ISC2 CC Renewal: 45 CPE Credits and Your Annual Checklist

How many CPE credits does CC require?

ISC2 requires CC holders to complete 45 Group A continuing professional education (CPE) credits over three years and meet annual maintenance fee obligations. Its Certification Maintenance Policy lists 15 credits annually as suggested, rather than a separate annual CC minimum.

These requirements were checked November 3, 2026 against ISC2's Certification Maintenance Policy, version 7.0, and its annual maintenance fee guidance. Keep the learning requirement and the payment requirement on separate reminders:

The fee shown is current as checked November 3, 2026; tax may apply by jurisdiction. Confirm the amount in your account before paying.

Does ISC2 CC expire? CC does not stay current on its own. Keeping it valid requires 45 Group A credits across the three-year cycle and AMF compliance. Under the policy checked November 3, 2026, unresolved noncompliance can lead, after the 90-day grace period, to suspension and then, after up to two years, to termination. Check the cycle dates in your ISC2 account for the dates that apply to you.

If you have passed the exam but have not completed certification, start with the steps after passing ISC2 CC. Initial certification and ongoing maintenance are separate processes. For maintenance planning, begin by recording the certification cycle shown in your ISC2 account.

Is 15 credits each year mandatory?

No. ISC2's CC table labels 15 annually as suggested. The stated CPE obligation is 45 Group A credits across the three-year cycle. Do not turn a recommended pace into a separate annual rule, and do not confuse it with the annual payment obligation.

A practical approach is to use the suggested pace as a progress check. For example, three years of 15 qualifying credits totals 45. That arithmetic is a planning aid; it does not establish that an activity qualifies or that your account has recorded it correctly.

At each personal check-in, compare three figures: the credits you planned, the credits you completed, and the credits recorded in your account. If they differ, resolve the missing activity or reporting question while you still have time to act. You can choose a quarterly reminder for this review; that frequency is editorial advice, not an ISC2 requirement.

If you are considering the certification and want to understand the ongoing commitment before starting, full ISC2 CC prep planned for launch includes 900 questions for subject practice. Exam preparation and maintaining the credential need their own plans; do not assume a prep activity earns CPE credit.

Which activities should you check for Group A credit?

ISC2's CPE opportunities page lists webinars, courses, chapter activities, volunteering, and research or publications. For CC, check the activity's relevance to the certification domains and its applicable credit rules before including it in your Group A total.

The opportunity list is a starting point, not a statement that every activity in every category automatically qualifies for CC Group A credit. Use the current CPE Credits Guide and Certification Maintenance Handbook linked from ISC2's page for detailed rules, and ask ISC2 about an unclear activity.

The ISC2 CC domain guide can help you identify the topic you are learning about. For foundational review, the 20 free ISC2 CC practice questions can also help you choose subjects to revisit. Neither a topic match nor completing a practice set establishes CPE eligibility by itself. The same goes for the 450 flashcards planned for launch as part of full ISC2 CC prep, which are study support.

Choose the activity first, then confirm the credit rule. Do not apply a blanket one-credit-per-hour conversion to every type of learning or assume ordinary job duties qualify.

What should you record and check in your dashboard?

Keep a simple activity record alongside your ISC2 account. The following is an editorial organizer, not an official ISC2 form or a statement of mandatory document-retention periods.

• Date and activity: When you completed it and the provider or activity title.
• Topic and CC domain: What you learned and the domain it relates to.
• Evidence: Where you saved the completion evidence or activity information.
• Credits claimed: The amount supported by the relevant activity rule.
• Portal status: What your ISC2 account currently shows and any unresolved question.

After completing an activity, compare your record with the account entry. A personal total is useful for planning, but an activity that exists only in your notes still needs attention if the account does not reflect it as expected. Check the current reporting instructions rather than assuming every provider follows the same process.

Your next action is to create the record and add one reminder to reconcile it with your account. Keep the official cycle deadline visible alongside your personal learning targets.

How does the annual fee fit the three-year cycle?

The AMF is annual even though the CPE total spans three years. ISC2's fee guidance says the AMF is due on your certification anniversary. For members who hold only CC, the amount is U.S. $50, checked November 3, 2026.

If you also hold another ISC2 certification, check the fee category that applies to your combination of credentials rather than assuming the CC-only amount applies. The ISC2 CC exam cost and fee guide explains the broader distinction between paying for the exam and maintaining certification.

Use two annual checks:

1. Confirm the amount due and complete the AMF payment by the applicable anniversary.
2. Review your CPE progress against your three-year cycle and plan the remaining learning.

Paying the fee does not complete the CPE requirement, and completing the learning does not replace payment. Check both account records before considering your annual maintenance review finished.

What if your certification is overdue or suspended?

ISC2's Certification Maintenance Policy, version 7.0, checked November 3, 2026, includes a 90-day grace period and describes suspension for unresolved noncompliance. Suspended status can last two years before termination. These provisions are reasons to act promptly, not a substitute for meeting the original requirements.

If your account is overdue, suspended, or terminated, collect the notice, your CPE record, and payment evidence, then contact ISC2 about the steps for your exact status. Ask which requirement is unresolved, which deadline applies, and what action will restore compliance. Do not assume a payment alone settles a CPE shortfall or that your own credit total resolves an account discrepancy.

For terminated certified members, the current policy describes both a specified CPE reinstatement route and reexamination. A blanket statement that everyone must retake the exam leaves out that distinction. Ask ISC2 which route applies before paying for another exam.

If ISC2 confirms reexamination is the appropriate route, use the free ISC2 CC study plan to organize that work, and full ISC2 CC prep planned for launch includes a 125-question mock exam for a longer practice session. Preparation cannot determine your membership status; resolve the reinstatement instructions with ISC2 first.

Start today with the first incomplete item: confirm your cycle dates, reconcile your CPE record, or check the annual fee. If the account already shows a problem, contact ISC2 before building a recovery plan around assumptions.