topic Re: Which book to refer for CISSP-ISSAP in ISSAP Study Group

Which book to refer for CISSP-ISSAP

maniayappa — Tue, 21 Feb 2023 18:38:15 GMT

I have purchased the self-pace learning for CISSP-ISSAP apart from this which book is best to refer. Is CISSP-ISSAP CBK recommended

Thanks

Manikandan

Re: Which book to refer for CISSP-ISSAP

Early_Adopter — Wed, 22 Feb 2023 00:07:03 GMT

Get the CBK, it’s old augment it with titles from this list - https://www.isc2.org/Certifications/References#accordion-204b5a1dc3534ba2b24f703df5e067ea

There are more complete replies elsewhere on this site.

Re: Which book to refer for CISSP-ISSAP

Steve-Wilme — Wed, 22 Feb 2023 08:46:26 GMT

I used the official CBK book. The reality is that you need to follow up quite a few of the references from the chapters so you won't find all the answers in the text itself.

As I was the only one sitting the exam at the FireBrand centre on the day I was asked what I thought of it, to which I said, hmmm, many of the answers aren't in the CBK, they're in the references, so not entirely what I expected.

So I guess what I'm saying it prepare thoroughly and don't imagine that there are short cuts.

Re: Which book to refer for CISSP-ISSAP

Early_Adopter — Mon, 27 Feb 2023 02:53:16 GMT

“There can be only one!”

l’m not sure I’d ever need to do this certification concentration, or if I did what I might use it for but I’d probably do TOGAF & SABSA as part of my prep, especially as in Europe and Asia, can’t speak so much there are loads of earnest EA proponents recommending these.

Side question @Steve-Wilme , as you have two already are you going to complete the trinity with Engineering? 😛

Re: Which book to refer for CISSP-ISSAP

Steve-Wilme — Mon, 27 Feb 2023 09:09:36 GMT

Probably not Michael, I think retirement will come before I get around to that.

Re: Which book to refer for CISSP-ISSAP

Early_Adopter — Mon, 27 Feb 2023 17:34:10 GMT

Not keen on one more round of Paper Pokémon? 😛

Re: Which book to refer for CISSP-ISSAP

SpoonMan — Mon, 27 Feb 2023 23:08:37 GMT

The recommended reading list seems quite 'robust'. Do you know if the official training has the same recommended reading list, or do they cover everything you need to know in the training course itself?

Re: Which book to refer for CISSP-ISSAP

Early_Adopter — Tue, 28 Feb 2023 05:00:24 GMT

Never sat the exam I’m afraid so… don’t know.

I think you should look heavily at the exam outline:

https://www.isc2.org//-/media/ISC2/Certifications/Exam-Outlines/CISSP-ISSAP-Exam-Outline-v0120.ashx

From:

https://www.isc2.org/Certifications/CISSP-Concentrations

if you are a master of most of the information there, with quite some US centricity then probably you are

in striking range.

I think that the other thing to understand is that this is a niche certification, so it’s worth getting a 1:1 with a holder:

https://www.isc2.org/About/Member-Counts

Anyhow, CBK, exam outline, reference list, online/in person training … should probably be enough but YMMV especially with the rarified certifications. One chap on here wasn’t happy after sitting the exam, as he clearly felt the CBK was old.

Re: Which book to refer for CISSP-ISSAP

Delvauhn — Thu, 04 May 2023 11:33:42 GMT

- Failed on first attempt just using CBK

- Failed on second attempt with the self-pace course from ISC2 but did well in 4/6 domains

- Now I've invested more time going through list of references beginning with Enterprise Security Architecture by Sherwood, since that was my weakest domain.

The exam has severely outpaced the CBK, the ISC2 training was good but not like the ISSEP's, and should be complimented with additional reading.

Re: Which book to refer for CISSP-ISSAP

George991 — Fri, 14 Jul 2023 15:24:08 GMT

Hi,

What I find very frustrating is that the exam outline it talking about the following six domains:

• Architect for Governance, Compliance, and Risk Management
• Security Architecture Modeling
• Infrastructure Security
• Identity and Access Management Architecture
• Architect for Application Security
• Security Operations Architecture

I've bought the CBK book, second edition and they are talking about the following domains:

1- Access Control Systems&Methodology

2- Communication & Network Security

3- Cryptography

4- Security Archtecture Analysis

5- Technology Related BCP & DRP

6- Physical Security Considerations

So why is the book so much different then the exam outline? Is it even worth the read the book aspreperation for the exam? I want to prepare for this exam but its impossible to buy good study materials for this....

Re: Which book to refer for CISSP-ISSAP

Sreejithrc — Sat, 15 Jul 2023 18:19:54 GMT

In the same boat . Book is 12 years old .
I’m relying on additional books ( which is expensive to buy so bought used books from Amazon )
BCP/DR - Susan Snedaker
Federated Identity Primer - Derrick Rountree ( small book not very expensive hence bought new )
Cryptography- Bruce Schneier
Application security - Laura bell

Re: Which book to refer for CISSP-ISSAP

Sreejithrc — Sat, 15 Jul 2023 18:21:45 GMT

I’m planning for December and not sure if I can read all these . I will rely on NIST as well plus Sherwood’s architecture book and some cloud materials from CSA

Re: Which book to refer for CISSP-ISSAP

George991 — Mon, 24 Jul 2023 06:29:43 GMT

For me it is also very useful to have some practice exam questions? Are there any books that can help me with this? For CISSP I used the Sybex exam questions book which was very useful.

Re: Which book to refer for CISSP-ISSAP

Sreejithrc — Thu, 03 Aug 2023 03:22:10 GMT

Yea sybex was the best for me too preparing CISSP however I could not find anything for ISSAP

Re: Which book to refer for CISSP-ISSAP

Steve-Wilme — Fri, 04 Aug 2023 07:46:29 GMT

The official ISSAP CBK book has practice questions at the end of each chapter. My advice would be to just learn the material rather than do a lot of practice tests. A paper based practice test might not help you as much now as the test are adaptive.

Re: Which book to refer for CISSP-ISSAP

Early_Adopter — Fri, 04 Aug 2023 09:40:04 GMT

Are all the tests CAT now? I think some of them might just have removed the ability to review questions.

But yeah 100% understanding and learning rather than training tests.

Re: Which book to refer for CISSP-ISSAP

denbesten — Fri, 04 Aug 2023 12:14:25 GMT

@Early_Adopter wrote:
Are all the tests CAT now? I think some of them might just have removed the ability to review questions.

@tldutton (an authoritative source on this topic) earlier stated: "On all of our exams, the CISSP computerized adaptive testing (CAT) exam AND all of the linear exams, you can't go back to a previous question. You can also see the same answer in our FAQ section, https://www.isc2.org/Frequently-Asked-Questions. Many of our current linear exams will move to CAT over the next few years." [cite]

Re: Which book to refer for CISSP-ISSAP

Kaity — Fri, 04 Aug 2023 16:29:15 GMT

Only CISSP is in CAT at this time - and only in English. But it is correct that questions cannot be skipped to return to. Whether a linear or CAT exam, you have to answer each question as it comes.

Re: Which book to refer for CISSP-ISSAP

Maxim-Masiutin — Wed, 11 Oct 2023 19:47:31 GMT

Do you mean "Enterprise Security Architecture: A Business-Driven Approach" 1st Edition (first released in 2005) by John Sherwood et al?