Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

GIAC Defensible Security Architect Certification (GDSA)

Cyber Defense Certification Overview

Prove you can architect layered, Zero Trust defenses across network, data, cloud, and identity, from Layer 2 hardening to encrypted traffic and beyond.

Explore SEC530 CourseRegister for the Exam
GDSA Badge
Jump to:

What Is the GDSA Certification?

The GIAC Defensible Security Architect (GDSA) certification validates a practitioner’s ability to architect comprehensive defenses that balance prevention, detection, and response. GDSA holders design and implement a strategic combination of network-centric and data-centric controls that create defense in depth, from Zero Trust fundamentals through cloud, data, and identity architecture.

By the numbers

2 hrs

Exam duration

75

Questions

63%

Min. passing score

What GDSA Covers

The objectives group into five practical domains, matching SEC530’s section structure.

Security Architecture Foundations

Fundamental Security Architecture Concepts and Layer 1/Layer 2 Defense.

Network and IPv6 Architecture

Fundamental Layer 3 Defense, IPv6, and Zero Trust Networking.

Network Detection and Encrypted Access

Network Defenses, Network Proxies and Firewalls, and Network Encryption and Remote Access.

Data and Cloud Security

Cloud-based Security Architecture, Data Discovery, Governance, and Mobility Management, and Data-Centric Security.

Zero Trust and Endpoint Defense

Zero Trust Fundamentals and Zero Trust Endpoints.

Prepare With This Course

SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise

Course Details

How SEC530 Prepares You for GDSA

SEC530 is built around the exam objectives that make up the GIAC Defensible Security Architect (GDSA) certification: 

  • Section 1, A Journey Toward Zero Trust builds skills tested under Fundamental Security Architecture Concepts and Layer 1/Layer 2 Defense.
  • Section 2, Network Architecture: Edge, Segmentation, and Identity-Based Access Control aligns with Fundamental Layer 3 Defense, IPv6, and Zero Trust Networking.
  • Section 3, Network Detection, Secure Access, and Encrypted Traffic builds skills tested under Network Defenses, Network Proxies and Firewalls, and Network Encryption and Remote Access.
  • Section 4, Data-Centric Security: Protecting Data, APIs, and Workloads aligns with Cloud-based Security Architecture, Data Discovery, Governance, and Mobility Management, and Data-Centric Security.
  • Section 5, Zero Trust in Action: Identity, Deception, and Agentic Orchestration builds skills tested under Zero Trust Fundamentals and Zero Trust Endpoints.

Across all six sections, 24 hands-on labs and a capstone Secure the Flag challenge give you the chance to apply each skill against a live Tyrell Corporation environment before you sit the exam. 

Read the full GDSA certification overview here.

SEC530 Course Author

Ismael Valenzuela
Ismael Valenzuela

Ismael Valenzuela

Vice President Threat Research & Intelligence at Arctic Wolf

Ismael is a Senior SANS Instructor and Arctic Wolf VP. Author of SEC530 and a prestigious GSE-certified expert, he blends decades of SOC, threat research, and community contributions to equip defenders with resilient, adversary-aware strategies.

Read more about Ismael Valenzuela

Who Should Pursue GDSA

Security Architects and Senior Security Engineers

Network Architects and Network Engineers

Security Analysts, CND Analysts, and Security Monitoring Specialists

System Administrators

Technical Security Managers

Cyber Threat Investigators

Frequently Asked Questions

It proves you can architect a layered defense that combines network-centric and data-centric controls, balancing prevention, detection, and response instead of relying on a single control. 

A 2-hour, 75-question proctored exam with a minimum passing score of 63%. 

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC’s renewal page. 

Security architects, network architects and engineers, security analysts, senior security engineers, system administrators, technical security managers, CND analysts, security monitoring specialists, and cyber threat investigators. 

SEC530: Defensible Security Architecture and Engineering, through 24 hands-on labs and a capstone Secure the Flag challenge covering network, data, and identity architecture. 

Ready to earn your GDSA certification?

Add the GDSA exam attempt when you register for SEC530.

Register for SEC530

Already trained? Register for the exam directly through GIAC here.