Cybersecurity certifications like the CISSP, CCSP, CISA, and CISM require ongoing continuing professional education (CPE) credits to maintain. A CISSP holder, for example, needs 120 CPE credits every three years. Webinars are one of the fastest, most accessible ways to earn those credits, and many are free. Here's how to find them.
What are CPE credits and why do they matter?
CPE credits represent hours spent on professional development activities. Certifying bodies like ISC2, ISACA, and CompTIA require them to make sure certified professionals stay current on evolving threats, tools, and regulatory changes. The general rule is straightforward: one hour of activity equals one CPE credit.
The 2025 ISC2 Cybersecurity Workforce Study, which surveyed over 16,000 professionals, found that 95% of respondents reported at least one skills gap, and 59% cited critical or significant skill needs — a 15% jump from the previous year. Keeping your skills sharp through CPE activities directly addresses the widening gap between what organizations need and what their teams can deliver.
Different certifications have different CPE requirements. CISSP holders need 120 credits per three-year cycle, while CCSP holders need 90. ISACA certifications like the CISA and CISM require a minimum of 20 CPE hours annually and 120 over three years. Falling behind on credits can lead to certification suspension or, in worst cases, decertification.
Where to find CPE credit webinars
Several organizations offer webinars that qualify for CPE credit. Some are free, some require membership, and some charge per session. Here are the most reliable sources.
Certifying body webinars
Start with the organizations that issue your certification. ISC2 and ISACA both host regular webinar programs directly tied to their CPE systems.
ISC2's professional development portal includes live and on-demand webinars covering topics like cloud security, AI-driven threats, risk management, and compliance. Credits from ISC2 activities are submitted automatically to your CPE portal, which saves time on documentation.
ISACA's webinar library offers sessions on IT audit, cybersecurity, governance, and privacy. Members get free access to all webinars, each worth one CPE credit. According to ISACA, members can earn more than 70 CPE credits per year through webinars alone. Non-members pay $75 per session.
Vendor-hosted webinars
Many cybersecurity vendors host webinars on topics that fall squarely within certification domains. Sessions on phishing prevention, data protection, email security, and compliance map to credit categories for ISC2 and ISACA certifications.
Paubox's webinar program, for example, covers email security and compliance topics and provides attendees with a Certificate of Attendance that can be self-reported to ISC2, ISACA, CompTIA, or other certifying bodies. Sessions are available both live and on-demand, and registration is straightforward.
When evaluating vendor webinars, look for sessions that focus on educational content rather than product demos. A webinar on phishing prevention techniques will count for CPE credit. A walkthrough of a vendor's dashboard probably won't.
Industry publications and community events
Infosecurity Magazine hosts cybersecurity webinars that qualify for CPE credits toward CISSP, SSCP, and ISACA accreditations. BrightTALK is another platform that aggregates security webinars from multiple providers, and many sessions are free.
ISACA chapter events are another overlooked source. Local chapters frequently host presentations and panel discussions that qualify for CPE credit and give you a chance to connect with other professionals in your area.
How to evaluate whether a webinar qualifies for CPE credit
Not every webinar automatically qualifies. Before registering, check the following.
The content should align with the domains of your certification. For CISSP holders, that means topics related to security and risk management, asset security, security architecture, communications and network security, identity and access management, security assessment and testing, security operations, or software development security. If you can map the webinar topic to at least one domain, it likely qualifies as a Group A credit.
Verify the attendance tracking method. Most certifying bodies require proof of attendance. Reputable webinar providers issue certificates that include the session title, date, duration, and your name. Paubox, for example, sends personalized Certificates of Attendance via email to qualified attendees.
Keep documentation. ISC2 performs random audits of submitted CPE activities, and you'll need to provide proof of attendance if selected. Save your certificates and any confirmation emails for at least the duration of your certification cycle.
Group A vs. Group B: where webinars fit
ISC2 divides CPE credits into two categories. Group A credits relate directly to the technical domains of your certification. Group B credits cover broader professional development like leadership, communication, or management skills.
Most cybersecurity webinars fall under Group A. A session on healthcare email security, for instance, maps to the security operations and communications security domains. A session on AI governance could qualify under security and risk management.
For CISSP holders, at least 90 of the 120 required credits must come from Group A. The remaining 30 can come from either group. Planning your CPE activities around Group A topics first makes sure you meet the stricter requirement without scrambling at the end of your cycle.
Paubox maintains a library of live and on-demand webinars on email security and compliance topics. Attending these sessions earns you a Certificate of Attendance that supports self-reported CPE credits for ISC2, ISACA, and CompTIA certifications.
FAQs
Do I need pre-approved webinars for CPE credit?
Not necessarily. ISC2 and ISACA both accept self-reported CPE credits for relevant educational activities. You submit the certificate to your organization, and they determine credit acceptance based on content relevance. Pre-approved activities do streamline the process, but self-reported credits from reputable sources are widely accepted.
Can I earn CPE credits from recorded webinars?
It depends on the provider. Some organizations, like Paubox, offer CPE-eligible on-demand recordings with attendance tracking. Others only award credits for live sessions. Check the provider's CPE policy before relying on a recording.
How many CPE credits can I earn from webinars?
There's no cap on webinar-based credits for most certifications. ISC2 does cap individual activities at 40 credits each, but a standard one-hour webinar earns one credit. Paubox webinars are eligible for 1 self-reported CPE credit per webinar.
Subscribe to Paubox Weekly
Every Friday we bring you the most important news from Paubox. Our aim is to make you smarter, faster.
