Foreword by Edward M. Stroz

From stolen intellectual proprietary and denial of service attacks to unauthorized use of critical resources and computer viruses, e-business companies face numerous threats each day that can cost millions of dollars. The need for these companies to protect their networks and information systems has, in turn, created an unprecedented demand for information systems security professionals. In fact, today's companies are fiercely headhunting for Certified Information Systems Security Professionals (CISSP). Based on the extensive test experience of the authors, this book serves as both a prep guide for IT professionals seeking to advance their careers through CISSP certification and as a reference on fundamental and emerging information security knowledge. It focuses on the common body of knowledge (CBK) as defined by the International Information Systems Security Certification Consortium (IS C)2. The ten domains of the CBK are covered in detail, including security management, cryptography, disaster recovery planning, and telecommunications security. Each domain of the CBK is then followed by a series of sample practice questions that are similar to those that you'll encounter on the CISSP examination, helping you better prepare for and pass the exam. Provides a one-stop, self-paced preparation guidance on the ten security domains covered by the CISSP exam, from security management practices to cryptography to business continuity and disaster recovery planning.

• Includes sample questions, answers, references, and an extensive glossary.
• Ronald Krutz is a longtime CISSP examiner and former R&D; Director at Carnegie Mellon University, which is home to the major reporting and worldwide alert center for Internet security problems.
• Clearly ties each of the chapters together for greater applicability to the workplace.
• Useful both as a prep guide for IT professionals seeking to advance their careers through CISSP certification and as a reference for readers who need a fundamental end-to-end security reference book.