Reading list
Suggested references
ISC2's suggested starting points for domains where you need supplementary study. ISC2 doesn't endorse any particular text, and reading them doesn't guarantee a pass. Domain tags are our guide to where each book helps most.
- Access Control and Identity Management, 3rd Ed.
Mike Chapple · Jones and Bartlett Learning · Sep 2020
View on O'Reilly(opens in a new tab)D5 - Authentication and Access Control: Practical Cryptography Methods and Tools
Sirapat Boonkrong · Apress · Dec 2020
View on Springer(opens in a new tab)D3D5 - Business Continuity and Disaster Recovery Planning for IT Professionals, 2nd Ed.
Susan Snedaker · Syngress · Sep 2013
View on Elsevier(opens in a new tab)D1D7 - Computer and Information Security Handbook, 3rd Ed.
John Vacca · Morgan Kaufmann · May 2017
View on O'Reilly(opens in a new tab)All domains - Core Software Security: Security at the Source
Anmol Misra, James F. Ransome · Auerbach Publications · Oct 2018
View on Routledge(opens in a new tab)D8 - Data Governance: The Definitive Guide
Evren Eryurek, Uri Gilad, Valliappa Lakshmanan, Anita Kibunguchy-Grant, Jessi Ashdown · O'Reilly Media · Mar 2021
View on O'Reilly(opens in a new tab)D2 - Developing Cybersecurity Programs and Policies, 3rd Ed.
Omar Santos, Sari Greene · Pearson IT Certification · Aug 2018
View on Pearson(opens in a new tab)D1 - Ethical Hacking and Penetration Testing Guide
Rafay Baloch · Auerbach Publications · Sep 2017
View on Routledge(opens in a new tab)D6 - Foundations of Information Security: A Straightforward Introduction
Jason Andress · No Starch Press · Oct 2019
View on No Starch Press(opens in a new tab)All domains - Fundamentals of Information Systems Security, 4th Ed.
David Kim, Michael G. Solomon · Jones & Bartlett Publishers · Nov 2021
View on Jones & Bartlett(opens in a new tab)All domains - Identity and Access Management: Business Performance Through Connected Intelligence, 1st Ed.
Ertem Osmanoglu · Syngress · Nov 2013
View on Elsevier(opens in a new tab)D5 - Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution
Darran Rolls, Morey J. Haber · Apress · Dec 2019
View on Springer(opens in a new tab)D5 - Information Security Handbook
Darren Death · Packt Publishing · Dec 2017
View on Packt(opens in a new tab)D1D7 - IT Auditing Using Controls to Protect Information Assets, 3rd Ed.
Mike Kegerreis, Mike Schiller, Chris Davis · McGraw-Hill Education · Oct 2019
View on O'Reilly(opens in a new tab)D6 - IT Security Controls: A Guide to Corporate Standards and Frameworks
Virgilio Viegas, Oben Kuyucu · Apress · Mar 2022
View on Springer(opens in a new tab)D1D3 - IT Security Risk Control Management: An Audit Preparation Plan
Raymond Pompon · Apress · Sep 2016
View on Springer(opens in a new tab)D1D6 - Official (ISC)² Guide to the CISSP CBK, 5th Ed.
John Warsinske, Mark Graff, Kevin Henry, Christopher Hoover, Ben Malisow, Sean Murphy, C. Paul Oakes, George Pajari, Jeff T. Parker, David Seidl, Mike Vasquez · Wiley · May 2019
View on Wiley(opens in a new tab)All domains - Practical Cloud Security: A Guide for Secure Design and Deployment
Chris Dotson · O'Reilly Media · Mar 2019
View on O'Reilly(opens in a new tab)D3D4 - Security in Computing, 6th Ed.
Charles Pfleeger, Shari Lawrence Pfleeger, Lizzie Coles-Kemp · Addison-Wesley Professional · Aug 2023
View on InformIT(opens in a new tab)D3D4D8 - Solving Identity Management in Modern Applications: Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0
Abhishek Hingnikar, Yvonne Wilson · Apress · Nov 2022
View on Springer(opens in a new tab)D5 - The Complete Guide to Physical Security
Paul R. Baker, Daniel J. Benny · Auerbach Publications · Apr 2016
View on Routledge(opens in a new tab)D3D7 - The Disaster Recovery Handbook, 3rd Ed.
Michael Wallace, Lawrence Webber · AMACOM · Dec 2017
View on HarperCollins Leadership(opens in a new tab)D7 - Threat Modeling: Designing for Security, 1st Ed.
Adam Shostack · Wiley · Feb 2014
View on Wiley(opens in a new tab)D1D3 - Zero Trust Networks: Building Secure Systems in Untrusted Networks
Evan Gilman, Doug Barth · O'Reilly · Jul 2017
View on O'Reilly(opens in a new tab)D3D4