CISSP Certification All-in-One Exam Guide, 4th Ed.

Author : Shon Harris Edition : 4 Number of Pages : 1145 Publisher : McGraw-Hill Osborne Media List Price : $79.99 Amazon Price : $45.89 Used Price : $41.95

Product Description

All-in-One is All You Need

Fully revised for the latest exam release, this authoritative volume offers thorough coverage of all the material on the Certified Information Systems Security Professional (CISSP) exam. Written by a renowned security expert and CISSP, this guide features complete details on all 10 exam domains developed by the International Information Systems Security Certification Consortium (ISCAndsup2;). Inside, youAnd#39;ll find learning objectives at the beginning of each chapter, exam tips, practice questions, and in-depth explanations. CISSP All-in-One Exam Guide, Fourth Edition will not only help you pass the test, but also be your essential on-the-job reference.

Covers all 10 subject areas on the exam:

• Access control
• Application security
• Business continuity and disaster recovery planning
• Cryptography
• Information security and risk management
• Legal, regulations, compliance, and investigations
• Operations security
• Physical (environmental) security
• Security architecture and design
• Telecommunications and network security

The CD-ROM features:

• Simulated exam with practice questions and answers
• Video training from the author
• Complete electronic book

Customer reviews

written by an elementary school teacher by .. J. Feldman (Washington, DC)
I took and passed the CISSP this year and found Shon Harris's book to be the worst of the study prep guides. Too verbose, too much information, although the information is factually correct, you can tell through her writing that she did not fully understand the subject material or WHY this material is important to know for the CISSP. The exam is an inch deep and a mile wide. Shon writes her book to be a mile deep and a mile wide, with a few inaccuracies thrown in for good measure!

Save your money and what's more important, save your time! 90% of what's in the book will not be on the test.

Don't expect to learn anything by .. Ian Howson (Sydney, Australia)
I hate to be difficult, but this is an awful, mediocre book.

I'll keep it simple and factual:

- This book is horrendously inaccurate. Some chapters are OK - Crypto approaches 90%. Some are terrible. Telco and Network Security was maybe 30% accurate.

- Shon does not understand a great deal of the material that she is presenting. Examples that stick in my mind are "what is a race condition" and "why do we do processing on a smart card". Tracing the references, it becomes plainly obvious where Shon has paraphrased without comprehending the (very important!) subtleties of the subject.

- A mechanical point, but important nonetheless: when a new idea is explained, it is explained using all of the jargon and assuming all understanding first. Afterwards, the lower-level understanding is filled in. This makes it very difficult to follow - you constantly need to move back and forth to get the full picture.

- It's extremely verbose and conversational. I believe this is inappropriate for a topic area where correctness and precision is crucial. A previous reviewer commented on the jokes inline with the material. I probably missed a lot of the inline jokes, mistaking them for factual errors.

I could go on, but I think you get the picture. I bought the book to get an understanding of where my knowledge was lacking in advance of taking the exam, and it served that purpose. The obvious and consistent factual errors made it difficult for me to actually believe anything, however - I found myself looking things up on Wikipedia (of all places!) when I needed clarification on a topic.

Good Read, But... by .. Rob B (Florida)
Ms. Harris' book is written in a more conversational style than your average technical read, but don't forget you will be tested on the official ISC2 materials. I recommend their book for studying and Ms. Harris' book as a supplement, not a substitute.

Now less than 12 hours away from taking the test, I found many of the post-chapter questions to be not well-formed, though much the same can be said about the ISC2 workbook. It is evident the human factors practioners (those who actually study how to write good questions) have not vetted these.

The CD that comes with Ms. Harris's book is somewhat better. By the way, the 4th Ed. cover has a blue field, not a red one.

Faster Than a Speeding Bullet by .. C. Wallace (Minnesota USA)
Wonderfully quick response and shipping time. Nice to have a request for any comments.

Overly wordy novel on CISSP by .. G. Miller (FT Bragg, NC (SOF))
This book is presented in novel format where huge paragraphs dominate.
People don't mentally store information in paragraph format; they store it in bullets or chunks of data so you first have to read the paragraph, then deduce the bullets for mental storage. It's weird but I think most books are written like this.

There are endless stories about security using sometimes inappropriate metaphors for security which don't always equate to the technology at hand.

Also, the chapters aren't laid out in the 10 Domains covered by the CISSP exam so you have to jump around to go through the domains.

By comparison, the Sybex CISSP book does a worse job because the chapters aren't even named in relation to what the ten CISSP domains are so you have to guess which chapter goes to which domain.

There is good use of graphics but there is a lot of extra information not on the exam so if you're looking for a concise technical review of CISSP exam material, look elsewhere.

PS the Shon Harris videos are as long and drawn out.

Mike Meyers' CISSP(R) Certification Passport

Author : Shon Harris Edition : 1 Number of Pages : 422 Publisher : McGraw-Hill Osborne Media List Price : $29.99 Used Price : $39.99

Product Description

Customer reviews

What a disapointment (and a ripoff) by .. Hungry ForKnowledge (Ottawa, Canada)
First, the disappointment:
I must say, it is obvious to me that the writer is not only non-technical, but on occasion has trouble with composing coherent sentences. The book very much left me the impression that it was written in a major hurry, and that the writer just Googled each topic, and then slapped something together based on a quick read. Based on the apparent lack of technical knowledge and how concepts relating to software development, protocol stacks, networking, etc. were badly mangled in the book, I am really left wondering if I'll be able to pass the CISSP exam.

Now to the ripoff:
"Free online practice exam" is plastered all over this book (front, back, inside cover, entire section in the book, etc. But when you actually go the the specified web address to claim your free practice exam, they tell you it is no longer available for free, and now you have to pay $20 to get it!!! Haven't these people heard of a class action suit? This is outrageous.

So would I buy this book again? No sireee. And I'll stay away from McGraw-Hill/Osborne as well.

Excellent reference by .. Robert Dahl (APO, AE United States)
Very easy to read, very informative. Overall, a very good book.

Thanks,
Robert

Fantastic!!!!!!!!!!! Review Guide - Mike Myers & Shon Harris !!!!!!!! by .. Shaheen Gagan (http://shaheengagan.blogspot.com)
FANTASTIC MONTH BEFORE THE EXAM :
Mike Meyers' CISSP(R) Certification Passport
by Shon Harris


Read and comprehended all materials.

1. CISSP All-in-One Exam Guide, Third Edition (All-in-One)+ 800 Practice questions included.

2. The CISSP Prep Guide: by Ronald L. Krutz and Russell Dean Vines,
pluss 450 practice questions from BOSON.

3. Mike Meyers' CISSP(R) Certification Passport. 200 pages of solid core material, can carry around anywhere but contains a lot of tips to ace the exam.

4. Great site for free CISSP materilas and practice exam
[...].

Here's an eye-opener of a requirement!
In today's environment of emerging security threats, the U.S. Department of Defense has
recognized the critical need for highly-qualified, experienced information assurance
personnel.
To ensure a knowledgeable and skilled workforce the DoD has taken the necessary steps to
develop a directive that involves the credentialing and continuing education of all DoD
employees with privileged access to DoD information systems.
Specifically, the U.S. Department of Defense Directive 8570.1, signed in August of 2004,
requires every full- and part-time military service member, defense contractor, civilian and
foreign employee with privileged access to a DoD system, regardless of job series or
occupational specialty, to obtain a commercial certification credential that has been
accredited by the American National Standards Institute (ANSI).
The draft manual, 8570.1M, specifies that the Department of Defense requires approximately
110,000 identified Information Assurance professionals to be certified within a five year time
period. The Defense Information Assurance Program office has divided its Information
Assurance workforce into six defined categories (see chart below). The manual also specifies
the types of commercial information assurance credentials that qualify for each of the defined

Great supplement to CISSP readings by .. M. House (Virgina)
I am using this book in addition to Shon Harris' CISSP book, and the ISC2 CISSP manual. This book works well for me as a high-level reference book and as an easy-to-carry/easy-to-read reference book when traveling. A must have book for those studying for their CISSP, but not the only book you'll need for certification. Amazon also had the best price and FAST delivery. I wouldn't purchase my books anywhere else.

Excellant prep resource for the CISSP by .. GMW (Woodstock, GA)
This book takes the original Shon Harris book, and explaines the 10 domains from a higher point of view. I would fully recommend reading this book, along with reading the Risk Management and Access Control section of the Shon Harris book.

The test questions are pretty simple, thus I do not recommend relying soley on them. [...] The test questions [...] are all written by CISSP's and closely resenble the questions that will be on the exam.

Official (ISC)2 Guide to the CISSP Exam

Author : CISSP, Susan Hansche Number of Pages : 902 Publisher : AUERBACH List Price : $69.95 Amazon Price : $59.95 Used Price : $26.64

Product Description

Customer reviews

CISSP by .. Thurm (Leesburg, VA United States)
I think the authors of this book are more lucid than many other course materials I have read about these major domains. I liked the diagrams and their explanation, plus the terminology library is useful. It is getting older, though, and may need to be brought up to-date, especially the test questions.

CISSP test by .. D. Dutkanicz ()
The study guide is fine for experienced professionals. More like a reference encyclopedia. If a beginner use the Shon Harris book.

I studied with an online course and this book. The book actually explained area's that were vague on online.

Overall a good reference to keep around after the test.

Very in depth but very dry by .. S. D. Applegate (Fort Belvoir, VA)
A very good in depth guide, but very dry and hard to read as a result. I recommend the Shon Harris book in lieu of this as it will keep your attention much longer.

Not quite everything you need to know to receive the CISSP certification, by .. Vincent Poirier (Tokyo, Japan)
This is a complete guide to passing the CISSP exam. It's mostly well written, handsome, and despite its bulk, I found it easier to carry around that the usual computer guide.

My beef is with the accreditation itself. Too much of the (ISC)2 required body of knowledge presented here is either out-of-date, irrelevant, naive, silly, or wrong.

For example, in the physical security chapter, security professionals are advised to encourage notebook PC users to avoid carrying their notebooks in computer cases because that will tip off potential thieves. That's just plain silly advice, at least in everyday life. I might follow advice like that if I were to visit a particularly dangerous city like Rio or Johannesburg, but a typical North American or European city, forget it.

In the chapter dealing with legal aspects of security, the author states that software piracy is just like the theft of a book from a bookstore. No, it isn't. Intellectual property is not a settled area of law and is continually changing. I'm not saying (ISC)2 should advocate software piracy but neither should they go around making definite statements about something that is still not well understood.

In the chapter on networking, much is made of the "ping-of-death" attack. Well, the ping of death is ten years out of date. It makes as much sense to study that for the CISSP exam as to study Token Ring over coax cabling for the MSCE exam: it's irrelevant.

So, if you are required to pass the CISSP certification get this book. If you want to learn about security, then my advice is to read up on UNIX system administration, subscribe to magazines like SysAdmin, and then read up on Windows and on other topics, and above all take every opportunity at work to think about security at your job. To be a generalist, the best thing is to learn from many different sources.

Vincent Poirier, Tokyo

Afterword: I underwent the exam last March and passed. I can't talk about the exam's content (as part of the agreement one signs upon taking the exam) but I will make one positive comment: the questions were more relevant and less naive than the study material had led me to expect.

VP, Dublin

CISSP by .. Chau Min (Hong Kong)
Dear Sir/Madam,

Thanks for your great help, I have a very good text book for my study.

Thanks for your efficient and reliable service too,

Jacky

Secured Computing: A CISSP Study Guide

Author : Carl F. Endorf CISSP Edition : 2 Number of Pages : 312 Release Date : 2006-06-30 Publisher : Trafford Publishing List Price : $44.95 Amazon Price : $44.95 Used Price : $29.38

Product Description

The Certified Information Systems Security Professional (CISSP) designation is the most respected certification an IT professional can obtain during their career. It demonstrates the ability to understand a broad range of security issues in many areas.

This is the ultimate study guide for the Certified Information Systems Security Professional CISSP Exam. It is designed for the experienced Security Professional. This guide will help to supplement your studies and further your goal of acquiring the CISSP designation. The book is designed for a security professional by a security professional. The author has strived to take the information that is needed to be successful in the security arena and to condense it into one concise volume.

In addition, this book is also a great resource for anyone interested in getting a better handle on how to secure ones organization and enterprise. This guide will help you to understand the common body of knowledge that is set forth by ISC2 and many security professionals today.

Customer reviews

Don't waste your money. by .. ()
Too high level and there is no meat or clarity to any of the concepts that the author attempts to explain. I am struggling to get through the book. In a way I don't even think it is worth finishing.

The book has a money back guarantee but you have to send the book back within 120 days and you have to have failed the test twice (900.00).

I would get CISSP for Dummies or Security Engineering instead.

Great book! by .. Sam Bowman (Boston, MA)
I enjoyed this book as it got away from academia and theory and got right to what was on the test. Many say you cannot just memorize definitions and terms and pass the exam, while this is true, Endorf's book cuts to the heart of the matter and gets you the material you need to pass. Obviously someone with no experience has no real hope, with Endorf's or anyones book. But for those who have security expertise, Endorf's book is a great review the week before the exam. Recommended!

Waste of time and money by .. ()
CISSP is an objective exam and book has objective chapters for all domains. No useful reading in it.

2nd edition is a Great book! Very informative. by .. (Palm Beach, FL)
I enjoyed this book very much. Unlike others who say it is choppy I think the information was very concise and to the point. It is much like a "Cliff Notes" to the CISSP. It gets away from the fluff of many of the other books and is to the point. There are editing issues, but overall I liked this 2nd edition as it was very up to date. I found the ISF best practices a helpful guideline.

Great review by .. Bob Gatta (Pittsburg, PA)
This book, while not the best edited, has some great information not in the other books and is a great review for the week before the exam. I have the second edition, which is greatly expanded and revised. Great book!

CISSP(R) Certified Information Systems Security Professional Certification Exam Preparation Guide (Kaplan IT Learning)

Format : Import Author : Kaplan It Learning Number of Pages : 400 Publisher : Kaplan Education