🔥 Trending Certification · 2025

GIAC Defensible Security Architect (GDSA)

Validate your ability to design and implement strategic security architectures that balance prevention, detection, and response. GDSA-certified professionals demonstrate expertise in network-centric and data-centric controls, Zero Trust architecture, cloud security design, and layered defence strategies grounded in real-world adversary models.

Security Architecture Zero Trust Network Defence Data-Centric Security Cloud Security Layered Defence Industry Recognised

Enroll Now

Security Architecture FundamentalsZero Trust model, Kill Chain, Diamond Model & micro-segmentation

Network-Centric ControlsFirewalls, proxies, NIDS/NIPS & network encryption

Data-Centric SecurityDLP, WAF, database firewalls & data governance

Zero Trust ArchitectureZero Trust endpoints, networking & credential rotation

Exam Questions

2 hrs

Duration

63%

Passing Score

GIAC

Certified

Why It's Trending

Security Architecture Is the Backbone of Every Resilient Organisation

As organisations adopt hybrid cloud, micro-segmentation, and Zero Trust, the need for professionals who can design cohesive, defensible architectures that balance prevention with detection and response has never been greater.

Trending

Zero Trust

Leading Security Design Framework

Zero Trust has become the dominant security architecture model — GDSA directly validates the ability to design and implement Zero Trust environments.

10,000+

Open Security Architect Roles Globally

Demand for certified security architects who can design defensible, layered environments continues to grow rapidly across all sectors.

Trending

Multi-Layer

Network + Data + Cloud Architecture

GDSA covers all three control planes — network-centric, data-centric, and cloud — giving certified architects the broadest defensive toolkit.

+45%

Salary Premium for Security Architects

Security architects and senior network security engineers are among the highest-compensated roles in the cybersecurity industry.

Course Content

Complete GDSA Curriculum

Click any module to expand and explore the topics covered in detail.

Fundamental Security Architecture Concepts

5 Topics

Perimeter-focused deficiencies, presumption of compromise, and Zero Trust model

Intrusion Kill Chain, Diamond Model, and threat vector analysis

Software-defined networking, micro-segmentation, and attack surface analysis

IPv6 addressing, dual-stack systems, tunnelling, and RA attack mitigation

Fundamental Layer 3 defence: CIDR, routing attacks, SNMP/NTP hardening, and bogon filtering

Network Defences & Encryption

5 Topics

NIDS, NIPS, network security monitoring, and sandboxing

Encryption in transit and DDOS protection strategies

Secure remote access: dual-factor for VPNs and jump boxes

Web proxies, SMTP proxies, and next-generation firewalls

Network encryption, remote access controls, and VPN architecture

Layer 1/2 Defence & Cloud Security Architecture

5 Topics

Layer 1/2 attack surface: VLAN structure, CDP, MAC spoofing, ARP cache poisoning

DHCP starvation, VLAN hopping, 802.1X, and NAC deployment

Cloud security concepts: hypervisor security, network segmentation, and container security

Cloud delivery models and attack surface reduction strategies

Data Discovery, Governance, DLP, database governance, and MDM

Data-Centric Security Controls

5 Topics

Reverse proxies and web application firewalls (WAF)

Database firewalls and database activity monitoring (DAM)

File classification and Data Loss Prevention (DLP) implementation

Mobile Device Management (MDM) and data mobility controls

Balancing data-centric controls with network-centric controls in layered defence

Zero Trust Architecture & Endpoint Security

5 Topics

Zero Trust fundamentals: credential rotation and responding to pivoting adversaries

Zero Trust networking: authenticating and encrypting endpoint traffic

Domain Isolation, Single Packet Authentication, and red herring defences

Zero Trust endpoints: patching automation, privilege reduction, and host IDS/IPS

Scaling endpoint log collection and endpoint firewall management

FAQs

Frequently Asked Questions

What is the GIAC Defensible Security Architect (GDSA) certification?

GDSA validates a practitioner's ability to design and implement a strategic combination of network-centric and data-centric controls to balance prevention, detection, and response. Certified professionals demonstrate expertise in Zero Trust architecture, cloud security design, network layering, and data-centric control implementation.

What are the GDSA exam requirements?

The GDSA exam consists of 75 questions, is web-based and proctored, has a 2-hour time limit, and requires a minimum passing score of 63%. Proctoring is available via ProctorU (remote) or PearsonVUE (onsite).

Does GDSA cover Zero Trust architecture?

Yes — Zero Trust is a central GDSA topic, covering Zero Trust fundamentals, Zero Trust networking (authenticating and encrypting endpoint traffic, Domain Isolation, Single Packet Authentication), and Zero Trust endpoints (patching automation, host hardening, endpoint IDS/IPS).

Who should pursue the GDSA certification?

GDSA is ideal for security architects, network engineers, network architects, security analysts, senior security engineers, system administrators, technical security managers, CND analysts, security monitoring specialists, and cyber threat investigators.

Does GDSA cover cloud security architecture?

Yes — GDSA covers cloud-based security architecture including securing on-premise hypervisors, network segmentation, attack surface reduction, cloud delivery models, and container security.

Does GDSA cover data-centric security?

Yes — GDSA covers data-centric controls including reverse proxies, web application firewalls (WAF), database firewalls, database activity monitoring (DAM), Data Loss Prevention (DLP), file classification, and Mobile Device Management (MDM).

Design Defensible Architectures with GDSA

Join Zetlan Technologies' GDSA programme and develop the network-centric, data-centric, cloud, and Zero Trust architecture skills to build security environments that are defensible by design. Earn your GIAC certification and become the security architect every enterprise needs.

GIAC Defensible Security Architect (GDSA)

Security Architecture Is the Backbone of Every Resilient Organisation

GDSA Exam Details

Complete GDSA Curriculum

Designed for Security Architecture & Network Defence Professionals

Frequently Asked Questions

Design Defensible Architectures with GDSA