CISA / RENEWAL GUIDE Keep your credential current.
Make renewal a steady habit.
Review CISA credits, fees, and deadlines. Choose useful learning and keep the records you need.
Published by PrepForCerts · Editorial responsibility and sources
Does CISA Expire? Yes — 3-Year CPE & Fee Requirements
Your ISACA CISA certification represents significant investment. Understanding its validity period ensures your CISA credential remains active and valuable.
With a 3 years validity period, proactive planning ensures your CISA credential remains active. Whether you're newly certified or approaching renewal, understanding your options helps you stay prepared.
Plan your next step
CISA requires at least 20 CPE hours each year and 120 over three years. Annual maintenance is US$45 for ISACA members or US$85 for non-members, separate from membership dues. Report relevant activities, keep evidence, comply with audits if selected, and follow professional ethics.
- Validity
- 3 years
- CEUs Required
- 20
- Renewal Cost
- US$45 member / US$85 non-member
- Renewal Method
- CPE and maintenance
Provider reference: CISA requires a scaled score of 450 on the 200–800 scale. This is not 56.25% raw accuracy, and no fixed number of questions you can miss is published. Study schedules and practice percentages are planning examples, not official requirements or pass predictions. Confirm current fees and eligibility before purchase. Exam details · Maintenance policy
Yes, the Certified Information Systems Auditor (CISA) expires every 3 years. ISACA requires 120 Continuing Professional Education (CPE) hours over each 3-year cycle with a minimum of 20 CPE hours per year, plus an annual maintenance fee of $45 (ISACA members) or $85 (non-members). CISA is one of the most respected IT audit certifications globally, and maintaining it demonstrates ongoing commitment to the profession.
CISA Renewal Requirements Breakdown
ISACA's Continuing Professional Education (CPE) policy ensures CISA holders stay current with evolving audit standards, control frameworks, and information security practices:
- 120 CPE hours total over the 3-year reporting cycle
- Minimum 20 CPE hours per year — you cannot front-load all 120 into year one
- 1 CPE = 1 hour of learning or professional activity (50-minute contact hour)
- CPE topics must relate to IS auditing, control, assurance, security, governance, or risk management
- Annual maintenance fee: $45 (ISACA members) or $85 (non-members), due each January
- CPE reporting: Log activities through ISACA's online portal throughout the year
How to Earn CISA CPE Hours
At 40 CPE hours per year average, you need roughly 3-4 hours of professional development per month. Here are the most common sources:
| CPE Source | Hours Available | Cost |
|---|---|---|
| ISACA webinars | Check eligible award and limits | Free (members) |
| ISACA chapter meetings | Check eligible award and limits | Varies; check event or course |
| ISACA conferences (NACACS, GRC) | Check eligible award and limits | Varies; check event or course |
| Self-study (books, journals) | Check eligible award and limits | Varies; check event or course |
| Teaching/lecturing | Check eligible award and limits | Free |
| Publishing articles | Check eligible award and limits | Free |
| Earning another certification | Check eligible award and limits | Varies |
CISA vs Other ISACA Certifications — Maintenance Comparison
| Certification | CPEs (3yr) | Annual Min | Annual Fee (Member) |
|---|---|---|---|
| CISA | 120 | 20 | $45 |
| CISM | 120 | 20 | $45 |
| CRISC | 120 | 20 | $45 |
| CGEIT | 120 | 20 | $45 |
Relevant CPE activity may count toward more than one ISACA credential only if it meets each credential’s job-practice requirements. Record it for each applicable certification. Maintenance fees remain separate; the third and later eligible certifications have the published fee discount.
3-Year Cost of Maintaining CISA
| Expense | ISACA Member | Non-Member |
|---|---|---|
| Maintenance Fee (3 years) | $135 | $255 |
| ISACA Membership (3 years) | $405 | $0 |
| CPE Activities (free sources) | $0 | $0 |
| Total (minimum) | $540 | $255 |
ISACA's CPE Audit Process
ISACA randomly selects certification holders for CPE audits each year. If selected, you must provide documentation proving your claimed CPE hours. Here's what you need to know:
- Retain documentation for at least 1 year after your reporting cycle ends
- Acceptable proof: Certificates of completion, conference badges, published articles, course transcripts
- Response deadline: Typically 30 days from the audit notification
- Non-compliance: Failure to provide documentation can result in certification suspension or revocation
ISACA CISA Certification Validity Period
Your ISACA CISA certification is valid for 3 years under the certification cycle shown in your provider account. After this period, your certification status changes to "expired" unless you complete renewal requirements.
Key Dates to Track:
- Certification Date: The date you passed your exam (shown on your certificate)
- Expiration Date: Exactly 3 years after certification
- Renewal planning: Check your account for the exact cycle, annual reporting deadlines, and maintenance dates
What "Expired" Means: When your certification expires, you can no longer claim active certification status. You cannot use the credential on your resume as current, and verification services will show your certification as inactive. However, expiration doesn't erase your achievement—you can still mention that you "previously held" the certification.
Grace Periods and Extensions
Failure to meet maintenance requirements can revoke the credential. Contact ISACA about an appeal and provide evidence. Approved reinstatement requires outstanding maintenance fees plus the published US$50 reinstatement fee; an unsuccessful appeal requires the current exam and application process. The safest approach is completing renewal before your expiration date.
How to Renew Your Certification
Keep records of eligible activities and report credits through the provider’s portal. Check credit categories, limits, and evidence requirements before counting training, conferences, publishing, or other certifications.
Complete Cost of Renewal
The total cost of renewing ISACA CISA includes both direct fees and the value of time invested in continuing education:
Direct Costs:
- Renewal/maintenance fee: $45-$85 annual maintenance fee
- Optional training courses: $100-$500+ depending on choices
Time investment: Spread eligible learning across the full cycle. Credit awards depend on the activity and provider rules; do not budget only 40–60 hours for a 120-credit requirement. Plan regular sessions, keep evidence, and review your reported total each quarter.
Cost-Effective Strategies: 1. Many activities you already do count toward credits (reading, attending meetings, on-the-job training) 2. Free webinars and online resources often qualify for credits 3. Contributing to the community (blogging, mentoring, speaking) earns credits while building your reputation
Ways to Earn CEUs/Continuing Education
ISACA accepts a variety of activities for continuing education credits:
Training and Education:
- Complete online courses or in-person training
- Attend conferences, seminars, or workshops
- Participate in webinars (live or recorded)
- Earn higher-level or related certifications
Professional Activities:
- Publish articles, blog posts, or white papers
- Present at conferences or user groups
- Teach courses or training sessions
- Mentor other professionals
Self-Study:
- Read industry books, magazines, or publications
- Complete vendor-provided learning paths
- Participate in study groups
Work Experience:
- Some on-the-job learning activities qualify
- Projects that expand your skills may count
- Leadership and management responsibilities
Track all activities throughout the year rather than scrambling before expiration. Most vendors provide online portals where you log activities and track progress toward requirements.
What Happens If Your Certification Expires
If your CISA credential is no longer active, show its status clearly on a resume or application. Earlier achievement remains part of your history.
Prevention Strategy: Set reminders at 12, 6, and 3 months before your cycle ends. Collect evidence as you learn and review your account before the deadline.
More study tips
ISACA questions often have multiple "correct" answers—choose the BEST or FIRST action.
Review ISACA's glossary to ensure you understand terms exactly as ISACA defines them.
ISACA exams test policies and procedures, not just technical controls.
Set calendar reminders at 12, 6, and 3 months before expiration to track your CISA renewal progress.
Log CEU activities immediately after completing them—don't rely on memory at renewal time.
Consider earning a higher-level certification to automatically renew CISA.
Mistakes to check
Waiting until the last month before expiration to start accumulating CEUs.
Not tracking activities throughout the certification cycle and forgetting eligible credits.
Assuming all training automatically qualifies for CEUs without checking vendor requirements.
Letting the certification expire and then needing to retake the exam.
Not considering higher-level certifications that would automatically renew current credentials.
Failing to budget for renewal costs and being surprised by fees.
Prepare for Your ISACA CISA Journey
Whether you're pursuing initial certification or preparing for renewal, practice questions help you stay sharp.
Frequently Asked Questions
Does ISACA CISA certification expire?
Yes, ISACA CISA certification expires every 3 years. You must complete renewal requirements before expiration to maintain active certification status.
How long is ISACA CISA certification valid?
ISACA CISA certification is valid for 3 years from your certification date. After this period, you must renew to maintain active status.
How much does ISACA CISA renewal cost?
CISA requires at least 20 CPE hours each year and 120 over three years. Annual maintenance is US$45 for ISACA members or US$85 for non-members, separate from membership dues. Report relevant activities, keep evidence, comply with audits if selected, and follow professional ethics.
Optional training, conferences, and study materials can add to the fee. Eligible free activities can reduce the learning cost; check the provider’s credit rules.
How many CEUs do I need for ISACA CISA renewal?
CISA requires at least 20 CPE hours each year and 120 over three years. Annual maintenance is US$45 for ISACA members or US$85 for non-members, separate from membership dues. Report relevant activities, keep evidence, comply with audits if selected, and follow professional ethics.
Eligible activities can include relevant training, professional education, and other approved methods. Check activity categories, limits, and supporting records before reporting credits.
Can I renew CISA by retaking the exam?
Do not assume another certification or retaking an exam automatically renews this credential. Meet its CPE, annual fee, and reporting requirements.
What happens if my ISACA CISA certification expires?
Failure to meet maintenance requirements can revoke the credential. Contact ISACA about an appeal and provide evidence. Approved reinstatement requires outstanding maintenance fees plus the published US$50 reinstatement fee; an unsuccessful appeal requires the current exam and application process.
Can I renew ISACA CISA early?
Yes, you can renew ISACA CISA at any time during your certification cycle. Early renewal typically extends your certification by 3 years from your original expiration date (not from when you renewed).
What activities count toward ISACA CISA CEUs?
Self-study, training, publishing, mentoring, or speaking engagements. Most learning activities, professional contributions, and career development efforts qualify for continuing education credits.
Does CISA expire?
Yes. CISA expires on a 3-year cycle. You must earn 120 CPE hours (minimum 20/year) and pay the annual maintenance fee ($45 members, $85 non-members).
How many CPE hours does CISA require?
120 CPE hours over 3 years with a minimum of 20 per year. Topics must relate to IS auditing, control, assurance, security, or governance.
What is the CISA maintenance fee?
$45/year for ISACA members, $85/year for non-members. This is separate from ISACA membership dues ($135/year).
Can CISA CPEs count toward CISM or CRISC?
CPE activities may count toward more than one ISACA credential only when they meet each credential’s subject and evidence requirements. Report them for each applicable credential; fees remain separate.
What happens if CISA expires?
ISACA can revoke the credential for unmet maintenance requirements. Contact ISACA to appeal with evidence. An approved appeal requires outstanding maintenance fees and a US$50 reinstatement fee. If the appeal is denied, follow the current exam and certification application process.
Does ISACA audit CISA CPE claims?
Yes, ISACA conducts random CPE audits annually. Keep certificates of completion, conference records, and other documentation for at least 1 year after your cycle ends.
Prepare for CISA Certification
Practice with adaptive CISA questions covering all 5 domains.
Start Free CISA Practice Test →Related CISA resources
Practice and exam format
- Free ISACA CISA Practice Test
Test your knowledge with realistic questions.
Complete guide and requirements
- How Many Questions on CISA Exam?
CISA exam structure and question count.
How many questions
Study and requirements
- ISACA Certification Path
Explore all ISACA certifications.
- How to Pass
Study tips and exam strategies
- CompTIA A+ Exam Objectives Explained (2026 Domain Guide)
Exam objectives
- CompTIA Network+ Exam Objectives & Domains (2026)
Exam objectives
Renewal and next steps
- Does CISM Expire? 2026 Renewal Guide
Does it expire?
- Does CRISC Expire? 2026 Renewal Guide
Does it expire?
- Does A+ Expire? 2026 Renewal Guide
Does it expire?
- Does Security+ Expire? 2026 Renewal Guide
Does it expire?
- Does Network+ Expire? 2026 Renewal Guide
Does it expire?
- CISA vs CISM