Official (ISC)2® Guide to the ISSMP® CBK®

As the recognized leader in the field of information security education and certification, the (ISC)^2® promotes the development of information security professionals around the world. The Certified Information Systems Security Professional-Information Systems Security Management Professional (CISSP-ISSMP^®) examination assesses individuals’ understanding of security management practices. Obtaining certification validates your ability to create and implement effective information security management programs that meet the security needs of today’s organizations.

Preparing professionals for certification and job readiness, the Official (ISC)^2® Guide to the ISSMP^® CBK^® supplies a complete overview of the management topics related to information security. It provides for an expanded enterprise model of security and management that delves into project management, risk management, and continuity planning. Facilitating the mastery of the five ISSEP domains required for certification, the book includes authoritative coverage of enterprise security management, enterprise-wide system development, compliance of operations security, business continuity planning, disaster recovery planning, as well as legal and ethical considerations.

• Presents a complete overview of the managerial elements related to information security
• Examines a larger enterprise model of security and management
• Provides an all-inclusive analysis of the five domains of the CISSP-ISSMP CBK―including sample questions for each domain

Representing over a century of combined experience working at the forefront of information security, the editor and distinguished team of contributors provide unprecedented coverage of the things you need to know to achieve certification. This book will not only help you prepare for the CISSP-ISSMP certification exam, but also provide you with a solid foundation to enhance your career path―whether you’re a seasoned security veteran or just starting out.

Table of Contents

Chapter 1: Enterprise Security Management Practices
Chapter 2: Enterprise-Wide Systems Development Security
Chapter 3: Overseeing Compliance of Security Operations
Chapter 4: Understanding Business Continuity Planning (BCP), Disaster Recovery Planning (DRP), and Continuity of Operations Planning (COOP)
Chapter 5: Law Investigation, Forensics, and Ethics
Appendix: Answers to Review Questions