CISSP Certification All-in-One Exam Guide, Fourth Edition Una de las mejores formas de prepararse para la certificación. Se recomienda iniciar la lectura 6 meses antes del examen.
Software Security: Building Security In
ISO/IEC TR 13335-3:1998, Information technology - Guidelines for the management of IT Security - Part 3: Techniques for the management of IT Security
Exploiting Software: How to Break Code
Building Secure Software: How to Avoid Security Problems the Right Way
Writing Secure Code: Practical Strategies and Proven Techniques for Building Secure Applications in a Networked World
Fuzzing: Brute Force Vulnerability Discovery
ISO/IEC 13335-1:2004, Information technology - Security techniques - Management of information and communications technology security - Part 1: Concepts ... technology security management
ISO/IEC TR 13335-4:2000, Information technology - Guidelines for the management of IT Security - Part 4: Selection of safeguards
ISO/IEC TR 13335-5:2001, Information technology - Guidelines for the management of IT Security - Part 5: Management guidance on network security
How to Achieve 27001 Certification: An Example of Applied Compliance Management
Implementing the ISO/IEC 27001 Information Security Management System Standard
IT Governance: A Manager's Guide to Data Security and ISO 27001 / ISO 27002
Security Metrics: Replacing Fear, Uncertainty, and Doubt