Cookie Notice

This Cookie Notice describes the types of cookies and similar tracking technologies used on the websites owned and operated by The Escal Institute of Advanced Technologies, Inc. doing business as SANS Institute, including sans.org, sans.edu, and giac.org, and related subdomains (collectively, the “Sites”). References to “SANS,” “we,” “us,” or “our” in this notice refer to The Escal Institute of Advanced Technologies, Inc. and its subsidiaries.

This Cookie Notice should be read together with the applicable Privacy Policy for the Site you are visiting: sans.org Privacy Policy, sans.edu Privacy Policy, and giac.org Privacy Policy. Each Privacy Policy provides further detail on how we collect, use, and protect personal information on the respective Site.

1. What Is a Cookie?

A cookie is a small text file placed on your device when you visit a website. Cookies and similar technologies allow websites to recognize your device, store your preferences, and collect information about how you interact with our Sites. The information collected may include pages visited, time spent on pages, language preferences, and other usage data.

Cookies are categorized in two ways:

• By source: First-party cookies are set directly by SANS. Third-party cookies are set by external service providers whose tools we have integrated into our Sites, such as analytics and advertising platforms.
• By duration: Session cookies are temporary and are deleted when you close your browser. Permanent cookies remain on your device after your browser is closed and allow the Site to recognize you on return visits.

2. What Categories of Cookies Do We Use?

We use four categories of cookies on our Sites, as described below. The specific cookies within each category, including their names and providers are listed in the tables below. You can access these cookies at any time via the “Cookie Notice” link at the bottom of any page on our Sites. The cookie list is maintained dynamically and reflects the current cookies in use.

Strictly Necessary Cookies

These cookies are required for our Sites to function. They enable core features such as authentication, security, session management, and the storage of your privacy preferences. Because these cookies are essential to the operation of our Sites, they cannot be disabled through our cookie management tool. You may block them through your browser settings, but doing so may prevent parts of the Sites from functioning as intended. These cookies do not require your consent.

Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering language preferences, region settings, or previously viewed content. They may be set by SANS or by third-party providers whose services appear on our pages. Disabling these cookies may result in reduced functionality on some parts of our Sites.

Analytics Cookies

These cookies help us understand how visitors interact with our Sites by collecting information about pages visited, time spent, traffic sources, and navigation paths. The data collected is used to measure and improve Site performance. Analytics cookies may be set by SANS or by third-party analytics providers. Data collected by these cookies is used to produce aggregated reports. Where these cookies process personal information, we rely on your consent in jurisdictions that require it.

Targeting and Advertising Cookies

These cookies are used to build a profile of your interests and to deliver relevant advertising to you on our Sites and on other websites. They are typically set by our advertising partners and operate by uniquely identifying your browser and device. They do not store directly identifiable personal information, but they do enable the creation of a profile linked to your device. Where these cookies involve the sale or sharing of personal information, or require consent under applicable law, we will obtain that consent before deploying them.

3. Legal Basis for Processing

The legal basis on which we process personal information collected through cookies depends on your location and the category of cookie involved.

• Strictly necessary cookies: We process this data based on our legitimate interest in operating a functional and secure website, or as necessary to perform a contract with you.
• Functional, analytics, and targeting cookies: In jurisdictions subject to the EU General Data Protection Regulation (GDPR), UK General Data Protection Regulation (UK GDPR), or Singapore Personal Data Protection Act (PDPA), we rely on your consent as the legal basis for these cookies. In those jurisdictions, non-essential cookies will not be set until you have provided affirmative consent through our cookie management tool.
• US state privacy laws: For visitors in US states with applicable privacy laws, including California, Colorado, Connecticut, Virginia, and others, we provide the ability to opt out of cookies that involve the sale or sharing of personal information as defined under those laws. You may exercise this right through our cookie management tool or by enabling a Global Privacy Control (GPC) signal in your browser, which we will honor as an opt-out request.
• Australia: For visitors subject to the Australian Privacy Act 1988 and the Australian Privacy Principles, we provide clear notice of our cookie practices and a simple means to opt out of cookies used for direct marketing purposes.

4. How Do We Use the Information Collected Through Cookies?

We use the information collected through cookies and similar technologies for the following purposes:

• To operate and secure our Sites, including authentication, fraud prevention, and load balancing.
• To remember your preferences and personalize your experience.
• To measure how our Sites are used and to improve their design, content, and functionality.
• To understand the effectiveness of our marketing and advertising campaigns.
• To deliver advertising relevant to your interests, where you have consented or where permitted by applicable law.
• To comply with our legal obligations and enforce our terms.

5. Third-Party Cookies and Service Providers

Some cookies on our Sites are set by third-party service providers, including analytics platforms, marketing automation tools, and advertising networks. These providers may include Google Analytics, LinkedIn, YouTube, and others. Each third-party provider operates under its own privacy and cookie policies. Where personal information is transferred to these providers, we ensure that appropriate data processing agreements or equivalent safeguards are in place.

6. International Data Transfers

SANS operates globally and some of the cookies deployed on our Sites may involve the transfer of personal information to countries outside your jurisdiction, including to the United States. Where such transfers occur from the European Economic Area, the United Kingdom, or Singapore, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms recognized under applicable law.

7. How to Manage Your Cookie Preferences

You have several options for managing cookies:

Cookie Management Tool. You can review and update your cookie preferences at any time by clicking the “Cookie Settings” link below available at the Cookie Notice at the bottom of any page on our Sites. This tool allows you to accept or decline cookies by category, except for strictly necessary cookies.

Browser Settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being set. The help function of your browser will tell you how to do this. Note that disabling cookies through your browser settings may affect the functionality of our Sites.

Global Privacy Control. If you use a browser or browser extension that sends a Global Privacy Control (GPC) signal, we will treat that signal as an opt-out of the sale or sharing of your personal information where required by applicable US state privacy law.

8. Retention

Strictly necessary cookies are generally session-based and expire when you close your browser or are retained only as long as needed for the specific function they serve. Functional and analytics cookies are retained for the period necessary to fulfill the stated purpose, typically no longer than 13 months. Targeting and advertising cookies are retained for the period set by the third-party provider, and all cookies are removed when no longer necessary or when consent is withdrawn. We review our cookie inventory periodically and remove cookies that are no longer necessary.

9. Changes to This Cookie Notice

We may update this Cookie Notice from time to time to reflect changes in the cookies we use, changes in applicable law, or for other operational reasons. The “Last Revised” date at the top of this notice indicates when it was most recently updated. Where we make material changes, we will provide notice through our cookie management tool or through other appropriate means when you next visit our Sites.

10. Contact Us

If you have questions or concerns about this Cookie Notice or about our use of cookies and similar technologies, please contact us at:

Email: privacy@sans.org

Post: The Escal Institute of Advanced Technologies, Inc. / SANS Institute 11200 Rockville Pike, Suite 200 North Bethesda, MD 20852 United States

For inquiries from individuals located in the European Economic Area or the United Kingdom, you may also contact our EMEA legal team at privacy@sans.org.