As I started working on one of our more successful books–it’s now in a fourth edition, and continues to generate modest but steady earnings–I first stumbled across French-Canadian Clement Dupuis’ outstanding CCCure.org Web site. For those prepping for the CISSP exam, this site is a real treasure trove of information, including all kinds of useful study tips and advice on how best to prepare for the exam, as well as beaucoups content and pointers to still more content to help candidates learn the subject matter necessary from each of the exam’s many categories/topic areas in the body of knowledge that they must master.
You’ll also find pointers to relevant training and tutorials, exam quizzes to help you hone your study skills, and even a nice collection of book reviews of CISSP study guides–including, thankfully, a good review of the aforementioned CISSP Study Guide to which James Michael Stewart, Mike Chapple, and I all contributed. But the best aspect of this resource has to be the on-site forums. Here, you can learn an awful lot by reading over postings from others with CISSP related questions, and the answers that some incredible security luminaries regularly provide in response. If you need answers to your own questions, please do your homework and search existing threads first before posting here, then be prepared to wait 2-3-sometimes-even-4 days to get a reply. You won’t be sorry.
Of course, I should also mention that Clement Dupuis is no slouch in the security department: he’s a well-known instructor, researcher, and consultant in this area. He’s also now teaching for Shon Harris’ San Antonio-based training company, Logical Security, where he regularly rubs shoulders with other security experts as well.
If you need to add an excellent on-line resource to your study arsenal for the CISSP exam, CCCure.org is it. You’ll also find some coverage of the ISACA CISA and CISM exams here, too, but I haven’t explored it sufficiently enough to give it the same ringing endorsement I so happily give to the CISSP coverage–though I’m pretty sure I would do likewise were I to dig into it more deeply.