ISC2 currently requires CISSP holders to earn 120 CPE credits across a three-year cycle, with 90 in Group A and another 30 that may be Group A or Group B under the current maintenance policy.
Use the category structure, not only 120
The current table shows a suggested pace of 40 CPEs per year for CISSP, made up of 30 Group A and 10 Group A or B. The three-year total is what is required; the annual figure is presented as a suggested pace.
There is a 90-day grace period
ISC2 currently allows CPEs to be earned and submitted no later than 90 days after the certification expiration date. Missing the requirement after that period can place the certification in suspended status.
Maintenance also includes the AMF
ISC2 maintenance requires both the CPE requirement and the annual maintenance fee. For most certified members other than CC-only holders, the current AMF listed in the policy is US $135 per year.
Sources and verification
CPE maintenance framework for ISC2 credentials; credential-specific totals should be verified before reporting.
Open official/current source ↗