GIAC / SANS · Full exam outline
GSLC
Security Leadership Certification
Security leadership8 domains · 24 subdomains
GIAC / SANS publishes exam objectives rather than percentage weights, so this outline lists the objective areas and the topics under each.
1
Security Governance and Policy
1.1Security frameworks and programme structure
1.2Policy, standard and procedure development
1.3Security awareness and culture
2
Risk Management and Compliance
2.1Risk assessment methods
2.2Regulatory and contractual obligations
2.3Third-party and vendor risk
3
Security Architecture and Network Defence
3.1Network protocols and segmentation
3.2Cloud and hybrid architecture
3.3Endpoint and host protection
4
Cryptography and Data Protection
4.1Cryptographic concepts and key management
4.2Public key infrastructure and certificates
4.3Data classification and protection
5
Identity and Access Management
5.1Authentication and multi-factor methods
5.2Authorization models and privileged access
5.3Directory services and federation
6
Vulnerability and Threat Management
6.1Vulnerability scanning and prioritization
6.2Penetration testing oversight
6.3Threat intelligence
7
Security Operations and Incident Response
7.1Monitoring, logging and detection
7.2Incident handling process
7.3Business continuity and disaster recovery
8
Application and Cloud Security Management
8.1Secure development practices
8.2DevSecOps and pipeline controls
8.3Cloud service and container security
Weights are the certification body’s published values and are checked against each outline revision.