Primary text:
Ronald Krutz and Russell Vines, The CISM Prep Guide : Mastering the Five Domains of Information Security Management, Wiley, 2003, ISBN 0-471-45598-9
Supplementary material from:
Ross Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems, Wiley, 2001, ISBN 0-471-38922-6