Most IT certifications run on a three-year cycle, and you keep them active by earning continuing education credits and, for some bodies, paying an annual maintenance fee. ISC2 and ISACA want CPE credits plus a yearly fee, CompTIA wants CEUs, PMI wants PDUs, and AWS renews by exam or a maintain option. Put your cycle end date on the calendar the day you pass, and log credits as you go instead of in the last month.
How do renewal requirements compare across certifications?
- Certification: CISSP
Body: ISC2
Cycle: 3 years
Continuing education: 120 CPE credits
Annual fee: US$135 AMF (checked Sep 2026), one fee covers all your ISC2 certs - Certification: CCSP
Body: ISC2
Cycle: 3 years
Continuing education: 90 CPE credits
Annual fee: Same single ISC2 AMF - Certification: SSCP
Body: ISC2
Cycle: 3 years
Continuing education: 60 CPE credits
Annual fee: Same single ISC2 AMF - Certification: CISA, CISM
Body: ISACA
Cycle: 3 years
Continuing education: 20 CPE hours a year, 120 over 3 years
Annual fee: US$45 members, US$85 non-members (checked Sep 2026) - Certification: Security+
Body: CompTIA
Cycle: 3 years
Continuing education: 50 CEUs
Annual fee: Not listed here, see note below - Certification: CySA+
Body: CompTIA
Cycle: 3 years
Continuing education: 60 CEUs
Annual fee: Not listed here - Certification: PMP
Body: PMI
Cycle: 3 years
Continuing education: 60 PDUs
Annual fee: Not listed here - Certification: AWS Solutions Architect Associate
Body: AWS
Cycle: 3 years
Continuing education: Pass the latest exam or a higher one, or use the Skill Builder maintain option
Annual fee: None - Certification: ITIL 4 Foundation
Body: PeopleCert
Cycle: 3 years
Continuing education: 60 CPD points, or pass another exam in the suite, or retake
Annual fee: Not listed here
I've only listed fees I could confirm on an official page, checked September 2026. Check your own account with CompTIA, PMI and PeopleCert for current renewal costs.
How does ISC2 CPE work?
ISC2 counts CPE credits over a three-year cycle. CISSP needs 120, CCSP needs 90 and SSCP needs 60. ISC2 suggests about a third each year but doesn't set an annual minimum for full members. Associates of ISC2 are different and need 15 a year.
You also pay one annual maintenance fee of US$135 (as of September 2026), no matter how many ISC2 certifications you hold. ISC2 gives you 90 days after your cycle expires to submit CPEs, and 90 days past each annual due date to pay the AMF.
How does ISACA CPE work for CISA and CISM?
ISACA wants at least 20 CPE hours every year and 120 over three years, plus an annual maintenance fee of US$45 for members or US$85 for non-members, as of September 2026.
A change starts January 1, 2027. The 120-hour total stays the same, but at least 90 of those hours must align with the domains of your certification. General professional hours will count for less of the total, so plan your 2027 learning around your domains.
How do CompTIA CEUs work?
CompTIA certifications last three years. You renew by earning CEUs inside your cycle, and the number depends on the certification.
CompTIA certification: CEUs over 3 years
- A+: 20
- Network+: 30
- Security+: 50
- CySA+: 60
- PenTest+: 60
- SecurityX: 75
Two rules trip people up. Activities have to happen during your three-year cycle, and at least half of a course's content has to relate to the exam objectives for the certification you're renewing. Tech+ can't be renewed with CEUs at all. You pass the latest version of the exam instead.
How do you renew PMP, AWS and ITIL?
PMP holders earn 60 PDUs every three years. Each PDU is one hour spent learning, teaching, presenting, reading, volunteering or creating content.
AWS doesn't use credits. Both Cloud Practitioner and Solutions Architect Associate are valid three years. You can renew Cloud Practitioner free through AWS Cloud Quest, or by passing a higher exam. Solutions Architect Associate renews when you pass the latest version or Solutions Architect Professional, or for one extra year through the Skill Builder maintain option, which needs a paid subscription.
ITIL 4 Foundation certificates renew every three years. PeopleCert accepts 60 CPD points (20 a year through PeopleCert Plus), passing another certification in the same product suite, or retaking the exam. PeopleCert also says all ITIL 4 modules are planned to sunset on December 31, 2027, now that ITIL (Version 5) is out.
How can Accumentum help you keep your certification active?
That's what PathLock™ is for. It gives you a credential locker with renewal dates, monthly activity packs mapped to your domains, short labs and a PDF or CSV record of what you did. You self-report to your credentialing body.
PathLock Individual covers up to three certifications. Pro has no cap on certifications. Monthly packs cover ISC2 CISSP, ISACA CISM and CISA, CompTIA Security+, CySA+, PenTest+ and SecurityX, PMI PMP and several others. For vendors that renew by exam, like AWS, PathLock tracks the date. PeopleCert (ITIL) packs are listed as coming next.
Some limits, so there's no confusion. PathLock isn't official vendor CPE pre-approval, and it doesn't replace any annual maintenance fee you owe. It also has no connection to Pathlock, Inc. For team or cohort pricing, email info@accumentum.net.
If you're still studying, PathPass® is the exam prep side. The Combo plan bundles PathPass All-Access with PathLock Individual.
Frequently asked questions
How many CPEs do I need for CISSP?
120 CPE credits per three-year cycle, plus the US$135 annual maintenance fee (as of September 2026). ISC2 suggests about 40 a year.
Do I pay a separate ISC2 fee for each certification?
No. ISC2 charges one annual maintenance fee, however many ISC2 certifications you hold.
What changes for ISACA CPE in 2027?
Starting January 1, 2027, at least 90 of your 120 three-year CPE hours must align with your certification's domains.
How many CEUs does Security+ need?
50 CEUs within the three-year cycle.
Does PathLock submit my CPEs for me?
No. PathLock maps activities and gives you a record, and you report the hours to your credentialing body yourself.
Do AWS certifications need CPE credits?
No. AWS certifications are valid for three years and renew by exam, by passing a higher exam, or through AWS's other recertification options such as Cloud Quest for Cloud Practitioner.
Sources
Official facts checked Sep 28, 2026.
- ISC2, Member Policies and Procedures (CPE totals, AMF, grace period): https://www.isc2.org/policies-procedures/member-policies
- ISACA Support, requirements to maintain your certification (CPE, AMF): https://support.isaca.org/s/article/What-are-the-requirements-to-maintain-my-certification-1597877233626
- ISACA, CPE 2027 changes: https://www.isaca.org/credentialing/cpe-2027
- CompTIA, Earn Continuing Education Units: https://www.comptia.org/en-us/resources/ce/learn/earn-continuing-education-units-ceus/
- PMI, PMP Certification (60 PDUs): https://www.pmi.org/certifications/project-management-pmp
- AWS, Recertification: https://aws.amazon.com/certification/recertification/
- PeopleCert, ITIL 4 Foundation: https://www.peoplecert.org/browse-certifications/it-governance-and-service-management/ITIL-1/itil-4-foundation-2565
- PeopleCert, ITIL FAQ (renewal routes, ITIL 4 sunset): https://www.peoplecert.org/help-and-support/faq-itil
Accumentum facts come from the live /pathlock/ and /pathpass/ pages on accumentum.net.
