Home page logo

fulldisclosure logo Full Disclosure mailing list archives

ISC2 vs Rob Slade
From: "J.A. Terranson" <measl () mfn org>
Date: Wed, 22 Feb 2006 19:58:10 -0600 (CST)

I've been reading Slade for a LOoooongggg  time now, and I've come to
appreciate his reviews. Generally, they are spot on, concise, and to the

Take this one for example. ;-)


J.A. Terranson
sysadmin () mfn org


Date: Fri, 30 Jul 2004 07:54:11 -0800
From: Rob Slade <rsl... () sprint ca>
Subject: REVIEW: "Official [ISC]^2 Guide to the CISSP Exam", Hansche et

BKOIGTCE.RVW   20040618

"Official (ISC)^2 Guide to the CISSP Exam", Susan Hansche/John
Berti/Chris Hare, 2004, 0-8493-1707-X, U$69.95/C$101.50
%A   Susan Hansche susan.hans... () pec com
%A   John Berti jbe... () deloitte ca
%A   Chris Hare c... () chris-hare com, c... () nortelnetworks com
%C   920 Mercer Street, Windsor, ON   N9A 7C2
%D   2004
%G   0-8493-1707-X
%I   Auerbach Publications
%O   U$69.95/C$101.50 800-950-1216 ord... () crcpress com
%O  http://www.amazon.com/exec/obidos/ASIN/084931707X/robsladesinterne
%O   http://www.amazon.ca/exec/obidos/ASIN/084931707X/robsladesin03-20
%P   910 p. + CD-ROM
%T   "Official (ISC)^2 Guide to the CISSP Exam"

Once again I have to state a bias in regard to this book.  I've known
about this book since its inception, I've known and advised the authors, I
provided bits of the material, and even contributed one appendix.  (The
annotated bibliography and references--surprise, surprise.)

I was asked to review the chapters while the book was in production.  The
reason was, of course, that I had reviewed all the other CISSP (Certified
Information Systems Security Professional) guides.  Specifically, the
intent was to ensure that this manual, prepared and supported by (ISC)^2
(International Information Systems Security Certification Consortium) was
"head and shoulders" above all the other published works.  This volume is
not perfect, by any means, but it is the best of the current bunch.

Taking material from one source is copying, taking material from two
sources is plagiarism, and taking material from many sources is research.
This volume has not only research but direct input from a great many
sources. Some are mentioned in the acknowledgements, a number of others
are to be found on the title page, since sections of major articles from
the venerable "Information Security Management Handbook" (cf.
BKINSCMH.RVW) were included or used as the basis for parts of the guide.
Even this doesn't exhaust the contributions, since much of the work is
informed by the material in the (ISC)^2 CBK (Common Body of Knowledge)
Review Seminar, and over a hundred individuals have had the chance to
augment that content.  The result is a breadth and currency of information
that exceeds any other guide on the market.

Sample questions and exams are eagerly sought by candidates for the CISSP
exam.  This guide has a significant advantage in this regard: not only do
a number of the contributors produce questions for the exam itself
(therefore being more than passingly familiar with the style and level of
difficulty required), but the CISSP exam committee was also approached for
advice and input.  No source is able to provide "actual" CISSP exam
questions, but the examples provided in this volume are very close in
form, mix, degree of difficulty, and concept.

The book is not without its faults.  The sheer volume of the contributors
ensured that topics were covered multiple times, and not all duplicated
areas have been amalgamated.  In addition, the variety of writing styles
can make the text disjointed in places, as it moves from section to
section and subject to subject.  These factors can make the work difficult
and demanding to read and follow.

The CISSP exam, as the security field itself, is a changing target, and no
book can expect to provide the "best" coverage of the topic indefinitely.
As well, security is an immense discipline, and touches on an inordinate
number of other areas.  This work, however, has come closest to spanning
the range of subject matter necessary to challenge the CISSP exam, and is
currently the best of the guides.

copyright Robert M. Slade, 2004   BKOIGTCE.RVW   20040618
rsl... () vcn bc ca      s... () victoria tc ca      rsl... () sun soci niu edu
http://victoria.tc.ca/techrev    or    http://sun.soci.niu.edu/~rslade

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • ISC2 vs Rob Slade J.A. Terranson (Feb 23)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]