The CISSP^® Prep Guide: Mastering the CISSP and ISSEP^TM Exams, 2nd Edition

by Ronald L. Krutz (Carnegie-Mellon Univ., Huntingdon, Pennsylvania); Russell Dean Vines (Realtech Systems, White Plains, New York)

• ISBN13: 9780764559150
• ISBN10: 076455915X
• Edition: 2nd
• Format: Paperback
• Copyright: 2004-04-01
• Publisher: Wiley

Summary

This updated bestseller features new, more focused review material for the leading computer security certification-the Certified Information Systems Security Professional, or CISSPThe first book on the market to offer comprehensive review material for the Information Systems Security Engineering Professional (ISSEP) subject concentration, a new CISSP credential that's now required for employees and contractors of the National Security Agency (NSA) and will likely be adopted soon by the FBI, CIA, Department of Defense, and Homeland Security DepartmentThe number of CISSPs is expected to grow by fifty percent in 2004The CD-ROM includes the Boson-powered interactive test engine practice sets for CISSP and ISSEP

Author Biography

RONALD L. KRUTZ, PhD, PE, CISSP, ISSEP, is a Senior Information Security Researcher for The Sytex Group, Inc. He was a faculty member in the Carnegie Mellon ECE Department and associate director of the Carnegie Mellon Research Institute. Dr. Krutz is also a Distinguished Special Lecturer in the Center for Forensic Computer Investigation at the University of New Haven and a consulting editor for a Wiley Infosec series.

RUSSELL DEAN VINES, CISSP, Security +, CCNA, MCSE, MCNE, is President and Founder of The RDV Group Inc., a New York— based security consulting services firm. He has been active in the prevention, detection, and remediation of security vulnerabilities for international corporations, including government, finance, and new media organizations, for many years. Mr. Vines is a specialist in cyber counterterrorism, and is the author of several bestselling information system security texts.

Table of Contents

PART I: FOCUSED REVIEW OF THE CISSP TEN DOMAINS.

1.  Security Management Practices.

2.  Access Control Systems.

3.  Telecommunications and Network Security.

4.  Cryptography.

5.  Security Architecture and Models.

6.  Operations Security.

7. Applications and Systems Development.

8.  Business Continuity Planning and Disaster Recovery Planning.

9.  Law, Investigation, and Ethics.

10.  Physical Security.

PART II: THE INFORMATION SYSTEMS SECURITY ENGINEERING PROFESSIONAL (ISSEP) CONCENTRATION.

11.  Systems Security Engineering.

12.  Certification and Accreditation (C&A).

13.  Technical Management.

14.  U.S. Government Information Assurance (IA) Regulations.

PART III: APPENDICES.

Appendix A:  Answers to Assessment Questions.

Appendix B:  Glossary of Terms and Acronyms.

Appendix C: Sample SSAA.

Appendix D:  Excerpts from the Common Criteria.

Appendix E:  The Cost Analysis Process.

Appendix F:  National Information Assurance Glossary.

Appendix :G  What's on the CD-ROM.

Index.