Rating: Summary: Best technical resource Review: According to the three CISSPs I've asked, this book is the key to the kingdom. Written for technical folks by technical folks, it clearly describes the 10 domains. I made this book the center of my study platform.If you are a sociology major, try another title.
Rating: Summary: Excellent reference Review: As another reviewer has already said, this book is huge and packed with useful information. The book runs over 1000 pages, and close to 20% of that covers the new ISSEP concentration. Here's the book's table of contents from my copy of the book: Part I: Focused Review of the CISSP Ten Domains. Chapter 1: Security Management Practices. Chapter 2: Access Control Systems. Chapter 3: Telecommunications and Network Security. Chapter 4: Cryptography. Chapter 5: Security Architecture and Models. Chapter 6: Operations Security. Chapter 7: Applications and Systems Development. Chapter 8: Business Continuity Planning and Disaster Recovery Planning. Chapter 9: Law, Investigation, and Ethics. Chapter 10: Physical Security. Part II: The Information Systems Security Engineering Professional (ISSEP) Concentration. Chapter 11: Systems Security Engineering. Chapter 12: Certification and Accreditation (C&A). Chapter 13: Technical Management. Chapter 14: U.S. Government Information Assurance (IA) Regulations. Part III: Appendices. Appendix A: Answers to Assessment Questions. Appendix B: Glossary of Terms and Acronyms. Appendix C: Sample SSAA. Appendix D: Excerpts from the Common Criteria. Appendix E: The Cost Analysis Process. Appendix F: National Information Assurance (IA) Glossary.
Rating: Summary: A disappointment. Review: I already have my CISSP and I purchased this book for the ISSEP content. I think the writing is miserable. It looks like the author simply copied and pasted contents from the referenced government documents. Yes, the information is there. No, it is not a "fun" read like Shon Harris' book. Wait for the third edition of Shon's book - I'm sure it will be much better.
Rating: Summary: Huge amount of material, complete study reference Review: I just got my copy of the CISSP Prep Guide 2nd Edition this week and have several other CISSP books. This book is huge, and is the most comprehensive collection of study material of any of them. It's the most up-to-date, and is very accessibly written. Clearly the best value and most complete CISSP study text available.
Rating: Summary: Good Prep Guide for Passing the Test Review: I liked this prep guide because it's not one of those huge books that's impossible to fit in your carry-on or laptop bag if you're traveling. It has enough information to pass the test, which is good enough for me because that's all I needed to pass the test this month. But, if you're one of those people who has a need to get every single question right, this is not the book for you. The book doesn't cover every single thing you need to know for the exam, just enough to pass it. The only draw back to this book is that it doesn't come with a CD with a comprehensive set of sample test questions. I had to go to one of those huge books that I bought a couple of years ago for that, but I didn't read the huge book.
Rating: Summary: Good Prep Guide for Passing the Test Review: I liked this prep guide because it's not one of those huge books that's impossible to fit in your carry-on or laptop bag if you're traveling. It has enough information to pass the test, which is good enough for me because that's all I needed to pass the test this month. But, if you're one of those people who has a need to get every single question right, this is not the book for you. The book doesn't cover every single thing you need to know for the exam, just enough to pass it. The only draw back to this book is that it doesn't come with a CD with a comprehensive set of sample test questions. I had to go to one of those huge books that I bought a couple of years ago for that, but I didn't read the huge book.
Rating: Summary: Thorough Coverage of all CISSP Domains Review: I used this book as my primary study source for the CISSP exam, it helped me pass (first time). The coverage of the ten domains is strong and and provides an excellent basis for preparing. The CISSP domain I found hardest to study for was Cryptography - this book provides great 'plain English' coverage of this topic. My only caution would be, that to maximize the chances of passing, it is better to use more than one text / source. Also, like all exams, sufficient practice makes the exam easier.
Rating: Summary: Excellent CISSP preparation guide Review: In June 2004, the International Organization for Standardization (known as the ISO) granted certification in the area of information security for the Certified Information Systems Security Professional (CISSP) designation. With ISO certification, the CISSP is gaining in prominence, making The CISSP Prep Guide a timely and informative resource.
This book is useful for anyone preparing to take the CISSP or ISSEP (Information Systems Security Engineering Professional) exams. The CISSP is tailored for professionals working in the private sector, while ISSEP has been designed, in conjunction with the National Security Agency, for would-be security engineers.
The guide has 14 chapters. The first ten chapters correspond to the ten domains of the security Common Body of Knowledge that underlies the CISSP exam. ISSEP candidates will find the final four chapters geared to them.
A CD-ROM that accompanies the book includes simulated testing for each exam. The CISSP preparation software contains 327 questions, while another 120 are devoted to the ISSEP exam. These tests are helpful, but they should not be used in lieu of studying. Overall, the package is an effective aid for anyone planning to take the CISSP or ISSEP exam.
Rating: Summary: This IS the Book to buy FIRST! Review: It's been said many times that the vast ocean of the CISSP Common Body of Knowledge (CBK) is fifty miles wide and two miles deep and preparing for it can be quite an overwhelming endeavor. Various on-line study groups and web sites have numerous suggestions and links where freely available materials and helpful hints may be found. Individuals share there study guides and suggest the best books to procure for the study quest. I myself have participated and contributed in these vibrant forums. It's been said many times over that NO one book can effectively cover the CBK and to prepare the CISSP candidate for the exam. I too have amassed a large collection of the most suggested tomes. Well The CISSP Prep Guide almost negates this statement. The CISSP Prep Guide is now the FIRST place to start! I wish it had been in print a year ago when I began my quest for the CISSP. It is a complete and affordable textbook covering the MEAT of the CBK. This book completely defines and explains the major points of the CBK. It is an extremely readable and understandable text. If you can't afford attending the ISC2 CISSP Seminar either because of cost or time away from work this book is for you. If you have already attended the CISSP Seminar this book is for you. I was blessed by having the opportunity in attending the CISSP Seminar yet I am still finding that The CISSP Prep Guide is building upon the materials presented in the seminar. I can see where my copy of The CISSP Prep Guide will quickly become a dog-eared reference text that I use to refer to while carrying out my duties as an Information Systems Security Officer with the U.S. Government.
Rating: Summary: for CISSP, start here Review: This book is exactly what CISSP candidates need to prepare for the exam. The authors make sure to cover the CISSP Common Body of Knowledge in enough detail, give pointers along the way, and include sample questions to practice for the exam. Since this is a study guide, the emphasis is on breadth, not depth of coverage, and that's the way it should be. Several inaccuracies and typos should be corrected in the second edition (e.g. the description of lattice-based control on p. 34, or sample question 9 in Chapter 10 and its answer). So is this now my favorite survey of computer and information security? Not quite. I still prefer "Secure Computing" by Rita C. Summers, even though it is already 4 years old. Unfortunately it is out of print, and it is a mystery why McGraw Hill wouldn't print a few thousand copies to satisfy the demand. Another CISSP prep book is coming soon (Mandy Andress, "CISSP Exam Cram"). Let's hope it will be as good as the Prep Guide.
|