You’ve passed the exam, added the credential to your name, and maybe even updated LinkedIn. Then reality sets in. Keeping that certification isn’t a one-time win; it’s an ongoing requirement.
The problem? Between projects, deadlines, and everyday tasks, finding the time to log credits often falls to the bottom of the list. Before you know it, the cycle is almost over, and you’re left rushing to prove three years’ worth of learning in a few short weeks.
That’s why getting clear on CCSP CPE requirements early makes life easier. What follows breaks down how the requirements work and how you can stay ahead without losing momentum at your job
Understanding CCSP CPE Requirements for 2025
Keeping your Certified Cloud Security Professional (CCSP) active means staying on top of your Continuing Professional Education (CPE) credits. Let’s break down what you need to know so you don’t run into surprises at renewal time.
CPE Requirements Snapshot
Here’s a quick look at how the credits work:
- 90 credits in 3 years – required total for renewal.
- 30 credits per year suggested pace – 20 Group A, 10 Group A or B.
- Group A – activities mapped to CCSP domains like training, webinars, or research.
- Group B – broader skills such as leadership or communication.
- Reporting – credits count in 0.25-hour increments, with up to 40 per activity.
- Grace period – 90 days after your cycle to finish and submit.
- Maintenance fees – must be paid yearly to avoid suspension.
CPE 90-Credit Cycle Explained
The full cycle requires 60 Group A and 30 Group A or B. Group A covers direct domain learning, while Group B supports general skills that help you manage cloud programs better. If you hold multiple ISC2 credentials, many Group A credits apply across them, saving you effort. You can also roll over unused Group A credits earned in the last 6 months into the next cycle.
CPE 30-Per-Year Pace
Think of pacing as your safety net. Aiming for 30 credits per year keeps you from scrambling at the end. Use a mix of quick wins like webinars and more involved options like publishing or formal courses. And if you fall behind, the 90-day grace period gives you a final chance to catch up.
Implementation Timeline
If your study plan follows the current format, don’t wait; either schedule your exam before the CAT rollout or rework your prep for the adaptive approach.
Group A vs. Group B Credits (What Counts)
Not all credits are the same. Understanding how Group A and Group B differ helps you plan the right mix for your cycle.
Group A: Domain-Aligned Activities
Group A credits connect directly to the CCSP domains. These show you’re keeping up with the most relevant cloud security knowledge:
- Courses or official ISC2 training
- Domain-specific webinars or white papers
- Exam development or SME contributions
- Writing, presenting, or publishing on cloud security
- Special projects outside routine job tasks
Group A is the backbone of your cycle. You’ll need 60 of these, aligned to CCSP domains like architecture, data, platform, applications, operations, and compliance.
Group B: Professional Development Skills
Group B credits focus on general professional growth. These help round out your yearly pace and support broader roles:
- Leadership or management training
- Communication workshops
- Non-security courses or events
Up to 30 credits can come from Group B in a 3-year cycle. They’re optional for some ISC2 credentials, but CCSP members can use them strategically to balance workloads.
CPE Credit Math: 1 Hour = 1 CPE
The math is simple:
- 1 hour = 1 CPE
- Fractional entries allowed: 0.25, 0.50, 0.75
- Maximum of 40 credits per single activity
- Multi-day events use the end date for cycle placement
Many ISC2 activities even auto-post to your transcript, though updates may take up to a month. Keeping track early prevents surprises and helps you stay on pace with your CCSP CPE points.
Destination Certification With Group A Options
At Destination Certification, we provide training and study resources that qualify as Group A activities for your CCSP. Our MasterClass, study guides, domain summaries, and webinars map directly to CCSP domains and align with ISC2’s eligible formats.
These materials help you target weaker areas, reinforce your knowledge, and log hours toward renewal. With completion proof or brief learning notes, you can easily report these activities as part of your CCSP CPE cycle.
What Activities Qualify for CCSP CPEs?
Plenty of activities can count toward your credits. The trick is knowing which ones qualify and how to report them properly.
CPE Education: Courses, Webinars, Books
Education is the most common route:
- Courses, seminars, or higher-ed classes
- Industry conferences and vendor sessions
- ISC2 webinars, podcasts, and courses
- Self-directed learning: books, magazines, white papers.
Most webinars equal 1 CPE each, while Insights quizzes grant 2. Auto-posting works for official ISC2 events, but many activities require manual proof like certificates or short summaries.
CPE Contributions: Writing, Presenting, SME Work
You can earn credit by contributing, not just learning:
- Writing articles, white papers, or book chapters
- Preparing training or presenting at conferences
- Serving as an exam SME
CPE values vary, with higher caps for larger contributions, such as 20 CPEs for a book chapter. Keep records like drafts, agendas, or confirmation letters.
CPE Unique Projects: Outside-Role Work
One-time projects beyond daily duties also count. Examples include cloud forensics simulations or multi-cloud architecture deployments. Each project caps at 10 credits and requires a short description for audit purposes.
CPE Professional Development: Leadership, Communication
General skills qualify under Group B. Training in leadership, communication, project planning, or committee work all apply. Balance these against your Group A totals.
CCSP CPE Points: Fast Earners, Safe Bets
Quick wins keep you on pace. Think webinars, quizzes, and chapter meetings. Pair them with larger projects and publishing for a stronger ISC2 CCSP CPE record.
How to Track and Report CPEs (Step-by-Step)
Reporting your credits is straightforward once you know the process. Let’s walk through the steps so nothing gets missed.
1. Log In To The ISC2 CPE Portal
Start by signing in to the portal:
- Pick Group A or Group B credit type
- Select the right category (Education, Contribution, Unique Work)
- Map to CCSP domains if it’s Group A
- Enter hours in 0.25 increments and add the activity’s end date
- Attach proof such as certificates, agendas, or learning notes
Once submitted, you can track progress directly on your transcript. Entries without a domain stay as drafts until updated.
2. Note Which ISC2 Activities Auto-Post
Some activities show up automatically:
- Security Congress sessions
- Express Courses
- Selected webinars and BrightTalk events
Auto-posting can take a week to a month. If something doesn’t appear, add it manually with supporting documents. Many members keep certificates as backup just in case.
3. Keep Documentation For Possible Audit
Audits happen, so be prepared:
- Save transcripts, receipts, or course certificates
- Keep prep notes, agendas, or letters for contributions
- Hold records for at least 12 months after your cycle
If selected, you’ll have 90 days to respond. Uploading proof during submission reduces extra requests and helps keep your CCSP CPE record audit-ready.
Looking for some exam prep guidance and mentoring?
Learn about our personal mentoring
How to Earn CPEs Efficiently (Without Rework)
Earning credits doesn’t have to be stressful. With the right plan, you can build a clean record while avoiding wasted effort.
Domain-First Planning
Start by focusing on Group A. Aim for 60 credits tied to CCSP domains using courses, webinars, or contributions. If you hold other ISC2 certifications, align domains so one submission can count toward both. Rollover rules let you carry some extra Group A credits into the next cycle, which keeps your early pace strong.
Calendar Blocks That Protect Time
Set aside short sessions instead of waiting for big events:
- 15–30 minutes on a video or article = 0.25–0.5 CPE
- Insights quizzes = 2 CPEs each
- Quick domain webinars for steady progress
This routine adds up to 30 credits a year without pulling focus from daily work.
Micro-Learning In Short Bursts
Stacking smaller sessions works well. Review CCSP exam tips to target weak areas efficiently. Track fractional credits in the portal and attach a short summary or certificate. Over time, these bursts add real weight to your transcript.
Work-Project Alignment For Credits
Turn unique, outside-role assignments into credits:
- Cloud KMS rotation redesigns
- Policy baseline pilots
- SaaS tabletop exercises
Each one can earn up to 10 CPEs when documented clearly.
Duplicate-Credit Pitfalls Avoided
Double-check before submitting. Don’t re-enter auto-posted items, respect the 40-credit cap per activity, and map domains carefully. Clean tracking makes it easier to answer questions like CISSP renewal requirements while keeping your CCSP record audit-ready.
The CCSP exam is considered difficult because it covers broad real-world cloud security. The test lasts 3 hours with 125 questions and requires a 700/1000 score to pass. Domains include cloud concepts, data, platform, application, operations, and legal/risk. From October 1, 2025, it shifts to adaptive testing with 100–150 questions.
Qualify for CCSP with five years of IT experience, including three in security and one in a CCSP domain. An active CISSP waives the full requirement, and certain degrees or credentials waive one year. Candidates without full experience may pass the exam, become ISC2 Associates, and gain six years to qualify.
CCSP is not entry level. Eligibility requires five years of IT experience, including three in security and one in a CCSP domain, or an active CISSP to waive this. Passing the exam without experience grants Associate status with six years to qualify. The exam assumes cloud architecture and compliance expertise.
Group A CPEs include security webinars, authoring cybersecurity articles, teaching, or attending courses relevant to CCSP domains.
Yes, but spreading CPEs over three years is recommended to ensure continuous learning and compliance with annual minimum requirements.
You can log in to your (ISC)² member portal, upload proof of participation, and categorize activities under the appropriate domain to report your credits.
Certification in 1 Week
Study everything you need to know for the CCSP exam in a 1-week bootcamp!
Secure Your CCSP Renewal the Smart Way
Staying certified goes beyond passing the test. Meeting the renewal requirements means keeping your skills sharp and documenting them consistently. The challenge is that many professionals don’t realize how quickly a cycle passes until the deadline is close. A steady approach to credits makes renewal less stressful and ensures your transcript reflects the full scope of your growth.
At Destination Certification, we make that process easier. Our CCSP Bootcamp gives you structured, domain-focused training you can apply immediately toward Group A credits, while the CCSP MasterClass provides in-depth coverage and ongoing resources you can use for both exam prep and continuing education.
Don’t risk scrambling at the end of your cycle. Choose structured support now and turn your credits into proof of lasting cloud security expertise.
John is a major force behind the Destination Certification CISSP program's success, with over 25 years of global cybersecurity experience. He simplifies complex topics, and he utilizes innovative teaching methods that contribute to the program's industry-high exam success rates. As a leading Information Security professional in Canada, John co-authored a bestselling CISSP exam preparation guide and helped develop official CISSP curriculum materials. You can reach out to John on LinkedIn.
Rob is the driving force behind the success of the Destination Certification CISSP program, leveraging over 15 years of security, privacy, and cloud assurance expertise. As a seasoned leader, he has guided numerous companies through high-profile security breaches and managed the development of multi-year security strategies. With a passion for education, Rob has delivered hundreds of globally acclaimed CCSP, CISSP, and ISACA classes, combining entertaining delivery with profound insights for exam success. You can reach out to Rob on LinkedIn.
The easiest way to get your CCSP Certification
Learn about our CCSP MasterClass
