CISSP / RENEWAL GUIDE Keep your credential current.
Make renewal a steady habit.
Review CISSP credits, fees, and deadlines. Choose useful learning and keep the records you need.
Published by PrepForCerts · Editorial responsibility and sources
Does CISSP Expire? Yes — 3-Year CPE & AMF Requirements
Earned your ISC2 CISSP? Understanding its validity period is crucial for maintaining your CISSP credential and planning your professional development.
With a 3 years validity period, proactive planning ensures your CISSP credential remains active. Whether you're newly certified or approaching renewal, understanding your options helps you stay prepared.
Plan your next step
CISSP uses a three-year renewal cycle with 120 CPE credits and one US$135 Annual Maintenance Fee each year. At least 90 credits must be Group A; up to 30 may be Group A or B. The annual 40-credit pace is a suggestion, not a separate annual minimum. Members holding multiple ISC2 certifications pay one AMF, while credits must meet each credential’s rules.
- Validity
- 3 years
- CEUs Required
- 40
- Renewal Cost
- US$135 per year
- Renewal Method
- CPE and maintenance
Provider reference: CISSP requires a scaled score of 700/1000. It is not a 70% raw accuracy target. ISC2 does not publish a fixed number of correct answers needed to pass. Study schedules and practice percentages are planning examples, not official requirements or pass predictions. Confirm current fees and eligibility before purchase. Exam details · Maintenance policy
Yes, CISSP expires every 3 years. As the gold standard in information security certification, (ISC)² requires 120 Continuing Professional Education (CPE) credits over each 3-year cycle with a suggested pace of 40 per year, plus a US$135 Annual Maintenance Fee (AMF). The CPE requirement ensures CISSP holders stay current across all 8 domains as the threat landscape evolves.
CISSP CPE Credit Groups
(ISC)² categorizes CPE credits into two groups with specific minimums:
| Group | Description | Minimum |
|---|---|---|
| Group A | Directly related to CISSP's 8 domains (security architecture, cryptography, network security, etc.) | 90 over three years |
| Group B | General professional development (management, leadership, communication) | Optional, up to 30; remaining credits may be Group A |
| Total | Combined A + B over 3 years | 120 |
How to Earn CISSP CPE Credits
At a suggested pace of 40 CPEs per year, you need about 3.5 hours of professional development per month. Here are the most popular sources:
- (ISC)² webinars: 1 CPE per hour — free for members, several sessions per month
- (ISC)² chapter meetings: Check the provider’s eligible activity rules, credit limits, and evidence requirements. A relevant activity can earn credit only under those rules; do not assume every hour, article, exam, or normal work task earns credit.
- Security conferences: eligible credits under ISC2’s activity rules (RSA Conference, Black Hat, DEF CON, BSides)
- Vendor training: AWS, Azure, Google Cloud security certifications — 1 CPE per hour
- BrightTalk webinars: Check the provider’s eligible activity rules, credit limits, and evidence requirements. A relevant activity can earn credit only under those rules; do not assume every hour, article, exam, or normal work task earns credit.
- Writing/publishing: 5 CPEs per published article, blog post, or whitepaper
- Mentoring: 1 CPE per hour of mentoring in security topics
- Self-study: Reading books, standards, RFCs — 1 CPE per hour (must document)
- Earning another certification: eligible credits under ISC2’s activity rules for passing related exams
CISSP 8 Domains — CPE Coverage Areas
Your Group A CPEs should ideally cover all 8 CISSP domains over the 3-year cycle:
| Domain | Exam Weight |
|---|---|
| 1. Security & Risk Management | 16% |
| 2. Asset Security | 10% |
| 3. Security Architecture & Engineering | 13% |
| 4. Communication & Network Security | 13% |
| 5. Identity & Access Management | 13% |
| 6. Security Assessment & Testing | 12% |
| 7. Security Operations | 13% |
| 8. Software Development Security | 10% |
3-Year Cost of Maintaining CISSP
| Expense | Low Cost | Typical |
|---|---|---|
| AMF (US$135 × 3 years) | US$405 | US$405 |
| CPE Activities | $0 (free sources) | $500-$3,000 |
| Total | US$405 | US$905–US$3,405 |
Key benefit: The US$135 AMF covers all (ISC)² certifications. If you hold CISSP + CCSP + SSCP, you still only pay one US$135/year AMF.
What Happens If CISSP Expires?
- Suspended status: First stage — cannot use CISSP designation but can still reinstate
- Reinstatement window: Pay back AMF amounts and catch up on CPEs within the window
- Reinstatement: Check ISC2’s current rules and your account status for required CPEs, fees, and approval; no universal US$35 fee is assumed here.
- ISC2 allows a 90-day grace period to earn and submit CPEs after the cycle ends. If requirements remain unmet, suspension rules apply. Check your account and current ISC2 rules for AMF, extensions, suspension, and reinstatement.
- Experience re-verification: Must resubmit 5 years of security experience with endorsement
If your CISSP credential is no longer active, show its status clearly on a resume or application. Earlier achievement remains part of your history.
Prevention Strategy: Set reminders at 12, 6, and 3 months before your cycle ends. Collect evidence as you learn and review your account before the deadline.
CISSP vs Other Security Certifications — Maintenance Comparison
| Certification | Cycle | CPEs | Annual Fee | 3yr Total |
|---|---|---|---|---|
| CISSP | 3 years | 120 | US$135 | US$405 |
| CISM | 3 years | 120 | US$45 member / US$85 non-member | US$135 member / US$255 non-member |
| Security+ | 3 years | 50 CEUs | US$150 total per three-year CE cycle | $150 |
| CEH | 3 years | 120 ECE | $80 | $240 |
ISC2 CISSP Certification Validity Period
Your ISC2 CISSP certification is valid for 3 years under the certification cycle shown in your provider account. After this period, your certification status changes to "expired" unless you complete renewal requirements.
Key Dates to Track:
- Certification Date: The date you passed your exam (shown on your certificate)
- Expiration Date: Exactly 3 years after certification
- Renewal planning: Check your account for the exact cycle, annual reporting deadlines, and maintenance dates
What "Expired" Means: When your certification expires, you can no longer claim active certification status. You cannot use the credential on your resume as current, and verification services will show your certification as inactive. However, expiration doesn't erase your achievement—you can still mention that you "previously held" the certification.
Grace Periods and Extensions
ISC2 provides a 90-day grace period to earn and submit CPEs after the cycle ends. If requirements remain unmet, suspension rules apply. Check your account and ISC2’s current policy for AMF, suspension, and reinstatement steps; confirm the exact rules for your status. The safest approach is completing renewal before your expiration date.
How to Renew Your Certification
Keep records of eligible activities and report credits through the provider’s portal. Check credit categories, limits, and evidence requirements before counting training, conferences, publishing, or other certifications.
Complete Cost of Renewal
The total cost of renewing ISC2 CISSP includes both direct fees and the value of time invested in continuing education:
Direct Costs:
- Renewal/maintenance fee: US$135 Annual Maintenance Fee (AMF)
- Optional training courses: $100-$500+ depending on choices
Time investment: Spread eligible learning across the full cycle. Credit awards depend on the activity and provider rules; do not budget only 40–60 hours for a 120-credit requirement. Plan regular sessions, keep evidence, and review your reported total each quarter.
Cost-Effective Strategies: 1. Many activities you already do count toward credits (reading, attending meetings, on-the-job training) 2. Free webinars and online resources often qualify for credits 3. Contributing to the community (blogging, mentoring, speaking) earns credits while building your reputation
Ways to Earn CEUs/Continuing Education
ISC2 accepts a variety of activities for continuing education credits:
Training and Education:
- Complete online courses or in-person training
- Attend conferences, seminars, or workshops
- Participate in webinars (live or recorded)
- Earn higher-level or related certifications
Professional Activities:
- Publish articles, blog posts, or white papers
- Present at conferences or user groups
- Teach courses or training sessions
- Mentor other professionals
Self-Study:
- Read industry books, magazines, or publications
- Complete vendor-provided learning paths
- Participate in study groups
Work Experience:
- Some on-the-job learning activities qualify
- Projects that expand your skills may count
- Leadership and management responsibilities
Track all activities throughout the year rather than scrambling before expiration. Most vendors provide online portals where you log activities and track progress toward requirements.
More study tips
ISC2 exams emphasize risk management and governance. Understand the "why" behind security controls.
Choose learning that fits your certification domains. Another credential does not automatically renew an ISC2 certification; report eligible credits and pay the AMF.
Focus on understanding frameworks and policies, not just technical solutions.
Set calendar reminders at 12, 6, and 3 months before expiration to track your CISSP renewal progress.
Log CEU activities immediately after completing them—don't rely on memory at renewal time.
Consider earning a higher-level certification to automatically renew CISSP.
Mistakes to check
Waiting until the last month before expiration to start accumulating CEUs.
Not tracking activities throughout the certification cycle and forgetting eligible credits.
Assuming all training automatically qualifies for CEUs without checking vendor requirements.
Letting the certification expire and then needing to retake the exam.
Not considering higher-level certifications that would automatically renew current credentials.
Failing to budget for renewal costs and being surprised by fees.
Prepare for Your ISC2 CISSP Journey
Whether you're pursuing initial certification or preparing for renewal, practice questions help you stay sharp.
Frequently Asked Questions
Does ISC2 CISSP certification expire?
Yes, ISC2 CISSP certification expires every 3 years. You must complete renewal requirements before expiration to maintain active certification status.
How long is ISC2 CISSP certification valid?
ISC2 CISSP certification is valid for 3 years from your certification date. After this period, you must renew to maintain active status.
How much does ISC2 CISSP renewal cost?
CISSP uses a three-year renewal cycle with 120 CPE credits and one US$135 Annual Maintenance Fee each year. At least 90 credits must be Group A; up to 30 may be Group A or B. The annual 40-credit pace is a suggestion, not a separate annual minimum. Members holding multiple ISC2 certifications pay one AMF, while credits must meet each credential’s rules.
Optional training, conferences, and study materials can add to the fee. Eligible free activities can reduce the learning cost; check the provider’s credit rules.
How many CEUs do I need for ISC2 CISSP renewal?
CISSP uses a three-year renewal cycle with 120 CPE credits and one US$135 Annual Maintenance Fee each year. At least 90 credits must be Group A; up to 30 may be Group A or B. The annual 40-credit pace is a suggestion, not a separate annual minimum. Members holding multiple ISC2 certifications pay one AMF, while credits must meet each credential’s rules.
Eligible activities can include relevant training, professional education, and other approved methods. Check activity categories, limits, and supporting records before reporting credits.
Can I renew CISSP by retaking the exam?
Active or suspended ISC2 members cannot retake an already-passed exam to earn CPE credits. Meet the CPE and AMF requirements for your current credential.
What happens if my ISC2 CISSP certification expires?
ISC2 provides a 90-day grace period to earn and submit CPEs after the cycle ends. If requirements remain unmet, suspension rules apply. Check your account and ISC2’s current policy for AMF, suspension, and reinstatement steps; confirm the exact rules for your status.
Can I renew ISC2 CISSP early?
Yes, you can renew ISC2 CISSP at any time during your certification cycle. Early renewal typically extends your certification by 3 years from your original expiration date (not from when you renewed).
What activities count toward ISC2 CISSP CEUs?
Earn CPEs through training, presentations, publishing, or professional activities. Most learning activities, professional contributions, and career development efforts qualify for continuing education credits.
Does CISSP expire?
Yes. CISSP expires every 3 years. You need 120 CPE credits (40/year suggested) and must pay the US$135 Annual Maintenance Fee each year.
How many CPE credits does CISSP require?
CISSP requires 120 CPE credits over three years, including at least 90 Group A. Up to 30 can be Group A or B. A pace of 40 credits per year is suggested, not an annual minimum.
What is the CISSP Annual Maintenance Fee?
US$135 per year. This single AMF covers all (ISC)² certifications you hold (CISSP, CCSP, SSCP, etc.). You don't pay separate fees per cert.
What happens if CISSP expires?
ISC2 allows a 90-day grace period to earn and submit CPEs after the cycle ends. If requirements remain unmet, suspension rules apply. Check your account and current ISC2 rules for AMF, extensions, suspension, and reinstatement.
Can I earn CISSP CPEs for free?
Yes. (ISC)² webinars, chapter meetings, BrightTalk sessions, self-study, volunteering, mentoring, and writing articles all provide free CPEs.
Does (ISC)² audit CPE submissions?
Yes, random audits happen annually. Keep documentation (certificates, receipts, records) for at least 1 year beyond your cycle. Non-compliance can result in certification revocation.
Prepare for CISSP Certification
Practice with adaptive CISSP questions covering all 8 domains.
Start Free CISSP Practice Test →Related CISSP resources
Practice and exam format
- Free ISC2 CISSP Practice Test
Test your knowledge with realistic questions.
- How Many Questions on CISSP Exam?
CISSP exam structure and question count.
How many questions
Study and requirements
- ISC2 Certification Path
Explore all ISC2 certifications.
- Certification Overview
Complete guide and requirements
- How to Pass
Study tips and exam strategies
- CompTIA A+ Exam Objectives Explained (2026 Domain Guide)
Exam objectives
- CompTIA Network+ Exam Objectives & Domains (2026)
Exam objectives
- CISSP Without Experience: 2026 Guide
Without experience
- Failed CISSP? Retake Policy & Tips (2026)
If you fail
- CISSP Study Guide