GIAC Defensible Security Architect (GDSA) Certification

Cyber Defense Certification Overview

Validates the ability to architect comprehensive defenses that balance prevention, detection, and response with network-centric and data-centric controls.

Explore SEC530 Course Register for the Exam

Jump to:

Overview
Exam Objectives
Course Alignment
Who It's For
FAQs

What Is the GDSA Certification?

The GIAC Defensible Security Architect (GDSA) certification validates a practitioner’s ability to architect comprehensive defenses that balance prevention, detection, and response. GDSA holders design and implement a strategic combination of network-centric and data-centric controls that create defense in depth, from Zero Trust fundamentals through cloud, data, and identity architecture.

By the numbers

2 hrs

Exam duration

Questions

63%

Min. passing score

What GDSA Covers

GDSA's 13 published exam objectives group into five practical areas, which map to Sections 1 through 5 of SEC530.

Security Architecture Foundations

Covers Fundamental Security Architecture Concepts and Layer 1/Layer 2 Defense.

Network and IPv6 Architecture

Covers Fundamental Layer 3 Defense, IPv6, and Zero Trust Networking.

Network Detection and Encrypted Access

Covers Network Defenses, Network Proxies and Firewalls, and Network Encryption and Remote Access.

Data and Cloud Security

Covers Cloud-based Security Architecture, Data Discovery, Governance, and Mobility Management, and Data-Centric Security.

Zero Trust and Endpoint Defense

Covers Zero Trust Fundamentals and Zero Trust Endpoints.

Prepare With This Course

SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise

Course Details

How SEC530 Prepares You for GDSA

SEC530 is built around the exam objectives that make up the GIAC Defensible Security Architect (GDSA) certification:

Section 1, A Journey Toward Zero Trust builds skills tested under Fundamental Security Architecture Concepts and Layer 1/Layer 2 Defense.
Section 2, Network Architecture: Edge, Segmentation, and Identity-Based Access Control aligns with Fundamental Layer 3 Defense, IPv6, and Zero Trust Networking.
Section 3, Network Detection, Secure Access, and Encrypted Traffic builds skills tested under Network Defenses, Network Proxies and Firewalls, and Network Encryption and Remote Access.
Section 4, Data-Centric Security: Protecting Data, APIs, and Workloads aligns with Cloud-based Security Architecture, Data Discovery, Governance, and Mobility Management, and Data-Centric Security.
Section 5, Zero Trust in Action: Identity, Deception, and Agentic Orchestration builds skills tested under Zero Trust Fundamentals and Zero Trust Endpoints.

Across all six sections, 24 hands-on labs and a capstone Secure the Flag challenge give you the chance to apply each skill against a live Tyrell Corporation environment before you sit the exam.

Read the full GDSA certification overview here.

SEC530 Course Author

Ismael Valenzuela

Vice President Threat Research & Intelligence at Arctic Wolf

Ismael is a Senior SANS Instructor and Arctic Wolf VP. Author of SEC530 and a prestigious GSE-certified expert, he blends decades of SOC, threat research, and community contributions to equip defenders with resilient, adversary-aware strategies.

Who Should Pursue GDSA

Security Architects and Senior Security Engineers

Network Architects and Network Engineers

Security Analysts, CND Analysts, and Security Monitoring Specialists

System Administrators

Technical Security Managers

Cyber Threat Investigators

Frequently Asked Questions

It proves you can architect a layered defense that combines network-centric and data-centric controls, balancing prevention, detection, and response instead of relying on a single control.

A 2-hour, 75-question proctored exam with a minimum passing score of 63%.

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC’s renewal page.

Security architects, network architects and engineers, security analysts, senior security engineers, system administrators, technical security managers, CND analysts, security monitoring specialists, and cyber threat investigators.

SEC530: Defensible Security Architecture and Engineering, through 24 hands-on labs and a capstone Secure the Flag challenge covering network, data, and identity architecture.

SANS Institute is a training organization. GIAC LLC is an independent certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO/IEC 17024:2012. Completion of SANS training is not required for GIAC certification, nor does it guarantee a passing exam result.

Ready to earn your GDSA certification?

Add the GDSA exam attempt when you register for SEC530.

Already trained? Register for the exam directly through GIAC here.

SEC536: Adversarial AI - Penetration Testing AI Systems