Reddit reviews Security Engineering: A Guide to Building Dependable Distributed Systems

I was going to study for it through the remainder of the year. From what I have read on forums the following holds:

1. The Green Book from (ISC)2
   
   
2. Security Engineering by Ross Anderson
   
   
3. Security Patterns in Practice by Eduardo Fernandez (really good security architecture book in general, not that it will get you through the ISSAP test)
   
   
4. Security Patterns: Integrating Security and Systems Engineering by Markus Schumacher (good overall philosophy of integrating security into systems, again not that it will get you through the ISSAP test)
   
   
5. Anything on Crypto - seems to be a lot of it in the exam
   
   
6. SABSA/SOMF Frameworks
   
   
7. NIST SP 800-30, 48, 64. You might want to skim the draft NIST SP 800-160 as well on security engineering
   
   
8. Re-review your CISSP documents like the Shaun Harris AIO
   
   I passed the ISSEP exam about a month ago (1023 in the US last count) and have not heard back from the folk at (ISC)2 yet - can't put in on my tag line until then. The ISSAP looked interesting given my background in Software Architecture and Design/Systems Engineering. So I will start studying for it in the next 6 months.