The CISSP Prep Guide: Mastering the CISSP and ISSEP Exams, Second Edition.

By Ronald Krutz and Russell Dean Vines; published by John Wiley and Sons,www.wiley.com (Web); 1056 pages; $60.

In June 2004, the International Organization for Standardization (known as the ISO) granted certification in the area of information security for the Certified Information Systems Security Professional (CISSP) designation. With ISO certification, the CISSP is gaining in prominence, making The CISSP Prep Guide a timely and informative resource.

This book is useful for anyone preparing to take the CISSP or ISSEP (Information Systems Security Engineering Professional) exams. The CISSP is tailored for professionals working in the private sector, while ISSEP has been designed, in conjunction with the National Security Agency, for would-be security engineers.

The guide has 14 chapters. The first ten chapters correspond to the ten domains of the security Common Body of Knowledge that underlies the CISSP exam. ISSEP candidates will find the final four chapters geared to them.

A CD-ROM that accompanies the book includes simulated testing for each exam. The CISSP preparation software contains 327 questions, while another 120 are devoted to the ISSEP exam. These tests are helpful, but they should not be used in lieu of studying. Overall, the package is an effective aid for anyone planning to take the CISSP or ISSEP exam.

Reviewer: Ben Rothke, CISSP, is a New York City-based senior security consultant with ThruPoint, Inc. He is a member of ASIS International.