CISM befor CISSP? What is Q&A db?

Hi, I am new to ITSEC certifications but not Security in general. I am getting company paid training for the CISSP next year and wondered if doing to CISM first might be helpful. I keep seeing references to the Q&A db, Can someone link that for me and suggest the best books/study materials?