Certification renewal and CPE credits follow different rules at every major vendor: some count the learning you already do, while others make you prove the skill again on a fixed date. The cheapest path depends on which badges you hold and how their clocks overlap. CompTIA renews Security+ with 50 CEUs of documented activity, ISC2 bills CISSP holders for 120 CPE credits and a yearly fee, Microsoft replaced the whole cycle with a free annual assessment, and AWS extends a credential by 3 more years when you pass the current exam. Here is how each system works and where the money actually goes.
How CompTIA Renewal Works
CompTIA measures renewal in Continuing Education Units, and the target varies sharply by certification: Security+ sits at 50 CEUs, A+ at 20, Network+ at 30, Linux+ at 50, PenTest+ and CySA+ at 60, and SecurityX at 75. Every activity must be completed inside the three-year renewal cycle, and the relevance bar is strict: at least 50% of a course’s content must map to the exam objectives of the certification being renewed before it counts. CompTIA reserves the final say on whether training qualifies and uses an unbiased third party in its review, so running a course through its CEU assessment tool before paying saves rework.
Credit also comes from outside the classroom. CompTIA awards CEUs for passing other vendors’ certifications, completing training or higher education, participating in industry activities, publishing relevant articles or books, and documented related work experience. Documentation is required in each of those categories. The cross-certification tables are generous: most major security credentials — CEH, CISA, CISM, CISSP and SSCP among them — map to the full 50 CEUs needed for Security+ renewal, while Microsoft’s Security Operations Analyst Associate maps to only 38.
How ISC2 Counts CPEs
ISC2 runs a longer and stricter ledger for its flagship credential: earning 120 CPE credits over three years and paying an annual maintenance fee of $135 per year keep the CISSP active. There is a discount for portfolio builders — if you hold another ISC2 certification, no additional maintenance fee is required, so one fee covers the whole account. CPE activities must fall inside your three-year cycle and are submitted through the ISC2 member portal. If you are planning your first ISC2 credential, the domain weights in our ISC2 CC prep guide line up with the training hours you can later claim as CPEs.
Microsoft and AWS Renew Differently
Microsoft scrapped the credit ledger entirely for role-based certifications. They renew annually at no cost: the renewal assessment opens during a six-month eligibility window on Microsoft Learn, is shorter than the original exam, unproctored and open book, and passing it extends the credential one year from the expiration date. You can take the assessment as many times as you need before expiry, and Fundamentals certifications do not expire at all. The only real risk is calendar discipline — miss the window and you are back to the full exam.
AWS keeps recertification closest to the original exam experience. Renewing by exam adds 3 more years of validity, and the certification must be active to renew — AWS provides a 50% discount voucher in your certification account to soften the retake. The alternative is maintenance: an active AWS Skill Builder subscription extends an active certification by one year, an option available when the credential is within 90 days of expiration. If your route is a fresh pass at Solutions Architect Associate, timed drills like our Solutions Architect Associate practice test are cheap insurance against paying for the exam twice.
Choosing Your Cheapest Path
| Vendor | Cycle | What renews it | Typical cost |
|---|---|---|---|
| CompTIA | 3 years | CEUs — 50 for Security+ | Program fee plus activity costs |
| ISC2 | 3 years | 120 CPEs | $135 per year |
| Microsoft | 1 year | Free online assessment | $0 |
| AWS | 3 years | Latest exam, or Skill Builder maintenance | 50% exam voucher or subscription |
The systems overlap in ways you can exploit. A single senior exam can renew two credentials at once: under CompTIA’s tables, passing CISSP banks the full 50 CEUs for Security+, so one study campaign protects both badges. Microsoft renewals are free but grant almost nothing toward CompTIA’s ledger — the Security Operations Analyst Associate is worth just 38 CEUs there — so a Microsoft path is never a CompTIA renewal strategy. ISC2 is the only vendor charging a recurring fee regardless of activity, which makes its multi-cert fee waiver the deciding factor once you hold two of its credentials.
A 12-Month Renewal Checklist
- Put every credential’s expiry date in one calendar with two alerts: six months out and 90 days out.
- Log CEUs and CPEs the same week you earn them; documentation is required for the main CompTIA categories and ISC2 reviews submissions through its portal.
- Before booking any new exam, check whether it renews another certification you hold — CISSP, CISA, CISM and CEH all bank 50 CEUs at CompTIA.
- Take Microsoft renewal assessments as soon as the window opens; they are free and open book, with unlimited attempts before expiry.
- For AWS, decide early between exam renewal for 3 more years and Skill Builder maintenance for one.
- Pre-verify paid training with CompTIA’s CEU assessment tool so the 50% relevance rule does not burn the credits.