CySA+CompTIA certification

How CySA+ renewal actually works

CEUs are tracked in the CompTIA CE Portal. Each activity needs date, provider, description, and either a completion certificate or a verifiable URL. CompTIA's published audit rate is 2.5% per cycle — same rate as Security+ — and they ask for documentation within 30 days of selection.

The CE fee is separate from CEUs. You can be fully CEU-compliant and still lapse on the $50/year fee alone. CompTIA bills it annually through the portal; set up the reminder before year-end.

Activity caps that catch CySA+ candidates

Five categories with hard limits per cycle: (1) Higher-tier CompTIA certs (CASP+, PenTest+, CSAE, CNVP) — uncapped, each retires the full CEU requirement; (2) Education courses with assessment — 1 CEU/hour, no overall cap; (3) Activities (publishing, teaching, mentoring) — capped at 21 CEUs/cycle for CySA+ (higher than Security+'s 18); (4) Industry conferences + webinars — capped at 27 CEUs/cycle (vs 24 for Security+); (5) Work experience in cyber-analyst roles — capped at 21 CEUs/cycle.

The conference cap is the most generous of CompTIA's mid-tier certs. A heavy conference year (BlackHat + DEF CON + RSA) can comfortably hit the cap in 4 days of attendance. Useful for analysts whose company budgets conference travel.

1 CEU = 1 hour of qualifying activity, rounded to nearest 0.25. Lunch breaks, networking, and expo-floor time don't count — only sessions with substantive content. CompTIA's audit asks for the agenda + session description, not just attendance proof.

The CASP+ / PenTest+ stack-renew option

CompTIA's stack-renew rule means a single higher exam closes out the CEU requirement entirely. CySA+ is renewed by CASP+, PenTest+, CompTIA Security Analytics Expert (CSAE), or Network Vulnerability Assessment Professional (CNVP).

Of these, PenTest+ is the most-aligned natural next step for CySA+ holders — the offensive complement to the defensive analyst role. The exam costs $404 vs the cumulative CE fee of $150 over 3 years. If you'd take PenTest+ anyway, the renewal is a side effect; if you wouldn't, the CEU path is cheaper.

CASP+ is harder ($509, broader scope) but renews EVERY underlying CompTIA cert — Security+ + CySA+ + PenTest+ + Network+ + A+. Holders of multiple CompTIA certs in renewal year often time CASP+ specifically for the cascade.

Common pitfalls (and how to avoid them)

Pitfall 1: Counting SIEM tuning as work experience. The work-experience category requires submitting a job description + manager attestation showing CySA+-domain duties. Many CySA+ holders assume their job qualifies automatically — it doesn't. Document the duties + get the attestation BEFORE the audit hits.

Pitfall 2: Letting Splunk / Sentinel / Elastic vendor training expire. Vendor SIEM training is the bread-and-butter Group-B-eligible CEU source for analysts. Many of these expire after 12 months — check the vendor certificate before submitting.

Pitfall 3: The CE fee + audit timing. CompTIA's audit window is 30 days; the CE fee is annual. Many candidates pay the fee but ignore audit emails buried in promotional CompTIA emails. Whitelist @comptia.org in your spam filter.