I've been following tech exams for years, but this is my first post. I studies for the CISSP-ISSMP using only the CISM database. I couldn't get very far in the CISM manual, so I set it aside and used all my time to study the online QA database. I was able to pass the ISSMP by learning the concepts from the questions, and understanding why I was right or wrong. I agree with what others have said, if you can pass CISM you can pass ISSMP and vice versa. Hope this helps future learners!