John,

First of all, congrats on passing your CISSP. One thing that I found after
passing my CISSP exam is that now that all this studying and preparing is
done, and passed the exam... can't stop now.

There are so many resources that I've found useful since getting the cert.
Lots of documents that were helpful before the exam such as the NIST 800
series docs come in very helpful. I recently attended a Vulnerability
Assessment course and two documents that were pointed out of great
significance were the Open Source Systems Testing Methodology Manual
(OSSTMM) and the Information Security Forum Standard (ISF). These two
documents deal with VAs, but even so are a valuable read to the security
professional. The ISO17799 is a good document, but rather costly. Websites
of interest: The Reading room at SANS, SecurityDocs.com,
searchsecurity.techtarget.com, the Cisco Learning Connection (CPE credits!),
and another that I kinda like is firewall.cx. That's off the top of my head.

I find myself watching quite a few webcasts lately. Frequently I'll attend
SANS and SearchSecurity webcasts. The beauty about these are that they
contain good material, you can get live feedback, and they're worth 1CPE per
hour of webcast.

Don't stress. There are piles of free resources out there to keep your skill
set up to date, it just depends on you how far you want to go.

Sheldon Handcock, CISSP®

"John MacLean" <jmaclean@toshiba.ca> wrote in message
news:t6gvh1de55uj162r24o4ads7ic7p31qujs@4ax.com...
>I have passed the CISSP exam few month back. I have almost 14 years
> experience in the IT field, support, networking, and routing. I
> thought that adding security to this profile will be cool. . I
> prepared for it just like any other exam; I read the right books,
> studied well and passed. The problem is that now few months later I
> feel that I have forgot everything. I want to apply for a security
> consultant position, but I feel that I lack the confidence to fulfill
> this position. What went wrong????
> I am willing to devote time and effort to bridge the gap and rebuild
> this "Security skill set" but I don't know where to start or what book
> to read. Please guys advice!
>