exams are frequently taken at proctored locations near where you live; presentations are graded both live and virtually; some projects require you to work in virtual groups, while another requires that two or more people are physically present for a 24-hour period.

How and where do graduate students get live classroom instruction?

The SANS Institute conducts more than 200 events ("Residential Institutes") at locations held throughout the world. At any given Residential Institute, hundreds of individuals come together for up to a week and a half of intense, immersive training that spans cyber defense, penetration testing, forensics and incident response, secure software development, information security auditing, and many other topics. These events allow students to interact with the leaders in the field as they teach courses, lead labs and simulation exercises, and present their most current research and findings at evening briefings. Residential Institutes are a unique setting for learning, networking, and development. When a SANS Master's student needs to take one of these SANS Institute classes, he or she will be registered for the class at the desired Residential Institute upon registering for the associated course in their master's program. The student will then travel to the associated Residential Institute and take the class as a SANS Master's student. Afterwards, the master's student continues to work on the associated exam or assessment, research paper or project, until the course requirements are completed.

Can I take training from SANS online and at-a-distance?

When a SANS master's degree candidate needs to take a SANS Institute class, they may frequently also choose to take it online and at-a-distance through our highly-rated OnDemand, vLive & Simulcast delivery formats. To mitigate constrained budgets or simply to fit a busy professional's schedule, SANS Institute classes may be accessed through these systems, where you see the same slides used in our classes and hear the same highly-rated instructors as they teach. For the OnDemand system, where the faculty instruction is recorded and not live, subject matter experts are available virtually to answer any questions. Because of the density of new information taught in our classes, many students actually prefer this format because they are able to 'replay' certain sections that otherwise might have been difficult to follow live. At prescheduled times, SANS classes are also available via vLive (virtual live), a format in which live classes are held over the internet, typically between 7-10pm ET on Tuesdays and Thursdays. During a vLive class, the instructor and all participants are online simultaneously, allowing for more direct interaction between our students and instructors, even though they remain in different locations.

How do the online classes compare to those at the live events?

Whether live or online, SANS' rigorous ratings and feedback system confirms that we maintain a superior student experience and consistently high levels of student satisfaction in all these modalities. Furthermore, SANS is unique in our ability to prove that there are no statistically significant differences in the tested learning outcomes of students who take our courses in a live setting versus those who take them via OnDemand (time delayed) or vLive (synchronous). We encourage you to evaluate free demonstrations of OnDemand and vLive as you consider and explore the SANS master's program.

How does the SANS Technology Institute maintain such high quality?

Nearly all of SANS instruction is paid for by the very employers and government agencies that need a more skilled and capable workforce, requiring year after year that SANS classes justify the time, offer a strong return on investment, and clearly impact the information defenses of those sponsoring organizations. Like our most successful clients, the SANS Institute is dedicated to excellence and continuous improvement. We constantly seek feedback to measure the value and applicability of our training, both the content of courses and the effectiveness of our SANS faculty. A rigorous, quantified, and ongoing quality measurement process driven by the ratings and comments of our students ensures that our instruction has currency in the constantly changing threat landscape, and that our instructors are both highly engaging in their class presentations and active, valued practitioners in the field.

How long does it take to complete the program?

The program is designed to take three years, on average, to complete. This timeline requires approximately 10 hours of work accomplished per week (again, on average, allowing for periods of more or less intense work). Over time, participation in the program is subject to a Satisfactory Academic Progress policy that requires students to complete at least eight (8) credit hours of work each year, consistent with the requirement that students complete the program within a maximum five years from the date of their matriculation.

Are there time limits to complete individual courses?

Certain courses in the master's program have required maximum time limits. Typically, the requirements for a three or four credit course are expected to be completed by a student within four months of their class starting date, and must be completed within five months (subject to a failing grade). These time limits are sometimes different from what GIAC applies for test taking or completing a Gold paper, and in these cases the time limits of the master's program apply, rather than the standard GIAC timing.

Are there semesters and trimesters, or is the program 'open enrollment'?

The open enrollment nature of the program is another instance of flexibility. Accepted students may apply to and be accepted into the program at any time during the year, and each individual then works with an appointed academic advisor to schedule a plan of studies each twelve months. Students often match the times and locations of Residential Institutes with their work and personal schedules, and then plan which additional courses they'll take at-a-distance in order to maintain satisfactory academic progress. In some instances, students may join a specific industry cohort, designed to coordinate the progression and interaction of people with similar industry backgrounds.


What is the admissions process?

To apply for admission to the SANS Master's Degree program, the applicant follow the steps below:

  1. Determine that you meet the requirements for admission listed on our Master's Admissions page. If you are unsure, please contact us to determine if our program will be a good fit.
  2. Create a SANS Account at
    • If you already have a SANS account, please use the email address you've used in the past to better match accounts.
  3. Log in using your SANS credentials to
  4. Submit a complete Application Package including:
    • Application form
    • Resume
    • Letter of Recommendation
    • Goals and Outcomes Statement
    • Leadership Essay
    • Video Presentation
    • Official Transcripts
    • Application Fee

Details for each component can be found below and in the downloadable Application Overview and Instructions document.

If you have any questions along the way, please do not hesitate to send an email to

What is the Application Fee?

The application fee is required to complete your application and is non-refundable. Applicants may pay online through our payment suite or by check/money order or credit card by calling 301.654.7267.
Master's degree: $100.00
Graduate Certificates: $35.00

What are the requirements or prerequisites for admission?

There are several requirements for admission, including that you must hold a bachelor's degree with at least a 2.8 GPA, and you must have a minimum of 12 months of work experience related to information technology, information security, or audit. The master's program requires excellent written and oral communications skills, so you must either be a native English speaker or be able to meet the requirements for non-native English speakers (see below).

Do SANS Institute classes and GIAC exams I've taken in the past apply to the program?

If you've taken relevant SANS Institute classes in the past, or if you currently hold relevant GIAC certifications, you may receive waivers for related course elements that will afford you advanced standing in the program upon matriculation. Because of the ever-changing nature of the information security techniques and associated threats, SANS Institute class experiences that are more than two years old or GIAC exam scores that are more than three years old will not typically qualify for a waiver in the master's program, in order to ensure new students have current skills and capabilities. The determinations of whether and how these apply does require a more in-depth evaluation of the specifics for each individual than is described here. To evaluate how your own past experiences may apply, download the Guide to Waivers and Advanced Standing found on our website.

Once admitted, how quickly do I need to start the program?

Within sixty days of final matriculation, a new student must register and pay for a minimum of three credit hours, commensurate with the academic plan they established with a member of the faculty or their academic advisor.


What is the current cost per credit hour?

The cost per credit hour is currently $1,250, subject to change with a three-month notice period.

What is the total cost of the program?

Over 36 credit hours, the total cost of the program would be $45,000, plus certain fees, the cost of travel, and the cost of the capstone exams (currently, these are $2,398). Fees include a $100 application fee or other fees that might be associated with challenging qualifying exams in lieu of taking the full courses (this activity reduces the total cost of the program by the amount of the cost of the course which is waived).

How do I pay for the program?

Graduate students pay for the individual courses they take as they register for them. For example, ISE 5100 Enterprise Security Essentials is a 4 credit hour course. A student would therefore pay $5,000 (4 x $1,250) when registering for this course, which would then cover the costs associated with enrolling in SANS Institute class SEC 401 either live or at- a-distance, scheduling and taking the GIAC GSEC certification exam, and the costs of advising and peer-review grading of the required research paper (in this case, a GIAC Gold Paper). The minimum academic progress required would indicate that a typical student pays $10,000 per year, while completing the program in three years would typically average $15,000 per year.

Can I utilize my company's tuition reimbursement benefit?

The SANS Technology Institute is regionally accredited, and this status typically qualifies our programs for inclusion in corporate tuition reimbursement plans. However, each company's policies and practices are different, and you should check with your company's HR department or other authoritative source to determine if you would be eligible for tuition reimbursement once enrolled in our master's program.

Can I apply for and use federal student loans to pay for my education?

The SANS Technology Institute does not participate in any federal/Title IV student aid or loan programs. Most graduate students are either reimbursed by their employers or are self-funded.

Can I use a SANS Voucher Account for graduate course tuition?

Please contact the Office of Admissions ( for information regarding voucher eligibility.

Does tuition include cost of exam?

Tuition includes all course components, include the cost of the final exam and any books or labs associated with each course.

Can I participate in SANS Work Study?

The SANS Work Study Program is a popular and competitive method of SANS training which allows a selected applicant the opportunity to attend a live training event as a facilitator at a highly discounted tuition rate. Graduate students are unable to participate in the Work Study Program for course credit.

Is tuition eligible for SANS promotions?

Course tuition is ineligible for promotional offers or discounts offered by SANS.

Using GI Bill Benefits

Can I utilize 'GI Bill' funds to pay for my education?

The SANS Technology Institute is approved to accept and/or certify veterans for educational benefits, including the GI Bill. If you are interested in using your veterans benefits towards the master's degree or graduate certificate programs, please complete the form found here and make sure to check the box at the bottom of the form. If you have questions regarding veterans benefits and the SANS graduate programs, please email us at You can also find more information at

How are your benefits distributed?

Depending on which chapter of benefits you are eligible for, payments may differ. For students using Chapter 33 Post 9/11 GI Bill benefits, payments for tuition are made directly to the school, while any applicable housing stipend and other benefit payments for books and fees are paid directly to the student. Students who use other chapters, including Chapter 30 Montgomery Bill benefits, pay their tuition themselves and the VA makes payments directly to the veteran.

What courses are eligible?

SANS Technology Institute is approved by the State of Maryland. Because of this, veterans may apply their benefits to course taken online from anywhere, or when the instruction element is delivered live by our faculty at an approved location in Maryland. Students may still take courses at other live residential institutes/instructional events in other states; however, we cannot certify those enrollments to the VA.

What is an Academic Term as the SANS Technology Institute?

STI operates an open entry academic model where students can enroll in courses at anytime. As a result, we do not operate a tradition academic calendar or terms. Course terms have been established for the length of a course. We have established 3 course terms - 90 days, 60 days, 45 days, and 30 days.

What is full time equivalent?

STI expects students are completing at least 12 credit hours per year. Full time equivalent is calculated by the VA using this number, and the calculated pace of progress is determined using the number of credits earned during the time period a student is enrolled in a course.

How does the housing stipend work? *Chapter 33 Only

Students with a rate of pursuit greater than 50% may be eligible for a housing stipend. The housing stipend is calculated by the VA using the Basic Allowance for Housing (BAH) for an E-5 with dependents in the zip code where we are based: 20814.

The current maximum BAH rate through August 1, 2015 for students taking courses in person in Maryland is $2,175 per month. The maximum BAH rate, through August 1, 2015, for student taking courses through any of our distance modalities (e.g. OnDemand, vLive, and Simulcast) is $754.50 per month.

If students are eligible for a housing stipend, the payment is made directly to the student typically at the beginning of the month following the previous month's enrollment activity. Students may receive prorated amounts for the portion of a month in which the student was enrolled.

Additional Resources for Veterans:

While STI will make every effort to help you navigate your benefits, it is ultimately your responsibility to understand your benefits. We cannot advise students on eligibility of benefits, as we do not represent the Department of Veterans Affairs. Any questions should be directed to 1-888-GIBILL-1 (1-888-442-4551).

The following resources are available to help you find the information you need:

VA GI Bill Official Web Site:

VA VONAPP-Veterans Online Application:

VA Education Forms hard copies:


Payment Rates and Comparison Tool:

VA Post-9/11 GI Bill Summary:

Our VA regional processing center is the Buffalo Regional Office. Contact Information is:
Education Benefits Phone Number: 1-888-GIBILL-1 (1-888-442-4551)

Questions for non-US citizens or non-native English speakers

Do I need to be an American citizen in order to apply to the Master's program?

We are an international program, so you do not need to be an American citizen nor do you need security clearance. We welcome students from all over the world. Although based in Maryland, the SANS Technology Institute's programs will serve students in all states and many countries around the world.

How do I qualify for an I-20?

At this time, the SANS Technology Institute does not support student visas. The student is responsible for any travel associated with the completion of a degree program. Certificate programs can be completed fully at a distance, while the Master’s programs do require approximately one in-person event per year (two events offered exclusively in the US).

How do I present non-US Transcripts for an application?

When presenting a non-US transcript for admissions, candidates must first have their transcripts evaluated by World Education Services before completing their submission to STI.

What if English is not my Native Language?

Admission to the master's degree programs at the SANS Technology Institute requires that applicants are not merely proficient, but fluent, in standard written and spoken English. Certain courses include long-form research papers -- written and graded in English -- and public, oral presentations at SANS conferences where the effective communication of often subtle technical and non-technical topics is critical to success. Generally, because we are not equipped to accommodate papers or presentations that are written in a foreign language, we typically dissuade non-native speakers from applying when they are notably shy of fluency. We wish that we were able to offer our programs in different languages, but our faculty is made up of primarily native English speakers, which precludes us from working with students who may in all other respects be a good match.

The Test of English as a Foreign Language (TOEFL) is required for applicants whose native language is not English. We require a minimum score requirement of 100 (Internet-based test) over-all with each of the sub-categories (Reading, Listening, Speaking, Writing) preferred to be at a minimum of 25 each. The test scores must be sent to us directly by the testing agency.

IELTS can be used as a substitute for TOEFL. We require a minimum score requirement of 7.5 over-all with each of the sub-categories in IELTS preferred to be at a minimum of 7.5 each. IELTS scores must be sent to us directly by the testing agency.

We ask for two essays as part of the application process to supplement the submission of TOEFL scores in part because we have found that TOEFL scores are not always consistent with graduate-level writing skills required by our program. We encourage non-native English speakers to consider the strength of their written English skills as well as their oral communication capabilities.

Do I need to submit a TOEFL score?

All international applicants to SANS Technology Institute are required to demonstrate their English proficiency. You can do this by sending us your paper-based or internet-based TOEFL scores. We also accept scores from the IELTS.

Other Questions

Are scholarships or financial aid available?

The SANS Technology Institute does not provide scholarships. However, we are an eligible non-participating Title IV institution. This means that students may use 529 Educational Funds within many additional US states and all courses and programs may now qualify for US government tax credits worth up to $2,500 per year. Additional corporate tuition reimbursement programs now reimburse employees for SANS Technology Institute courses.

How are credit hours assigned to each course?

Please read our Policy and Procedure for Credit Hour Assignment and Review.

What are the policies with regards to student identify verification?

Please read our Policy Regarding the Verification of Student Identity.

Learning More about the SANS Master's Programs

Where can I learn more information?

Please learn more at If you are unable to find an answer to a question, please inquire via email to