Note: Requirements below reflect general published guidelines and are provided for reference only. Certifying bodies update their requirements periodically. Always verify current requirements directly with the certifying body before making renewal decisions. Certifyrapp is not affiliated with any certifying body listed here.
(ISC)²
CISSP
Cycle
3-year cycle
Total required
120 CPEs total
Annual requirement
Suggested 40 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
CCSP / CSSLP
Cycle
3-year cycle
Total required
90 CPEs total
Annual requirement
Suggested 30 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
SSCP / CGRC / HCISPP
Cycle
3-year cycle
Total required
60 CPEs total
Annual requirement
Suggested 20 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
CC
Cycle
3-year cycle
Total required
45 CPEs total
Annual requirement
Suggested 15 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
ISSAP / ISSEP / ISSMP
Cycle
2-year cycle
Total required
20 CPEs total
Annual requirement
Suggested 10 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
Associate of ISC² – CISSP Pathway / Associate of ISC² – CCSP Pathway
Cycle
6-year cycle
Total required
90 CPEs total
Annual requirement
Minimum 15 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
Associate of ISC² – CGRC Pathway
Cycle
3-year cycle
Total required
45 CPEs total
Annual requirement
Minimum 15 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
Associate of ISC² – CSSLP Pathway
Cycle
5-year cycle
Total required
75 CPEs total
Annual requirement
Minimum 15 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
Associate of ISC² – SSCP Pathway
Cycle
2-year cycle
Total required
30 CPEs total
Annual requirement
Minimum 15 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
Associate of ISC² – ISSAP Pathway / Associate of ISC² – ISSEP Pathway / Associate of ISC² – ISSMP Pathway
Cycle
8-year cycle
Total required
120 CPEs total
Annual requirement
Minimum 15 CPEs per year
Portal
Candidates.isc2.org
Categories / activity types
Group A: activities directly related to your certification's CBK security domains (courses, conferences, self-study, work projects, teaching — all on cybersecurity topics). Group B: general professional development not specific to security domains (management, leadership, non-security training). Group B credits are capped per cert; Group A is unlimited.
Fees
Annual Maintenance Fee (AMF) — $135/yr, one fee covers all ISC² certs ($50/yr for CC-only members)
Keep in mind: (ISC)² uses a Group A / Group B CPE structure. Group A covers domain-relevant security activities and must meet each cert's minimum requirement — there is no upper cap on Group A credits. Group B (general professional development) is capped at 30 per 3-year cycle for most certs. If you hold multiple (ISC)² certs, Group A CPEs can often count across all of them.
CompTIA
Security+ / SecAI+
Cycle
3-year cycle
Total required
50 CEUs total
Annual requirement
No annual minimum
Portal
CompTIA CE portal
Categories / activity types
CE activities include: college courses, vendor training, webinars, publishing, and teaching. Each activity type has a point value.
Fees
Annual CE fee — $25–$50/yr by your highest cert; lower certs renew free with it
CySA+ / PenTest+
Cycle
3-year cycle
Total required
60 CEUs total
Annual requirement
No annual minimum
Portal
CompTIA CE portal
Categories / activity types
CE activities include: college courses, vendor training, webinars, publishing, and teaching. Each activity type has a point value.
Fees
Annual CE fee — $25–$50/yr by your highest cert; lower certs renew free with it
CASP+
Cycle
3-year cycle
Total required
75 CEUs total
Annual requirement
No annual minimum
Portal
CompTIA CE portal
Categories / activity types
CE activities include: college courses, vendor training, webinars, publishing, and teaching. Each activity type has a point value.
Fees
Annual CE fee — $25–$50/yr by your highest cert; lower certs renew free with it
Network+ / Linux+ / Cloud+ / Server+ / Data+ / Project+ / Tech+ / Cloud Essentials+
Cycle
3-year cycle
Total required
30 CEUs total
Annual requirement
No annual minimum
Portal
CompTIA CE portal
Categories / activity types
CE activities include: college courses, vendor training, webinars, publishing, and teaching. Each activity type has a point value.
Fees
Annual CE fee — $25–$50/yr by your highest cert; lower certs renew free with it
A+
Cycle
3-year cycle
Total required
20 CEUs total
Annual requirement
No annual minimum
Portal
CompTIA CE portal
Categories / activity types
CE activities include: college courses, vendor training, webinars, publishing, and teaching. Each activity type has a point value.
Fees
Annual CE fee — $25–$50/yr by your highest cert; lower certs renew free with it
Keep in mind: CompTIA's CE program uses a separate portal from the initial exam. Lower-level CompTIA certs (A+, Network+) can sometimes be used to satisfy CE requirements for higher-level certs held at the same time.
ISACA
CISM / CISA / CRISC / CGEIT / CSX-P / CCOA / CCA
Cycle
3-year cycle
Total required
120 CPEs total
Annual requirement
Minimum 20 CPEs per year
Portal
MyISACA portal
Categories / activity types
CPE activities must be relevant to the certification domain. ISACA defines qualifying activities including education, self-study, authoring, and professional service.
Fees
Annual maintenance fee — $45/yr for members, $85/yr for non-members, due January 1
Keep in mind: ISACA requires annual reporting — not just a 3-year total. Missing the 20 CPE annual minimum is a compliance issue even if your 3-year total is on track. CPEs must be reported and verified each year.
EC-Council
CEH / CPENT / CHFI / ECSA / CND / CCISO / CRAGE / CAIPM / COASP / CCSE / ECDE / CASE (.NET) / CASE (Java) / BBLC / BFC / BDC / ECIH / CSA / CTIA / EDRP / ECSS / CSCU / EHE / DFE / CCT / ECES / NDE / AIE / WAHS / TIE / ISE / CSE / DSE / SCE
Cycle
3-year cycle
Total required
120 CPEs total
Annual requirement
No annual minimum
Portal
ASPEN — EC-Council's member portal
Categories / activity types
ECE credits can be earned through training, conferences, publishing, teaching, or other qualifying activities. Exam retake is an accepted alternative to ECE tracking.
Fees
Annual ECE membership fee — $80/yr
Keep in mind: EC-Council requires ECE activity to be reported annually toward a 120-credit, 3-year total; its published policy does not state a hard 40-credit annual minimum. It also offers an exam retake path as an alternative to ECE credit tracking, though it has its own cost.
GIAC
GSEC / GISF / GFACT / GISP / GPEN / GXPN / GWAPT / GCPN / GRTP / GAWN / GCIH / GCIA / GCDA / GSOC / GMON / GEIR / GCIL / GLIR / GDAT / GCFE / GCFA / GASF / GIME / GNFA / GBFA / GCFR / GREM / GPCS / GCLD / GCTD / GCSA / GCAD / GWEB / GCED / GDSA / GCWN / GEVA / GCTI / GOSI / GSOA / GICSP / GRID / GCIP / GMOB / GSNA / GCCC / GLEG / GSLC / GSTRT / GCPM / GSOM / GASAE / GAIPS / GOAA / GMLE / GPYC / GX-IA / GX-IH / GX-FE / GX-FA / GX-CS / GX-PT
Cycle
4-year cycle
Total required
36 CPEs total
Annual requirement
No annual minimum
Portal
GIAC portal
Categories / activity types
CPEs should be security-relevant. GIAC accepts a wide range of qualifying activities. Exam retake is an accepted alternative.
Fees
Certification maintenance fee — standard $499 every 4 years; GSNA (in abeyance) $199; multi-cert discounts may apply
Keep in mind: GIAC's 4-year renewal cycle gives more runway than most bodies, but CPE tracking still requires documentation. Like EC-Council, GIAC allows exam retake as an alternative to CPE accumulation.
AWS
Cloud Practitioner / Solutions Architect / Security Specialty / SysOps Administrator
Cycle
3-year cycle
Total required
No CPE requirement — see category notes
Annual requirement
No annual minimum
Portal
AWS Training and Certification portal
Categories / activity types
No CE program. To renew, pass the current version of the exam or a higher-level exam in the same certification path.
Fees
Exam fee required for renewal
Keep in mind: AWS does not offer a CE credit path. Renewal requires passing the current exam or a higher-level exam. There is no way to renew by logging training hours.
Microsoft
AZ-104 (Azure Administrator) / AZ-500 (Azure Security Engineer) / SC-200 (Security Operations) / SC-300 (Identity Administrator)
Cycle
Annual renewal
Total required
No CPE requirement — see category notes
Annual requirement
No annual minimum
Portal
Microsoft Learn
Categories / activity types
Microsoft's renewal model is assessment-based, not CPE-based. No hours to track — complete the renewal module on Microsoft Learn before expiration.
Fees
No fee for renewal assessment
Keep in mind: Microsoft certifications renew annually via a free online assessment on Microsoft Learn. There is no CPE logging — just complete the renewal module before your cert expires.
Shared Assessments
CTPRP / CTPRA
Cycle
3-year cycle
Total required
36 CPEs total
Annual requirement
No annual minimum
Portal
Shared Assessments member portal
Categories / activity types
CPE activities must be relevant to third-party risk management. Qualifying activities include training, conferences, webinars, self-study, and professional contributions to the TPRM field.
Fees
Annual membership fee required; renewal application fee may apply
Keep in mind: Shared Assessments is the leading industry body for third-party risk management professionals. CPEs must be relevant to TPRM, vendor risk, or related security disciplines. Both CTPRP and CTPRA follow the same renewal structure.
Cisco
CCNA
Cycle
3-year cycle
Total required
No CPE requirement — see category notes
Annual requirement
No annual minimum
Portal
Cisco Continuing Education portal
Categories / activity types
Cisco offers both a CE credit path and an exam retake path. CE credits are earned through Cisco-approved training and must be submitted through the Cisco Continuing Education portal.
Fees
Varies by renewal path
CCNP Security
Cycle
3-year cycle
Total required
80 CPEs total
Annual requirement
No annual minimum
Portal
Cisco Continuing Education portal
Categories / activity types
Cisco offers both a CE credit path and an exam retake path. CE credits are earned through Cisco-approved training and must be submitted through the Cisco Continuing Education portal.
Fees
Varies by renewal path
CCIE Security
Cycle
3-year cycle
Total required
120 CPEs total
Annual requirement
No annual minimum
Portal
Cisco Continuing Education portal
Categories / activity types
Cisco offers both a CE credit path and an exam retake path. CE credits are earned through Cisco-approved training and must be submitted through the Cisco Continuing Education portal.
Fees
Varies by renewal path
Keep in mind: Vendor certifications don't follow a unified model. Cisco offers both CE credits and exam retakes. Each path has separate costs and portal requirements.
IAPP
CIPP/US / CIPP/E / CIPP/C / CIPP/A / CIPM / CIPT / AIGP
Cycle
2-year cycle
Total required
20 CPEs total
Annual requirement
No annual minimum
Portal
MyIAPP portal
Categories / activity types
Group A: content specific to your designation's body of knowledge (e.g. European data protection for CIPP/E). Group B: general privacy, professional development, or topics outside your designation. At least 10 of the 20 CPEs must be Group A; up to 10 may be Group B.
Fees
Certification maintenance fee — $250 every 2 years, waived with an active IAPP membership
Keep in mind: IAPP uses a Group A / Group B CPE structure like ISC2. Group A credits are specific to each designation's body of knowledge and must cover at least half of the 20-CPE requirement; Group B (general privacy and professional development) is capped at 10 and applies across all of your IAPP certifications.
PMI
PMP / PgMP / PfMP
Cycle
3-year cycle
Total required
60 PDUs total
Annual requirement
No annual minimum
Portal
PMI CCRS (Continuing Certification Requirements System)
Categories / activity types
Education PDUs (courses, e-learning, events — spread across the PMI Talent Triangle) have a per-cert minimum. Giving Back PDUs (working as a professional, volunteering, creating content) are capped per cycle. 1 PDU = 1 hour.
Fees
Certification renewal fee per cycle
PMI-ACP / PMI-RMP / PMI-SP
Cycle
3-year cycle
Total required
30 PDUs total
Annual requirement
No annual minimum
Portal
PMI CCRS (Continuing Certification Requirements System)
Categories / activity types
Education PDUs (courses, e-learning, events — spread across the PMI Talent Triangle) have a per-cert minimum. Giving Back PDUs (working as a professional, volunteering, creating content) are capped per cycle. 1 PDU = 1 hour.
Fees
Certification renewal fee per cycle
CAPM
Cycle
3-year cycle
Total required
15 PDUs total
Annual requirement
No annual minimum
Portal
PMI CCRS (Continuing Certification Requirements System)
Categories / activity types
Education PDUs (courses, e-learning, events — spread across the PMI Talent Triangle) have a per-cert minimum. Giving Back PDUs (working as a professional, volunteering, creating content) are capped per cycle. 1 PDU = 1 hour.
Fees
Certification renewal fee per cycle
Keep in mind: PMI certifications renew on a 3-year CCR cycle measured in PDUs. Education PDUs must meet a minimum (35 of 60 for PMP, spread across the Talent Triangle) while Giving Back PDUs — volunteering, creating content, working as a professional — are capped (25 for PMP). Up to 20 unused PDUs earned in the final year can carry into the next cycle.
Track all of these in one place.
Certifyrapp lets you log CPE/CEU activities, upload proof, and track renewal cycles across every body you hold — without switching between portals.