At least 20 CPE hours each year and 120 CPE hours over a 3-year reporting period, plus current maintenance fee, audit and ethics obligations.
Calculate your remaining requirement
Use your issuer portal as the source for the completed amount and cycle dates, then use this calculator to turn the current requirement into a personal gap.
Meet both the annual floor and the three-year total
Major ISACA credentials such as CISA, CISM and CRISC currently require at least 20 CPE hours each year and 120 over the three-year reporting period. A strong first year does not erase a later annual minimum.
Maintenance is more than CPE arithmetic
ISACA also requires the applicable annual maintenance fee, compliance with the Code of Professional Ethics, and participation in an audit if selected. Keep supporting documentation for reported activities.
Separate the 2027 policy from current reporting
ISACA has published changes effective January 1, 2027. The site labels those future-policy tools explicitly so users do not apply a future alignment rule to an earlier reporting period.
ISACA certification maintenance pages state a 20-CPE annual minimum and 120 CPEs over three years for major credentials such as CISA, CISM and CRISC.
Open official/current source ↗