Let me add a little further information.
Each certifying organization is a little different in how they deal with CPEs.
I have certs from ISC2, ISACA, and GIAC. And each one is different.
As noted, ISC2 is on a 12-month anniversary cycle, not a calendar cycle.
If your member got their certification in August, their cycle starts on September 01 and runs thru August of the next year.
ISC2 certs are on a 3 year system, and they USED to require a minimum each 12 months. Not calender year.
You need to get at least 120 during their 3 YEAR cycle, and as noted, its recommended you get 40 CPEs each 12 month period, which for your member would be September thru August. So they don't need to worry about how much between now and the end of December.
ISACA, FWIW, is on a calendar system, so certification holders must get a minimum each calendar years, HOWEVER, the first calendar year you're graced and don't have to get CPEs. So perhaps he thinks its similar with ISC2.
---
Michael Brown, CISSP, HCISPP, CISA, CISM, CGEIT, CRISC, CDPSE, GSLC, GSTRT, GLEG, GSNA, CIST, CIGE, ISSA Fellow
