Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

GIAC Cloud Security Architecture and Design Certification (GCAD)

Cloud Security Certification Overview

Learn to design the cloud identity, zero-trust access, network segmentation, data protection, and logging architectures the GCAD exam tests.

Explore SEC549 CourseRegister for the Exam
GCAD Badge
Jump to:

What Is the GCAD Certification?

The GIAC Cloud Security Architecture and Design (GCAD) certification validates a practitioner's expertise in cloud provider frameworks and design approaches for secure architecture in the cloud. GCAD certification holders are proficient in strategies and design techniques to implement workforce identity, conditional access, network security controls, and centralized logging.

By the numbers

2 hrs

Exam duration

75

Questions

63%

Min. passing score

What GCAD Covers

The objectives group into 5 practical domains that map to SEC549's 5 course sections.

Cloud Identity and Access Foundations

Covers the Cloud Identity, Federated Access and SSO, and Hierarchical Cloud Structures objectives.

Zero-Trust Identity Perimeter

Covers Implementing Zero Trust, Conditional Access Policies, Customer Identity and Access Management, and Architecting Cross-Cloud Identity.

Network Architecture and Segmentation

Covers Managing Cloud Networks at Scale, Cloud Network Micro Segmentation, Network Firewalls and Traffic Inspection, and Centralizing Shared Network Services.

Data Protection and Classification

Covers Data Classification and Resource Tagging, Data Security, Defending Data in the Cloud, and Key Management Architecture.

Centralized Logging and Cloud SOC

Covers Comprehensive Logging and Aggregation, Incident Response in the Cloud, and Orchestrating Log Integrations for Operational Value.

Prepare With This Course

SEC549: Cloud Security Architecture

Course Details

How SEC549 Prepares You for GCAD

SEC549 is built around the exam objectives that make up the GCAD certification: 

  • Section 1, Cloud Account Management and Identity Foundations builds skills tested under Cloud Identity, Federated Access and SSO, and Hierarchical Cloud Structures.
  • Section 2, Implementing an Identity Perimeter in the Cloud aligns with Implementing Zero Trust, Conditional Access Policies, Customer Identity and Access Management, and Architecting Cross-Cloud Identity.
  • Section 3, Network Access Perimeters for the Cloud builds skills tested under Managing Cloud Networks at Scale, Cloud Network Micro Segmentation, Network Firewalls and Traffic Inspection, and Centralizing Shared Network Services.
  • Section 4, Data Access Perimeters in the Cloud aligns with Data Classification and Resource Tagging, Data Security, Defending Data in the Cloud, and Key Management Architecture.
  • Section 5, Enable the Cloud-Focused SOC builds skills tested under Comprehensive Logging and Aggregation, Incident Response in the Cloud, and Orchestrating Log Integrations for Operational Value.

Across all 5 sections, 15 hands-on labs and a capstone CloudWars challenge give you the chance to apply each skill in live AWS, Azure, and Google Cloud environments before you sit the exam. 

Read the full GCAD certification overview 

SEC549 Course Authors

Eric Johnson

Eric Johnson

Principal Security Engineer at Puma Security

Eric Johnson is a Fellow at the SANS Institute and Principal Security Engineer at Puma Security. He leads hands-on training in SEC540: Cloud Native Security and DevSecOps Automation, co-authors SEC549 and SEC510, and develops open-source tools to help practitioners secure cloud pipelines.

Learn more
David Hazar

David Hazar

Security Consultant at HazarDSec LLC

David has 20+ years of experience in vulnerability management, application security, and DevOps. He's developed technical security training initiatives, and believes vulnerability management is one of the most important foundations of cybersecurity.

Learn more
Gregory Leonard

Gregory Leonard

Senior Cloud Security Architect at Milwaukee Tool

Greg's responsibilities over the course of his career have included application security testing, cloud security testing, application architecture and security, infrastructure design and implementation, performance diagnostics, and security research.

Learn more

Who Should Pursue GCAD

Cloud and Solutions Architects

Security Engineers and Analysts

DevOps and Cloud Engineers

System Administrators and Operations

Auditors and Risk Managers

Frequently Asked Questions

The GCAD certification proves that you can apply cloud provider frameworks and design principles to build secure cloud architecture, including workforce identity, conditional access, network segmentation, data protection, and centralized logging. It certifies practical design skill, not just familiarity with cloud security concepts. 

The GCAD exam is a single, 2 hour proctored exam with 75 questions. GIAC has set the passing score at 63% for exam versions released on or after January 25, 2025. Because GIAC periodically updates its exam specifications, confirm the current format and passing score in the Certification Information section of your GIAC account before you sit the exam. 

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC’s renewal page. 

GCAD is built for cloud architects, security engineers and analysts, DevOps and system administrators, and auditors or risk managers responsible for cloud environments. GIAC also names anyone working in a cloud environment as a fit, since the design decisions GCAD covers, like identity, network segmentation, and data protection, touch most roles that build or operate cloud infrastructure. 

SEC549: Cloud Security Architecture is the SANS course built to prepare you for the GCAD exam. Across 5 sections, the course pairs 15 hands-on labs with CloudWars challenge rounds covering cloud identity, zero-trust access, network segmentation, data protection, and centralized logging, the same domains GCAD tests.

Ready to earn your GCAD certification?

Add the GCAD exam attempt when you register for SEC549.

Register for SEC549

Already trained? Register for the exam directly through GIAC here.