Official (ISC)2® Guide to the CISSP®-ISSMP® CBK® ((ISC)2 Press) 2nd Edition

Great for Cybersecurity students

If you are a CISSP thinking about upping your credentials with the ISSMP concentration, wait until this certification is vetted with a few more revisions before attempting the test.In April 2015, (ISC)2 released this second edition with updated references and question bank for the certification test. After failing the test the first time by a couple of questions, I doubled down targeting the identified weakness identified in the test feedback. I was somewhat concerned the test did not appear to reflect the CBK, but figured it was from how I targeted my preparation. After failing the test a second time with the same weaknesses and the same score, I sent a query to (ISC)2 identifying my concerns about the certification test and the information in the CBK and CIB. An excerpt from their response follows:"The exam itself is truly designed to gauge the members real world professional experience across the domains ... The CBK Guides themselves have never been designed to be written to the exam or as a study guide for that matter. Instead, they are meant to be an authoritative reference to the Common Body of Knowledge (CBK) and serve as a go to reference guide for the certification in question."IAW, the CBK is not intended to prepare you for the certification test. Individuals contributed questions for the certification test based on real world experiences in the domains, not the CBK.Hopefully you have the right experiences to pass this certification. The CBK is not going to be much help in preparing for the test.

Just passed the ISSMP exam yesterday, no thanks to this book. I took a prep course through Infosec Institute and was advised to disregard the book as it is out of date and not very good. I’m glad I took that advice.As I prefer practice exams for my preparation, I was looking for more information to work from and wanted to use the 100 questions that come with this book. Not only were the questions in this book poorly edited and sometimes nonsensical, a number of them are absolutely incorrect and contradict the answers to almost identical questions found in other practice exam sources. I’m lucky I didn’t rely on the information in this book for my real test day!

I have no gripes ... I had access to a copy of the book at no cost and passed the ISSMP exam. I also "do this stuff for a living," so mostly what I needed was a review guide. That said ...- The first three chapters of the book (covering (1) Security Leadership & Management, (2) Security Lifecycle Management and (3) Security Compliance Management) are reasonably well-written and on topic.- The fourth chapter (Contingency Management) is a *big* step down in quality. It pretty much opens with "Go review your CISSP knowledge development in this area." Yes, go do that, review Chapter 9 in Shon Harris' CISSP All-in-One Study Guide. Also read NIST SP 800-34, "Contingency Planning Guide for Federal Information Systems."- This book's quality deteriorates into chaos even further in Chapter 5 (Law, Ethics and Incident Management). The "law" discussion careens uncontrollably among U.S., British and Australian laws and doesn't adequately address European Union laws and regulations. For incident management, read NIST SP 800-61, "Computer Security Incident Handling Guide," instead.A hint for people taking the exam: read questions very, very carefully. Relax and take the full three hours to complete the exam.

There are so many simple mistakes in this book that you have to wonder if the same inattention was paid to the content. This book is riddled with spelling, grammar, formatting and simple sentence structure mistakes. The review questions after each section are non-sensical and almost unreadable, let alone able to teach you anything. I actually stopped reading this book because I was worried I'd learn something wrong for the test. If you want the ISSMP, I would say find another source for your information but then again, if this is the "official" source material, then I don't think any derivative sources would be any better. Makes you wonder if the cert this ostensibly prepares you for is even worth attempting.

This book was good but unfortunately it’s not reflect the new CISSP-ISSMP domain names and content.

Rented book for one chapter on cryptography as required for study course, which was concise and coherent. Probably why instructor used this reference as starter material.

Do not purchase this book. I wish I had read the reviews before buying. I bought the book to prep for the exam. I had found the ISC2 CISSP practice test book very helpful, so just assumed that the ISSMP book would be good, too. Bad assumption.I started by going through the chapter review questions to baseline my knowledge. Checked my answers against those in the Appendix and found myself repeatedly disagreeing the book. Looked up the answers in the chapters themselves and found that I was right - the book says one thing and the answer key says another. I'll have to trust other reviewers that the chapters themselves have many errors, too. I'm not going to read them and will be returning this for a refund.