12 August 2008

Been Down; but not Out

So, been a while. Just had some medical issues and have left my new, lame, little blog unattended. Many apologies to all of those who read this (um, I guess that would be you mom).

Been good though. Finished up coaching the youth rugby club. Having coached a range of ages at different levels of competitiveness, this season coaching one of my daughters U9 rugby squad was one of the most enjoyable. Seeing little kids running around with a rugby ball and learning how to scrum, etc. is just cool! Next up, lacrosse board meetings, etc. What a couple of great sports. Rarely do I see a youth who starts out playing either leave the sports.

So, an information security matter of sorts. I am polishing up my resume so I can apply to take the CISSP-ISSMP concentration exam. Man, let me tell you, there are just no resources out there for studying. I know it is no tthe most popular exam or credential in the world; but I figured after several years, someone had to write a book on preparing. I checked out cccure.org and isc2.org; but nada (as in nada darned thing!).

The exam is a management concentration and focuses on five of the ten domains:

The five domains of the CISSP-ISSMP CBK® are:

  • Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) and Continuity of Operations Planning (COOP)
  • Enterprise Security Management Practices
  • Enterprise-wide System Development Security
  • Law, Investigations, Forensics, and Ethics
  • Overseeing Compliance of Operations Security

Now really, having passed the CISSP exam, I assume their to be more depth in these domains than was on the CISSP, as this is a "concentration" exam. My assumption is it was set up to delve more than an inch deep and maybe go a foot or a fathom! My point in all of this is simply that I would expect ISC2 to at least publish a book since they are the exam/credentialing organization. A little odd to me that there is nothing available.

Anyone knowing of a good resource for ISSMP preparation; please pass it along. Also, looking for any opinions of how the CISSP/CISSP-ISSMP and CISM all differ in your opinions.

Thanks. I will do better next time now that I am upright and breathing again.

Cheers.