topic Re: How Relevant is the 2013 CBK to the Current Exam? in CSSLP Study Group

How Relevant is the 2013 CBK to the Current Exam?

KMarchewa — Mon, 06 Mar 2023 23:38:23 GMT

Hello,

I am currently studying for the exam using the "official" CBK. I know the exam itself underwent a pretty significant revision in 2020 and that this book was never updated to reflect the changes.

My question is: how useful is this book for the current exam? Are there any areas in particular that have changed substantially?

Thanks.

Re: How Relevant is the 2013 CBK to the Current Exam?

swh5a01 — Tue, 07 Mar 2023 05:26:12 GMT

Consider the book as the dictionary to let you know the meaning of specific words. The CBK or AIO I am working like this. The most important concepts you really need to know is in the Exam Outline. So, I would suggested to dealing with the book as the dictionaries.

Re: How Relevant is the 2013 CBK to the Current Exam?

Early_Adopter — Tue, 07 Mar 2023 07:16:18 GMT

It was decent enough 5-6 years ago based on my experience- there are many fundamentals that don’t change or gear up as required by the march of technology.

I would expect that there would be more around supply chain security and threats, more DevOps, containerisation etc for workflows etc.

A review seminar would likely help, but trainers and question writers are separated with good reason so don’t expect your trainer to know the exam, just the subject.

Re: How Relevant is the 2013 CBK to the Current Exam?

Steve-Wilme — Tue, 07 Mar 2023 14:07:50 GMT

InfoSec doesn't change massively over time, although the detail of technology does move at a faster pace. If you consider BS7799 existed as far back as 1995 and was an internal DTI document before that. Reading it you can still recognise that we practice many of the same things in infosec nearly 30 years later.

回复：2013年CBK与当前考试的相关性如何？

Songhai — Wed, 15 Mar 2023 09:53:43 GMT

It's time to update CSSLP CBK. The last version was published in 2013.We need CSSLP CBK third edition. unbelievable we still need to use the CBK textbook from ten years ago to prepare for the exam.

Re: 回复：2013年CBK与当前考试的相关性如何？

Steve-Wilme — Wed, 15 Mar 2023 13:19:53 GMT

The CSSLP tends to appear out of date in part due to the uptake of agile practice replacing more traditional software development lifecycles. The actual guts of the controls described still have some relevance.