So I just finished up the Conrad book, and I must echo the other's comments on how good of a read it is. Simple to read, great real world examples, and straight to the point on the 10 Domains of the ISC2 CBK. I must say, I was happy to see that I already knew approximately 90% of the materal in the Conrad book. I found my weakest area to be the Risk Analysis (the actual numbers/equations for determining TLE, ROI, etc...) Next, I'm picking up the monster of a book by Shon Harris, looks to be a lot more indepth, possibly even too much so (1500+pages)

. In any case I plan to charge through that one, while supplementing with some videos. Can't wait to knock this thing out! I expect to have it done before the end of this year.

Cheers!