GIAC Security Leadership (GSLC) exam guide

Exam GSLC

GIAC Security Leadership (GSLC) proves you can manage security programs, teams and technology decisions, from risk frameworks and policy to SOC, cloud and AI governance. Aligned with SANS LDR512, it suits technical people stepping into leadership.

Questions115

Time limit180 minutes

Passing score70%

Exam feeSee official page

Valid for4 years

DeliveryRemote proctored (ProctorU) or Pearson VUE test center

Format: Proctored web-based multiple choice; open book. Fee note: GIAC shows the price at checkout; attempts bundled with SANS training cost less than standalone attempts. Includes practice tests.

Who it's for

Security managers, team leads and technical professionals moving into management.

What the exam covers

Risk Management and Security Frameworks—

Managing Security Policy—

Managing the Program Structure—

Managing Projects—

Managing Negotiations and Vendors—

Managing a Security Operations Center—

Incident Response and Business Continuity—

Managing Cloud Security—

Managing Application Security—

Managing Artificial Intelligence—

Vulnerability Management—

Managing Security Awareness—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: None.

Recommended: Several years in security or IT; SANS LDR512 is the aligned course.

Keeping it active

Valid four years: earn 36 CPEs in the cycle and pay GIAC's certification maintenance fee, or renew by retaking the current exam.

Skills & careers

Skills it validates

Applying security frameworks and risk management
Building security policy and program structure
Managing projects, vendors and negotiations
Overseeing SOC and incident response
Governing cloud, application and AI security
Running security awareness programs

Job roles

Information Security ManagerSecurity Team LeadSecurity Program ManagerCISOIT Manager

DoD 8140

Listed in the DoD 8140 qualification matrix for cybersecurity management work roles; historically approved for 8570 IAM I and II. Confirm on the DoD CWQ site. Open the DoD Workforce Navigator

Where it fits in your path

Take before

ISC2 CISSP

Go next

ISACA CISM EC-Council Certified CISO (C|CISO) ISC2 CISSP-ISSMP (Management)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

Week 1-2: Frameworks, risk and policy.
Week 3: Program structure, projects and vendors.
Week 4: SOC, IR, cloud, AppSec and AI management.
Week 5: Index building and practice tests, then book.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam date Hours per week

Exam-day tips

GIAC exams are open book (printed notes only); build a tabbed index of your course books before the exam.
115 questions is the largest count in this group; keep moving and avoid over-checking the index.
Answer from a manager's viewpoint: business alignment and process.
AI management is a new objective; do not skip it.

Key terms for this exam

CISO SEC Cybersecurity Disclosure Rules Security Metrics

All 3 terms Study with thinQcards™

Frequently asked questions

Pass mark?

70%.

GSLC vs CISM?

CISM is more widely recognised; GSLC is a good fit if you take SANS LDR512.

Is it technical?

Moderately; it covers technology at a manager's depth.

Renewal?

Every four years with 36 CPEs.

Is it open book?

Yes.

Official page: www.giac.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.

1. Map it thinQguide™ · 409 cert guides 2. Learn it thinQterms™ · 7,491 terms 3. Untangle it 180 look-alike comparisons 4. Prove it thinQready™ · free readiness check

Find your exam