The Cissp Prep Guide

This book presented me a good outline of study material for the CISSP test in which I passed the first time. The CISSP test is no walk in the park. The book was excellent in the 10 domains of security.If people are serious about this certification (and qualify) then this is a book that will disect each domain without too much runoff explanation. This book is a good fit for somebody that has 3 to 5 years experience in Information Security.

I Passed CISSP Test by Using This Book and Boson Practice Test 3.I had spent 4 weeks studying them while working full time.I had not attended any CISSP training course.I had not even looked at the ISC2 study guide.The "Advanced Sample Questions" at the end of each chapter are very useful too.Some questions are not covered in the textbook, but they are explained in detail in the "Answers to Advanced Sample Questions". This is one way to extend one's insight into new areanas quickly and systematically. If one does not study these questions and answers, one will end up having to go somewhere else to find something else to cover the same topics in longer time and from MULTIPLE sources, withOUT knowing the questions and answers.Boson CISSP Practice Test 3 will also extend one's knowledge further by referring to related WEB sites. Be aware that Boson CISSP Practice Test 1 is based on Information Security Management Handbook, Fourth Edition by Harold F. Tipton, Micki Krause. Boson CISSP Practice Tests 2 and 3 are not based on any particular prep/text books.Wish that the above review would help and encourage you somewhat.

***** I tested out using The Prep Guide 2001 Edition (Gold edition is new in Oct. 2002) and I definitely recommend it as a primary guide for studies leading to an CISSP Certification. ***** There is very little left out of this book. Using the ISC2 Study Guide that you can download from free, you can check the similar sections in this book.***** The Section On Telecommunications and Network Security was excellent and did not leave much out. The only missing information I noticed was any in depth information on Telephone Systems Communications (including cellular), attacks, vulnerabilities, in depth or history. Perhaps the reason for this was this subject area is not mentioned in the ISC2 Study Guide - maybe one of the 25 questions that are used in the test for the future?***** I read it from cover to cover and used the Internet as an additional source for every subject brought up in the book. For instance, I looked up Cryptography to complement the subjects discussed in the book. You need to do this to add depth to your information.***** The 2001 book has an excellent set of Appendices, which I assume is followed up in the new book. (Q & A, Criteria, HIPPA, Glossary, excellent Reference list, Web sites.***** It was a great discovery to me to find out the Ten Domains covered a lot of areas. Areas I wish I had know about earlier in my career and which have been dealt with in Information Systems by the Government and Corporations with interest in Security issues. It is an eye opener. Examples: The strategy for Business Continuity and Disaster Recovery will help many people. The strategy for separation of duties, dual man control, rotation of duties, forced vacations will be useful in today's networked world. Very few businesses practice these logical rules. The CISSP wakes up people to improve security in the real world.***** Get this book for sure. I highly recommend it.