Update, October 2026: GIAC Cloud Security Automation (GCSA) is still offered and maps to the SANS SEC540 course. The exam is 75 questions in 2 hours, and the minimum passing score is now 66%. See GIAC’s GCSA page for current details.
GIAC cybersecurity certifications are among the most renowned in the world of Cybersecurity.
They have recently announced a new training program and certification called GIAC Cloud Security Automation (GCSA)
WHAT DOES IT COVER
GCSA certification covers cloud services and modern DevSecOps practices that are used to build and deploy systems and applications more securely. The certification shows that you not only know how to speak the language of modern cloud and DevSecOps principles but can put them into practice in an automated and repeatable manner
WHO IS IT FOR
- Anyone working in a public cloud or DevOps environment
- Developers
- Software architects
- Operations engineers
- System administrators
- Security analysts and engineers
- Auditors
- Risk managers
- Security consultants
REQUIREMENTS
- 1 proctored exam
- 75 questions
- Time limit of 2 hours
- Minimum Passing Score of 61%
EXAM TOPIC AREAS
The topic areas for each exam part follow:
- Microservice Security
- Cloud Security Fundamentals
- Cloud Security Monitoring
- Compliance as Code
- Configuration Management as Code
- Container Security
- Continuous Security Monitoring
- Data Protection and Secrets Management
- Deployment Orchestration and Secure Content Delivery
- DevOps Fundamentals
- DevSecOps Security Controls
- Runtime Security Automation
- Secure Infrastructure as Code
- Securing Cloud Architecture
- Serverless Security