The CISSP Prep Guide: Mastering the CISSP and ISSEP Exams [With CDROM]

by Russell Dean Vines and Ronald L. Krutz

Book Overview

This updated bestseller features new, more focused review material for the leading computer security certification-the Certified Information Systems Security Professional, or CISSP The first book on the market to offer comprehensive review material for the Information Systems Security Engineering Professional (ISSEP) subject concentration, a new CISSP credential that's now required for employees and contractors of the National Security Agency (NSA)...

• Format: Paperback
• Language: English
• ISBN: 076455915X
• ISBN13: 9780764559150
• Release Date: April 2004
• Publisher: Wiley Publishing
• Length: 1024 Pages
• Weight: 3.60 lbs.
• Dimensions: 2.2" x 7.4" x 9.3"

Customer Reviews

Excellent Introduction & Framework to Start

I enjoy reading this book very much. I have adopted this as one of the textbooks for my undergraduate Computer Security course. I think this is one of the best introduction and survey to provide a solid framework for the field, and for those to prepare CISSP. It is very well written as a summary, with excellent references for the original and critical sources. I see some of the frustration by other reviewer (for example, on Chapter 3) but I think that the authors have done a superb work. The problem or frustration is, I think, due to the vast amount, depth and bredth of each field to be summerized (which can easily be expanded into several books). I use this book as a framework, along with (1) Incident Response (by Mandia & Prosise) and (2.1) Hacking Exposed (2nd ed, by Scambray, McClure, Kurtz) or (2.2) Maximum Security (3rd ed, Anonymous) to supplement the reading and case study.

Masterful Coverage, Well Organized

I have had the CISSP certification squarely on my radar for about a year now, but the sheer amount of information to compile and read and remember is simply too much. This is because the compiled readings are mainly at best, guesswork. What's more, the weightages of the Ten Domains of Computer Security can be markedly different, and no one can really be sure of the importance of certain sections as compared to others. For example, both authors who are themselves CISSP certified, place Telecommunications and Network Security as more heavily covered in the exam than say, Security Management Practices, clearly a time saver for those who like me, am also pursuing the BS7799 Auditor certification.Within each chapter, the authors also clearly prioritize the topics. In the Chapter entitled Access Systems, the topic Decntralized/Distributed Access Control takes up half of the chapter, again, demonstrating that more attention has to be paid by the reader.Though the information to cover is vast, I never felt that I needed a map to navigate the contents. Each chapter's objectives are clearly stated, and the section lucidly explained. Best of all, the visual and textual aspects are just right for the eye. Of course, for a exam that covers 10 domains, the number of acronyms faced is numerous, but the nifty Glossary takes care of any confusion that may arise. Besides the coverage of the ten domains in 10 chapters, the Appendices are extremely helpful. Topics such as HIPAA Compliance through HIPAA-CMM are covered, so is the British Standard 7799.If you feel that coverage is not deep enough (which is not really a factor in the exam), the authors provide useful References for Further Study, also found as Appendix H.In summation, the book is extremely well organized, and the additional information provided in each Appendix make this not only a required study tool, but also a "must have" reference.

This IS the Book to buy FIRST!

It's been said many times that the vast ocean of the CISSP Common Body of Knowledge (CBK) is fifty miles wide and two miles deep and preparing for it can be quite an overwhelming endeavor. Various on-line study groups and web sites have numerous suggestions and links where freely available materials and helpful hints may be found. Individuals share there study guides and suggest the best books to procure for the study quest. I myself have participated and contributed in these vibrant forums. It's been said many times over that NO one book can effectively cover the CBK and to prepare the CISSP candidate for the exam. I too have amassed a large collection of the most suggested tomes. Well The CISSP Prep Guide almost negates this statement. The CISSP Prep Guide is now the FIRST place to start! I wish it had been in print a year ago when I began my quest for the CISSP. It is a complete and affordable textbook covering the MEAT of the CBK. This book completely defines and explains the major points of the CBK. It is an extremely readable and understandable text. If you can't afford attending the ISC2 CISSP Seminar either because of cost or time away from work this book is for you. If you have already attended the CISSP Seminar this book is for you. I was blessed by having the opportunity in attending the CISSP Seminar yet I am still finding that The CISSP Prep Guide is building upon the materials presented in the seminar. I can see where my copy of The CISSP Prep Guide will quickly become a dog-eared reference text that I use to refer to while carrying out my duties as an Information Systems Security Officer with the U.S. Government.

I can't over state how good it is!

It's been said many times that the vast ocean of the CISSP Common Body ofKnowledge (CBK) is fifty miles wide and two miles deep and preparing for itcan be quite an overwhelming endeavor. Various on-line study groups and websites have numerous suggestions and links where freely available materialsand helpful hints may be found. It's been said manytimes over that NO one book can effectively cover the CBK and to prepare theCISSP candidate for the exam. I too have amassed a large collection of themost suggested tombs. Well The CISSP Prep Guide almost negates thisstatement. The CISSP Prep Guide is now the FIRST place to start! I wish ithad been in print a year ago when I began my quest for the CISSP. It is acomplete and affordable textbook covering the MEAT of the CBK. This bookcompletely defines and explains the major points of the CBK. It is anextremely readable and understandable text. If you can't afford attendingthe ISC2 CISSP Seminar either because of cost or time away from work thisbook is for you. If you have already attended the CISSP Seminar this bookis for you. I was blessed by having the opportunity in attending the CISSPSeminar yet I am still finding that The CISSP Prep Guide is building uponthe materials presented in the seminar. I can see where my copy of TheCISSP Prep Guide will quickly become a dog-eared reference text that I useto refer to while carrying out my duties as an Information Systems SecurityOfficer .

It's about time someone wrote this! :-)

If you are considering purchasing this book, then likely you work in the information security industry and have been holding your breath for a "real" CISSP study manual. Well, breathe again friend because this book by Kurtz and Vines is what you have been waiting for! No more half-written study guides and poorly constructed "textbooks" (you know what I refer to there), this book will break it down for you and give you information on all you need to know. Don't waste time elsewhere, start here and review other materials if needed. Three cheers!