GCSA (GIAC Cloud Security Automation)
GCSA covers the cloud native toolchain, DevSecOps methodology, and security controls throughout CI/CD pipelines. Objectives include Kubernetes security, container lifecycle and supply chain security, infrastructure as code, secrets management, policy as code, and automated cloud remediation. GIAC lists developers, software architects, operations engineers, system administrators, security staff, auditors, and risk managers among the audience, and SANS SEC540 is the aligned course.
Updated
Exam Details
- Issuer
- GIAC
- Level
- Intermediate
- Exam type
- Multiple choice
- Questions
- 75
- Duration
- 2 hours
- Passing score
- 66%
- Exam fee
- $999
- Validity
- 4 years
- Tracks
- Cloud Security, Application Security
Open-book, web-based exam, proctored remotely through ProctorU or onsite at a Pearson VUE test center.
Price of one certification attempt with 120 days of access. A retake after a failed attempt is $899, a 45-day extension is $479, and a practice test is $399. Prices exclude sales tax.
Requirements and Renewal
Prerequisites
None. GIAC sets no prerequisites for any certification attempt but recommends a training course first.
Renewal
Earn 36 CPEs during the four-year cycle (or retake the exam) and pay the $499 maintenance fee. Additional renewals within two years of a full-price renewal cost $249.
Exam Domains
18 domains| Domain |
|---|
| Architecture and Fundamentals of Container Orchestration |
| Automated Cloud Remediation |
| Cloud Compliance as Code |
| Cloud Native Observability |
| Container Lifecycle Security |
| Deploying Cloud Infrastructure as Code |
| Edge Identity and Authentication |
| Managing Secrets |
| Microservice API Gateways |
| Microservices Architecture and Deployment |
| Policy Enforcement |
| Risks, Authentication, and Access-Control of Container Orchestration |
| Runtime Security in Container Orchestration |
| Securing the DevOps Workflow |
| Software Supply Chain Security |
| Understanding the DevOps Workflow |
| Utilizing Configuration Management |
| Workload Security in Container Orchestration |
DoD 8140 Work Roles
14 work rolesThe DoD 8140 Qualification Matrix V2.1 lists GCSA as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does GCSA stand for?→
GCSA stands for GIAC Cloud Security Automation.
How many questions are on the GCSA exam?→
GCSA has 75 questions with a 2-hour limit and a minimum passing score of 66% for versions released on or after June 29, 2024.
How much does GCSA cost?→
A GCSA attempt costs $999. Renewal every four years requires 36 CPEs and a $499 fee.
What happens if you fail a GIAC exam?→
Candidates can buy a retake within 30 days after the attempt deadline and must wait 30 days before sitting again. After three failed attempts the attempt ends, and a new one cannot be bought for one year.
Sources
- GIAC: GIAC Cloud Security Automation (GCSA)
- GIAC Knowledge Base: Proctor Program Overview (open book guidelines)
- GIAC: How to Renew
- GIAC Certification Pricing and Fees
- GIAC Knowledge Base: Renewal
- GIAC Knowledge Base: Retakes and Extensions
- GIAC: DoD 8140 Directive
- GIAC Company Info
- GIAC Proctoring
- GIAC Blog: Applied Knowledge exams compared with Practitioner exams
Exam details are checked against official GIAC pages. Fees, exam versions, and renewal rules change; confirm with GIAC before registering. GCSA is a trademark of its owner. This site is not affiliated with or endorsed by GIAC.