cert21.com For a large number of programs—including Check Point, Cisco, CIW, CompTIA and others, this site offers free and for-a-fee practice exams, good study guides and discussion forums.
www.certificationzone.com Entirely Cisco-focused, within that area this site offers an extensive online resource library, training courses and discussion forums. Definitely worth a visit!
www.certifyexpress.com Offers study tips, cram notes and practice exams. At present you’ll find coverage of Cisco, (ISC)2 (CISSP and SSCP), Sun (Security Administrator), CompTIA (Security+) and Check Point security exams, but they keep adding new stuff so keep checking back.
www.certportal.com For most of the major programs and some of the minors, this site provides links to study and practice resources on other sites, along with study guides and exam notes of its own.
www.certyourself.com Offers exam outlines, practice exams, study guides, online training and more. So far, the site addresses (ISC)2’s CISSP and SSCP, Check Point’s CCSA and CCSE, CIW, Cisco’s Security Specialist and CCIE Security and CompTIA’s Security+ exams, and also includes great pointers to lots of other resources.
CISSP Open Study Group
www.cccure.org This is probably the most comprehensive collection of pointers and information about the CISSP exam available anywhere. Definitely worth a visit, no matter which security certification might interest you. (Note: A condensed and slightly more readable version of this information also appears at Clement Dupius “Resources for the CISSP Study Guide” at comsec.theclerk.com/CISSP/.)
CISSP Study Guides
www.cissps.com This is a Web portal for the Certified Information Systems Security Professional certification. As such, it includes great exam guides, CISSP career information, discussion forums and access to custom training services.
cramsession.com Offers study guides, assessment exams and peer discussion forums. You’ll find coverage of numerous security exams here, including CISSP, Security+, TICSA and more. The site’s study guides and pointers to resources are generally quite helpful and informative.
Dan Houser’s CISSP Study Guide List version 3.2
archives.neohapsis.com/archives/cisspstudy/2002-q1/0033.html Another aggregation of all kinds of CISSP resources, including pointers to books, courses, reading lists, discussion groups, exam preparation materials and so forth. Here again, you’ll find this useful no matter which exam you’re interested in.
www.informit.com Offers security certifications coverage along with an extensive online library of useful, related resources. In particular, the following items should be quite useful, since they identify the 50-odd most useful and informative books on infosec that are currently available: The Computer Security Bookshelf, Part 1 www.infor mit.com/articles/ article.asp?p=31129 The Computer Security Bookshelf, Part 2 www.informit.com/articles/ article.asp?p=31127
RSA Laboratories Cryptography FAQ
www.rsasecurity.com/rsalabs/faq/index.html As a key subject on just about any infosec exam, learning about cryptography is crucial for all infosec certification candidates. Because the folks at RSA invented a lot of the crypto technology in use in today’s marketplace, their information on the subject is particularly noteworthy.
searchsecurity.techtarget.com You’ll find lots of good news, surveys, articles, information and pointers to security certification resources here. A search on “security certification” turns up several recent surveys, landscape reconnaissance, news, plus numerous stories on specific security certification programs.
www.lanw.com/training/interop/securityurls.htm This Web page compiles lots of useful security-related Web sites and includes most good notification services, a great collection of anti-virus and alert services and lots of pointers to tools, topics and technologies relevant to Windows security in particular, but with good coverage of general infosec topics as well.
whatis.techtarget.com TechTarget’s WhatIs site is a great resource for IT professionals, but it’s particularly up-to-date on most security and cryptography-related terms and concepts. We find it invaluable when studying for such exams, and we think you will too.