Official (ISC)2® Guide to the ISSMP® CBK®

The most complete compendium of industry knowledge

compiled by the foremost experts in global security. A must-

have for those seeking to attain the Information Systems

Security Management Professional (ISSMP)

®

credential.

Edited by Harold F. Tipton, CISSP-ISSAP, ISSMP

OFFICIAL

(

ISC

)

2

®

GUIDE

TO THE ISSMP

®

CBK

®

OFFICIAL

(

ISC

)

2

®

GUIDE

TO THE ISSMP

®

CBK

®

w w w. c r c p r e s s . c o m

an informa business

6000 Broken Sound Parkway, NW

Suite 300, Boca Raton, FL 33487

270 Madison Avenue

New York, NY 10016

2 Park Square, Milton Park

Abingdon, Oxon OX14 4RN, UK

AU9443

A N A U E R B A C H B O O K

As the recognized leader in the eld of information security education and certication,

the (ISC)

2®

promotes the development of information security professionals around the

world. The Certied Information Systems Security Professional-Information Systems

Security Management Professional (CISSP-ISSMP

®

) examination assesses individuals’

understanding of security management practices. Obtaining certication validates your

ability to create and implement effective information security management programs

that meet the security needs of today’s organizations.

Preparing professionals for certication and job readiness, the Ofcial (ISC)

2®

Guide to the ISSMP

®

CBK

®

supplies a complete overview of the management

topics related to information security. It provides for an expanded enterprise model

of security and management that delves into project management, risk management,

and continuity planning. Facilitating the mastery of the ve ISSEP domains required

for certication, the book includes authoritative coverage of enterprise security

management, enterprise-wide system development, compliance of operations security,

business continuity planning, and disaster recovery planning, as well as legal and ethical

considerations.

• Presents a complete overview of the managerial elements related to

information security

• Examines a larger enterprise model of security and management

• Provides an all-inclusive analysis of the ve domains of the CISSP-ISSMP

CBK—including sample questions for each domain

Representing over a century of combined experience working at the forefront of

information security, the editor and distinguished team of contributors provide

unprecedented coverage of the things you need to know to achieve certication. This

book will not only help you prepare for the CISSP-ISSMP certication exam, but also

provide you with a solid foundation to enhance your career path—whether you’re a

seasoned security veteran or just starting out.

Information Security / Certication

AU9443_COVER_final.indd 1 3/10/11 10:29 AM

OFFICIAL

(

ISC

)

2

®

GUIDE TO THE

ISSMP

®

CBK

®

OTHER BOOKS IN THE

(

ISC

)

2

®

PRESS SERIES

Ofcial (ISC)

2

®

Guide to the ISSMP

®

CBK

®

Harold F. Tipton, Editor

ISBN: 978-1-4200-9443-5

Ofcial (ISC)

2

®

Guide to the SSCP

®

CBK

®

, Second Edition

Harold F. Tipton, Editor

ISBN: 978-1-4398-0483-4

Ofcial (ISC)

2

®

Guide to the ISSAP

®

CBK

®

Harold F. Tipton, Editor

ISBN: 978-1-4398-0093-5

Ofcial (ISC)

2

®

Guide to the ISSMP

®

CBK

®

Harold F. Tipton, Editor

ISBN: 978-1-4200-9443-5

Ofcial (ISC)

2

®

Guide to the CISSP

®

CBK

®

,

Second Edition

Harold F. Tipton, Editor

ISBN: 978-1-4398-0959-3

CISO Leadership: Essential Principles for Success

Todd Fitzgerald and Micki Krause, Editors

ISBN: 978-0-8493-7943-X

Building and Implementing a Security Certication and Accreditation

Program: Ofcial (ISC)

2

®

Guide to the CAP

®

CBK

®

Patrick D. Howard

ISBN: 978-0-8493-2062-3

Ofcial (ISC)

2

®

Guide to the CISSP

®

-ISSEP

®

CBK

®

Susan Hansche

ISBN: 978-0-8493-2341-X

Edited by

Harold F. Tipton, CISSP-ISSAP, ISSMP