How to Renew Security+ and Track Your CEUs

Security+ certifications last three years from the date you pass the exam, and letting one lapse means retaking SY0-701 (or whatever the current version is by then) from scratch. CompTIA's Continuing Education (CE) program exists so you don't have to do that. Here's how the renewal math actually works and how to avoid scrambling in month 35.

The 50-CEU target

Security+ requires 50 Continuing Education Units over your three-year cycle. CEUs aren't a mystery point system, most activities map to a fixed value CompTIA publishes in the CE Activities table on their site. Passing a higher-level exam like CySA+, PenTest+, or CASP+/SecurityX gives you 100% renewal credit instantly, no CEUs needed. Everything else, you accumulate.

Common CEU sources and rough values:

• Attending a security conference or vendor training session: typically 1 CEU per contact hour, capped
• Completing another vendor certification exam (even ones outside CompTIA): often a flat 10-30 CEUs depending on level
• Publishing security-relevant content: blog posts, whitepapers, or teaching a course can earn CEUs, but you need documentation
• Academic coursework: college courses in a relevant subject earn CEUs per credit hour
• Volunteering in a security-related professional capacity
• Reading vendor-neutral technical content and passing an associated quiz through CompTIA's own CertMaster or partner programs

CompTIA also lets you log up to a certain number of CEUs from self-paced study activities per cycle, but they're capped lower than instructor-led or exam-based activities. Check the current CE Activities chart in your CertMetrics account before assuming an activity qualifies. The list changes.

Setting up your CertMetrics account

Everything routes through CompTIA's CertMetrics portal (certmetrics.com/comptia). Create the account the same week you pass your exam, don't wait. You'll need it to:

• View your certification's exact expiration date
• Submit CE activities as you complete them
• Track your running CEU total against the 50 needed
• Pay the CE renewal fee once you hit 50 (this is separate from any exam fee, and the amount varies by certification tier)

Log activities as you do them, not in a batch at the end. If you wait three years to submit conference attendance from year one, you may not have the certificate of completion anymore, and CompTIA does audit submissions.

A realistic three-year cadence

Don't try to earn 50 CEUs in the last quarter before expiration. Spread it out:

Year 1: Join (ISC)², ISSA, or a local security meetup group if you haven't. Attending 4-5 meetups or a single regional conference like a BSides event can net 10-15 CEUs depending on hours logged. Start a habit of saving PDFs of attendance certificates immediately.

Year 2: This is a good year to take an intermediate cert exam if you're already planning one, like Network+ (if you don't have it) or a cloud provider associate cert. A passed exam often clears 20-30 CEUs in one submission.

Year 3: Fill remaining gaps with self-paced study or writing. If you're short 10-15 CEUs going into the final six months, CompTIA's own CertMaster CE content or documented independent study (with quiz completion) is the fastest legitimate path. Don't fabricate hours, CompTIA can and does request documentation during audits.

What actually counts as documentation

For each submitted activity, keep:

• A certificate of completion or attendance letter with your name, the activity name, date, and duration
• For self-study, the quiz completion confirmation or transcript CompTIA/partner platforms generate
• For work experience-based activities (less common for Security+ specifically), a supervisor letter on company letterhead

CompTIA reserves the right to audit any submission for up to a year after acceptance. Sloppy or vague documentation (