GIAC Security Leadership Certification (GSLC)

GIAC

Validates a practitioner's understanding of governance and technical controls focused on protecting, detecting, and responding to security issues, for security managers and leaders.

We have a course for this

Built from this exam's published objectives. The first module is free.

GIAC GSLC

Advanced · 26 hrs

Baseline certification levels

This certification satisfies these DoD baseline levels — the IAT / IAM / IASAE / CSSP requirement many contracts still state. It's a separate question from the 8140 work roles above, and there is no official mapping between the two.

IAM Level I IAM Level II IAM Level III

What this qualifies you for

Listed specifically for 5 work roles — up to Advanced proficiency. Because options cascade downward, a cert listed at Advanced also satisfies Intermediate and Basic for that role.

611Authorizing Official/Designated Representative (AO/DR)Senior official or executive with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation (CNSSI 4009).Advanced 612Security Control AssessorConducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST 800-37).Advanced 641Systems Requirements PlannerConsults with customers to evaluate functional requirements and translate functional requirements into technical solutions.Advanced 722Information Systems Security Manager (ISSM)Responsible for the cybersecurity of a program, organization, system, or enclave.Advanced 723Communications Security (COMSEC) ManagerManages the Communications Security (COMSEC) resources of an organization (CNSSI No. 4009).Advanced

Also listed for 14 Cyberspace Enablers roles — but so is every other certification

The Enablers matrix isn’t role-differentiated: the same certification options are listed for all 14 roles at every proficiency level. We verified that across all 14. So this is true, and it carries no information about this credential specifically — which is why it isn’t in the count above.

211 Forensics Analyst 221 Cyber Crime Investigator 711 Cyber Instructional Curriculum Developer 712 Cyber Instructor 731 Cyber Legal Advisor 732 Privacy Compliance Manager 751 Cyber Workforce Developer and Manager 752 Cyber Policy and Strategy Planner 801 Program Manager 802 IT Project Manager 803 Product Support Manager 804 IT Investment/Portfolio Manager 805 IT Program Auditor 901 Executive Cyber Leader

Renewal

4year cycle36CPE per cycle

Certification renewal, USD 499

This is the issuer’s clock. 8140 runs a second one — 20 hours of CPD a year, at every proficiency level, which applies even if you hold no certification at all. How that works

GIAC publishes objective areas without percentage weights; all domain weights are 0 by design. GSLC is not a CyberLive certification; it is not on GIAC's CyberLive hands-on list.

Source: GIAC - GSLC certification page · dated 2026-07-17 · checked 2026-07-17

Verifying it

GIAC publishes a lookup a third party can use without your involvement.

Name or GIAC number

Issuer lookup Track this credential

GIAC publishes objective areas without percentage weights; all domain weights are 0 by design. GSLC is not a CyberLive certification; it is not on GIAC's CyberLive hands-on list.

Source: GIAC - GSLC certification page · dated 2026-07-17 · checked 2026-07-17

Exam blueprint

Verified against GIAC’s published outline.

GSLC

Current

115 questions · 3 hours · passing score 70%

Cryptography Concepts for Managers

Incident Response and Business Continuity

Managing a Security Operations Center

Managing Application Security

Managing Artificial Intelligence

Managing Cloud Security

Managing Encryption and Privacy

Managing Negotiations and Vendors

Managing Projects

Managing Security Awareness

Managing Security Policy

Managing System Security

Managing the Program Structure

Network Monitoring for Managers

Network Security Architecture

Networking Concepts for Managers

Risk Management and Security Frameworks

Vulnerability Management

GIAC publishes objective areas without percentage weightings, so none are shown.

GIAC publishes objective areas without percentage weights; all domain weights are 0 by design. GSLC is not a CyberLive certification; it is not on GIAC's CyberLive hands-on list.

Source: GIAC - GSLC certification page · dated 2026-07-17 · checked 2026-07-17