With twenty years in IT, though comparatively smaller time specific to IT security, I read:
CISSP for Dummies
(ISC)2's CBK by Alan Gordon
Mike Chapple's CISSP Study Guide (8E)
C4D was a waste of money, but it introduced me to the wide-ranging variety of disciplines.
CBK seemed unwieldy and organized, but it was fairly definitive.
SG8E was the book that tied everything together.
Passed first time, but I must credit Craig Cunningham for his boot camp. What appeared as words on the pages of three different books became three-dimensional structures in his class.
---
I've always said, "There's nothing an agnostic can't do if he really doesn't know whether he believes in anything or not."
