My advice does not depend on one single book take the ISC2 syllabus and hunt for those subjects over the net. They really test how much you are deep into the subject. Never expected some questions.. those are very easily neglected.
I am now started preparing one subject at a time. For example// readily and understand every OWSAP and mitigation very detailed way.
Good luck. My next attempt would be in May, 2022
