Since 1993, Information Security Management Handbook has served not only as an everyday reference for information security practitioners but also as an important document to be used by practitioners to conduct an intense review necessary to prepare for exams (CISSP) Certified Information Systems Security Professional. This guide is one of the most important references used by candidates to prepare exam.The Information Security Management Handbook on the map domain ten Agency general knowledge tested on the certification exam: methodological issues and access control, telecommunications and network security, security management practices, applications and systems development security, cryptography, security architecture and models, operations security, business continuity plans and disaster recovery planning, law, investigation, and ethics, and physical security.