This guide is designed to help you understand how certification validity, expiration, and recertification work, what happens after you pass, how long your certification remains valid, and how to maintain your certified status.
Certification Validity
All Certified CyberDefenders (CCD) certifications are valid for 4 years from the date you pass the exam.
This validity period was established by an independent panel of SOC industry practitioners as part of the certification development process.
Why do certifications expire?
Cybersecurity is a rapidly evolving field. The 4-year validity period helps maintain the credibility of the certification by ensuring that all certified individuals demonstrate current, relevant skills.
Recertification Options
You can renew your certification using one of the following options:
Option 1: Retake the Exam
Pass the latest version of your certification exam to renew your certification for another 4 years.
Option 2: Submit 36 CPE Credits
Submit 36 Continuing Professional Education (CPE) credits earned during your 4-year certification cycle.
Steps to Renew Your Certification
Choose to either collect 36 CPE credits or renew by retaking the exam
Log in and submit your CPE credits through your CyberDefenders dashboard
Once approved, your certification will be renewed for another 4 years
To submit your CPE credits, use the following form:
What activities qualify as CPE credits?
CPE activities must demonstrate ongoing learning and professional development in cybersecurity areas relevant to the certification.
Acceptable activities should fall within one or more of the following areas:
Security Operations Center (SOC) practices
Incident detection and response
Network and endpoint security analysis
Email and phishing investigation
SIEM tools and log analysis
Threat intelligence and threat hunting
Cloud security operations
Digital forensics fundamentals
AI and automation in cybersecurity operations
Examples of accepted activities
Cybersecurity training courses (online or in-person)
Conference attendance (e.g., Black Hat, DEF CON, BSides)
CTF competitions and hands-on labs
Published research, articles, or write-ups
Presentations or teaching cybersecurity content
CyberDefenders platform activities
Activities that are not accepted
Activities unrelated to cybersecurity
General IT or end-user awareness training
Activities without supporting documentation
For more details on how to submit your CPE credits, please refer to the Claiming CPE Credits guide.
Recertification Timeline
You should complete your recertification before your certification expiration date to avoid any lapse in your certified status.
Verification Process
To maintain the integrity of the program, CyberDefenders reviews a random sample of recertification submissions each year.
If selected, you will be asked to provide supporting documentation for your submitted activities.
Failure to provide valid documentation may result in the rejection of your recertification request.
Expired Certifications
If your certification expires, you will need to retake and pass the exam to regain your certified status.