← HomeGIAC / SANS · Full exam outline
GSLC
Security Leadership Certification
Security leadershipCore certification
1Security Governance and Policy
1.1Security frameworks and programme structure
1.2Policy, standard and procedure development
1.3Security awareness and culture
2Risk Management and Compliance
2.1Risk assessment methods
2.2Regulatory and contractual obligations
2.3Third-party and vendor risk
3Security Architecture and Network Defence
3.1Network protocols and segmentation
3.2Cloud and hybrid architecture
3.3Endpoint and host protection
4Cryptography and Data Protection
4.1Cryptographic concepts and key management
4.2Public key infrastructure and certificates
4.3Data classification and protection
5Identity and Access Management
5.1Authentication and multi-factor methods
5.2Authorization models and privileged access
5.3Directory services and federation
6Vulnerability and Threat Management
6.1Vulnerability scanning and prioritization
6.2Penetration testing oversight
6.3Threat intelligence
7Security Operations and Incident Response
7.1Monitoring, logging and detection
7.2Incident handling process
7.3Business continuity and disaster recovery
8Application and Cloud Security Management
8.1Secure development practices
8.2DevSecOps and pipeline controls
8.3Cloud service and container security
Weights are the certification body’s published values and are checked against each outline revision.