CISM and CISA each require at least 20 CPE hours every year and 120 over three years, plus an annual maintenance fee. ISACA’s yearly calendar, how hours can count toward both, and what an audit asks for.

CRISC holders need at least 20 CPE hours a year and 120 over three years. Here is what counts as CRISC-aligned, how ISACA calculates an hour, and what changes on January 1, 2027.

CySA+ needs 60 CEUs and SecurityX (formerly CASP+) needs 75 over the three-year cycle. Here are the per-activity caps, which certifications renew together, and a plan that fits inside the limits.

Security+ needs 50 CEUs per three-year cycle, but webinars and conferences are capped at 10 each. Here are CompTIA’s caps, the proof it asks for and a plan that adds up.

To renew CEH you need 120 ECE credits within your three-year window, registered in EC-Council’s Aspen portal, and a paid annual CE fee. Here is how the credit values add up, with a sample plan.