Building on the popular Sybex Study Guide approach, CISSP: Certified Information Systems Security Professional Study Guide, 4th Edition provides 100% coverage of the CISSP Body of Knowledge exam objectives. Find clear and concise information on crucial security topics, practical examples and insights drawn from real-world experience, and cutting-edge exam preparation software, including two full-length bonus exams and electronic flashcards. Prepare yourself by reviewing the key exam topics, including access control, application security, business continuity and disaster recovery planning, cryptography; information security and risk management, and security architecture and design telecommunications and network security.

Average Customer Review: ( 25 customer reviews )
Write an online review and share your thoughts with other customers.

The bundled CD is useful. I raced through the 250 flash cards in an hour, which is good for jogging the memory. The four bonus exams, of 75 questions each, are good, but are not as difficult as the real thing. These exams provide grades broken down by each CISSP exam domain, which is excellent for identifying topics for revision.

One book can not guarantee coverage of all CISSP exam topics, particularly given the long list of references on the CISSP suggested reading list. I also skimmed through a friend's copy of Shon Harris's "All-in-One" exam guide. I would still rate this book higher, but Harris's book covers some topics in more detail then the Sybex book. The "All-in-One" practice exams are more difficult, though some of the questions are not clearly worded.

The biggest disappoint I have with the exam preparation experience is with the CISSP's ten domains. The examination questions are based on 'good exam fodder' from topics in the ten domains. The topics lean towards an academic approach to security, rather then knowledge needed by a working security professional.

The other references I would strongly suggest to help to gain a security brain, as well as a high exam score include: Stephen Northcutt's `Inside Network Perimeter Security', Ross Anderson's `Security Engineering', and Syngress's `Special Ops'. Maybe I should take one of the SANS security exams, which are much more practical in nature.

And best of luck with the exam!

15 of 15 found the following review helpful:

Great material -- just not enjoyable readingJul 17, 2003

As I took the CISSP exam, I kept thinking, "he really knew what he was talking about." If you were to know this book backwards and forwards, you would do well on the CISSP exam. However, this text suffers from a problem common among learning manuals -- if you didn't get a good sleep the night before you will be nodding off after only a few pages. It reads like a dictionary. Also, the summaries and tables were lacking in both quality and quantity.

After having said that, I have to admit that this book probably helped me the most out of the four I used to prepare for the exam. While Shon Harris' second edition of the All-In-One guide was much more readable and memorable, the content probably wasn't quite as good. Therefore, these two books probably tied as the ones on the top of my list were I to go through this process again.

9 of 9 found the following review helpful:

Very good resourceMay 30, 2004

I purchased and used both this text and the Shon Harris book. The text here is dry reading but very informative. As I got closer to taking the exam, I used it primarily for the practice exams and then used those to identify my weak areas. The practice exams give a very good breakdown by domain area of your strengths and weaknesses. I agree with another reviewer that the Shon Harris book is easier reading. If you are relatively new to the material and teaching yourself, you may want to go with that book as your primary text. However, if you are already pretty familiar with the material and knowledgeable about the technical aspect of networking, then this book would probably provide you more useful material. Both are outstanding texts but one is more useful than the other based upon where you are starting from.

7 of 8 found the following review helpful:

Good text, and recieved an unfair review from "Dogger"May 09, 2006
By Andrew N. Williams
Ignore "Dogger" review. The text of his review for this book is almost identical to his review of another book for CISSP - CISSP Certification All-In-One Exam Guide, 3rd Edition by McGraw Hill. Sour grapes, possibly? I am about 50% through this text, and find it to be very easy to read. I will update this review after sitting the examination.

16 of 21 found the following review helpful:

Please give an unbiased review....May 05, 2006
By James Michael Stewart "author"
In response to M. from NY - "Sloppy work" posted July 10, 2006:

I am the primary author on this book.

M. from NY - I appreciate your comments. I appologize for any errors or typos that appear in the text. However, several of the items you mentioned as problems are not so. Yes, there are typos, but you won't find a single book in print that does not have typos. Authors and editors try to eliminate these, but they continue to crop up due to the number of people who handle manuscripts and tools used to get materials into print. Yes, even in multiple editions, old errors can be retained and new errors introduced.

P 54 - yes, ICMP is mis-spelled as IMCP. That is a typo.

P 254 - an relational database does define one to one relationships, such as one item in a column to one item in a row. An RDBMS does not limit the number of rows or columns that can exist in the database. You completely misunderstood the concept. You are confusing the concept that each row can have entries in mulitple columns, and that mulitple rows can exist with values in each column.

P 251, Q 10 - nonvolatile should be volatile, that is a typo. However, RAM is not a sequential access technology, it is dynamic or random access. In fact, that is exactly what the acronym stands for "Random Access Memory". Yes, you can force a computer to access RAM sequentially, but you'll be doing so by creating software code to perform that action, RAM will still be random access no matter what. Tape devices are sequential access. Once again, you are not seeing the concepts clearly.

P277 - yes, CGI is not a language, it is a concept / technique of allowing client input to be received and processed on the Web server by a server-side script or application. This is an error introduced by the editor. CGI scripts or applications can be written in many languages.

P371 - that is a mistake, it should read "...into simple machine lanaguage instructions..."

You have only mentioned 6 issues, two which are your misunderstanding, one which is a simple typo, and three which you are correct they are errors. Your scathing poor review of our work is not justified by the evidence you have presented. I challenge you to find any other CISSP book that is as current and exhaustive as ours which does not have errors. You will not find one.

I will be adding these items to the errata to help ensure these errors are corrected in the next edition. I appreciate your input, you are entitled to your opinion, but I urge you to be realistic and sensible in your critique.

I'll be happy to address anyone's concerns or issues with this book.

We, the authors, editors, and publishers of this book, have worked hard to update and improve the contents of this work in the production of each edition. The CISSP Study Guide 3rd Edition is to date the most current, complete, and exhaustive book for preparing for the CISSP exam.

Posted May 4, 2006:
I must take offense with "Doggers"' review as his statements about my book are false. This book is fully current on all topics and issues on the exam. The exam prep questions are similar to those on the exam. However, there are a few new question types that ISC2 has released onto the exam since the third edition revision of this book was produced. No study guide promises to get you to pass any exam. Failing to understand the topics and to perform sufficient study is not the fault of the authors. If my writing style is not palatable, that is fine, but deriding my work is non-professional. I would be happy to discuss this further if you will contact me. Please consider revising your review to a more appropriate stance.

See all 25 customer reviews on Amazon.com