How do we buy copies for a team?

Through Amazon. Each book page links to the book's Amazon listing, where you choose the quantity; Amazon handles payment, invoicing and delivery.

Do you offer bulk discounts or sell direct?

No. Every sale goes through Amazon at the listed price, and we do not sell direct or offer volume discounts.

Can trainers or libraries get free desk copies?

No. Trainers and libraries buy through Amazon like everyone else. Individual readers can ask for a free reader copy on the free copies page.

Do the books include the ISO standards?

No. ISO standards are copyright, so the ISO exam guides never reproduce them. Buy licensed copies of the standards for your team from ISO or your national standards body.

How current are the books?

Each book prints the exam outline or body of knowledge version it follows and the date it was checked. For example, the CISM books follow ISACA's 2022 outline, for exams up to 2 November 2026.

For teams

Buying exam guides for a team, a course or a library.

Pick the right book for each role below, then buy the copies you need from that book's Amazon listing. Every book is written from the exam board's own published documents and says which edition of the exam it follows.

Which book for which role What certification costs

Which book for which role

Match the exam to the work, then the book to the exam.

Each row names the exam that covers the area and the books written for it. Guides teach the published domains; practice books test them, with a rationale for every answer.

Area of work	Exam	Books
AI governance program	AIGP (IAPP)	AIGP Exam Guide · AIGP Practice Questions
EU AI Act compliance	Practitioner handbooks	AI Governance Framework · AI Governance Worked Scenarios
AI management system (ISO/IEC 42001)	PECB ISO/IEC 42001 Lead Implementer	ISO 42001 Lead Implementer Exam Guide · ISO 42001 Lead Implementer Practice Questions
Business continuity (ISO 22301)	PECB ISO 22301 Lead Implementer	ISO 22301 Lead Implementer Exam Guide · ISO 22301 Lead Implementer Practice Questions
IT audit and assurance	CISA (ISACA)	CISA Exam Guide · CISA Practice Questions
Information security management	CISM (ISACA)	CISM Exam Guide · CISM Practice Questions
IT risk and controls	CRISC (ISACA)	CRISC Exam Guide
Security across eight domains	CISSP (ISC2)	CISSP Exam Guide · CISSP Practice Questions
Cloud security	CCSP (ISC2)	CCSP Exam Guide
EU data protection	CIPP/E (IAPP)	CIPP/E Exam Guide · CIPP/E Practice Questions
US privacy law	CIPP/US (IAPP)	CIPP/US Exam Guide · CIPP/US Practice Questions
Privacy program management	CIPM (IAPP)	CIPM Exam Guide · CIPM Practice Questions
Privacy in technology and products	CIPT (IAPP)	CIPT Exam Guide · CIPT Practice Questions
Privacy engineering	CDPSE (ISACA)	CDPSE Exam Guide · CDPSE Practice Questions
Financial risk	FRM Part I (GARP)	FRM Part I Exam Guide

Buying several copies

Every copy is bought on Amazon.

Each book page has a "Buy it on Amazon" button that opens the book's Amazon listing. Choose the quantity on Amazon; Amazon takes payment, issues the invoice and delivers. The button is an affiliate link, so a purchase pays this imprint a few percent and costs you nothing extra.

We do not sell direct, offer volume discounts or send free desk copies. Paperback ISBNs are listed in the product details on each Amazon listing, and on our page for libraries, with reference lines for reading lists.

Planning a program

Guides for the people who budget and plan certification.

Written for training managers, team leads and course providers, from each exam board's own fee pages and policies.

Teams

Which certification should an auditor, security manager, GRC analyst or privacy lead take?

You manage or budget for a team and need to match people to certifications from what the exam boards themselves say.

Read this guide Teams

What does NIS2 require of management bodies: approval, training, ten measures and 24-hour reporting?

You sit on, advise or report to the management body of an essential or important entity under NIS2, or you run its security program.

Read this guide Teams

Which EU laws require staff training: NIS2, DORA, the GDPR or the AI Act?

You plan training for an organization in the EU and need to know which laws make training a legal duty, for whom, and since when.

Read this guide Teams

What does DORA require of the management body, ICT auditors and staff training?

You sit on, advise or report to the management body of an EU financial entity, or run its ICT risk, audit or training program.

Read this guide Teams

What does it cost to certify a team?

You hold a training budget and need to price certification for a team from the exam boards' own fee pages.

Read this guide

Training an organization in AI? Read what EU AI Act Article 4 requires for AI literacy, as amended in July 2026, and what the AI Act requires of employers using AI in hiring and HR.

Trainers and course providers

Free material you can point candidates to.

Every exam guide on this site comes with a free template: exam-day checklists, study planners and worksheets, published under each guide. They are free to share with a cohort. For the PECB Lead Implementer courses there are pre-course reading lists you can paste into joining instructions: ISO/IEC 42001 and ISO 22301. If a book fits your course, add it to your reading list; candidates can buy it on Amazon, and individual readers can ask us for a free reader copy on the free copies page.

Questions about which book fits a role or a course? Write to hello@credentialpress.com.