The most dependable free CPE credits come from the certifying bodies themselves and from government training: ISC2’s free webinars, ISACA’s webinars (free for members), the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) no-cost incident response training, and local chapter meetings. Each can count toward your certifications, but the certifying body decides. Confirm the activity fits its rules and that you’re eligible before you count it.
Every source below was checked on the provider’s own page on November 1, 2026.
1. ISC2 webinars
ISC2’s webinars page lists its live and on-demand webinars as free and says they earn CPE credits. The Certification Maintenance Handbook (PDF) sets the value for each series:
- Security Briefings (North America, EMEA, APAC), Knowledge Vault and the Membership channel: Group A, 1 CPE per 45 to 60 minutes.
- Think Tank webinars: Group B, 1 CPE per 45 to 60 minutes.
Put your member ID on BrightTALK. ISC2 webinars run on BrightTALK, and the handbook says to enter your ISC2 member ID when you first register on an ISC2 BrightTALK channel so the credits are submitted for you. For most ISC2 activities, auto-submitted credits are audit-exempt. If your ID isn’t on the account, you can submit the credit yourself and attach the viewing certificate from your BrightTALK viewing history.
Think Tank credits won’t help everyone. The handbook says Associates of ISC2 and members who hold only CC can’t use Group B credits.
2. ISACA webinars and Journal quizzes
ISACA’s webinars page says each webinar earns one CPE toward your ISACA certification. New and on-demand webinars are free for members and US$75 for nonmembers. Allow up to 7 days for the CPE to post, and watch one webinar at a time: ISACA says running several at once can stop the credit recording correctly.
ISACA’s free CPE page lists other options, including ISACA Journal quizzes at 1 CPE per passing quiz, virtual summits, volunteering and the Member Experience Leadership Series. ISACA presents these as membership benefits, and membership is paid, so “free” here means free once you’ve paid your dues.
From January 1, 2027, ISACA’s website will note whether each CPE opportunity is aligned with a certification’s exam content outline or is professional development, and professional CPE is capped at 30 hours per three-year cycle (ISACA’s 2027 changes). The Member Experience Leadership Series webinars fall in the professional group.
3. CISA incident response training
CISA’s Incident Response Training page offers no-cost training for federal, state, local, tribal and territorial government employees and contractors. It is also open to educational and critical infrastructure partners. CISA lists these credit hours:
- Awareness webinar: 1 credit hour (recordings are available on demand through FedVTE)
- Observe the Attack: 2 credit hours
- Cyber Range Training: 4 credit hours
- Cyber Range Challenge: 6 credit hours
CISA notes that acceptance may vary by certifying body. Check that you’re eligible before you register, and save the course description, since each body classifies the course its own way.
4. Local chapter meetings
Chapter meetings appear in every major program, but each body credits them differently. Cost is set by the chapter, so check before you treat a meeting as free.
- ISC2: the handbook lists ISC2 chapter meetings at 1 Group A CPE per hour.
- ISACA: the CPE policy says an ISACA chapter meeting earns at least one CPE hour regardless of length. Not every chapter posts CPE to ISACA, so keep proof of attendance.
- EC-Council: the CPE (ECE) policy lists an association or organization chapter meeting at 1 credit per meeting.
Free webinars from other providers, and CompTIA
Vendor and community webinars can count too, but only if they meet the certifying body’s rules, so each one needs a check. CompTIA gives one CEU per hour for a live webinar when at least 50% of the content relates to the exam objectives, up to a cap per certification (10 CEUs for Security+). Its Training and Higher Education page asks for an outline plus a certificate or registration email showing your name, the webinar, the date and the hours. On-demand webinars and YouTube videos count only with proof of registration or a completion certificate. Our Security+ CEU guide covers the rest of CompTIA’s rules.
Two traps: ISACA says vendor sales or marketing demos stop qualifying in 2027 (case-study presentations still count), and EC-Council doesn’t award credits for activities that are part of your job role.
Checklist: before you count a free activity
- Is it on topic for this certification (domain, exam objective or IT security content)?
- Are you eligible (member-only, government-only, region)?
- Will you get proof: a certificate, registration email or posted credit?
- Did you enter your member ID where the provider asks for it?
- Is there a cap for this activity type that you have already reached?
- Did you save the agenda or description with the certificate?
Turning free activities into a plan
On Pro and higher plans, MyCertRenewal’s renewal plan fills each gap with free, everyday activities such as live webinars, chapter meetings, free courses, reading and writing, and shows the hours it will take (how the renewal plan works). Each activity you log is checked against every certification you hold, so one free ISC2 webinar can show where else it can count (Renewal Intelligence). The certifying body still decides what it accepts. For ISC2’s Group A and Group B rules in full, see our ISC2 CPE guide.
Want to see which free activities can count toward each of your certifications? Start free with up to 2 certifications, no card needed.
Frequently asked questions
Are ISC2 webinars free CPE?
Yes. ISC2’s webinars page lists its live and on-demand webinars as free and says they earn CPE credits. Most series are Group A at 1 CPE per 45 to 60 minutes; Think Tank webinars are Group B. Add your member ID on BrightTALK so the credits are submitted for you.
Are ISACA webinars free?
Free for members. ISACA says new and on-demand webinars are free for ISACA members and US$75 for nonmembers, and each earns one CPE. Membership itself is paid.
Does CISA training count for CPE?
It can. CISA’s Incident Response Training page lists credit hours for each course type, from 1 for a webinar to 6 for a Cyber Range Challenge, and notes that acceptance may vary by certifying body. The training is for government employees and contractors and is also open to educational and critical infrastructure partners.
Do YouTube videos count for CPE or CEUs?
For CompTIA, on-demand webinars and YouTube videos count only if you can provide proof of registration or a completion certificate, and the content still has to meet the 50% exam objective rule. Other certifying bodies set their own rules, so check before you count one.
Certification rules change. Always confirm current requirements with the certifying body. MyCertRenewal is not affiliated with ISC2, ISACA, CompTIA, EC-Council or CISA.
