Your Manager Doesn’t Care About CPE Credits. Here’s What Actually Works
Author: Marie Strawser, UMSA Managing Director
October 22, 2026
Here is an uncomfortable truth about how most security and risk professionals justify conference attendance with their managers: they lead with CPE credits.
It works. Certification maintenance is a documented professional requirement. The math is straightforward; you need the credits, and the conference provides them. Here is the cost. Approved.
But it is a weak argument, and experienced managers know it. CPE credits can be earned in dozens of ways. Online courses, webinars, and self-study programs are often cheaper than a two-day conference, including travel and hotel. If CPE is the entire case you are making, you are one budget cycle away from your manager finding a more efficient way to check that box.
The stronger argument is the one the data from Secure360 2026 makes on its own.
What the Numbers Actually Say
In 2026, 74% of Secure360’s 526 registered attendees were returning from prior years. The conference earned a Net Promoter Score (NPS) of +62, well above the industry benchmark of +30 to +40 for professional cybersecurity events. Every single post-conference survey respondent confirmed that the event met their expectations. Not most. Everyone.
And the most common way new attendees found out about Secure360? A co-worker told them. Seventy-one percent of first-time attendees cited peer referral as their discovery channel.
Yes, 58% cited CPE credit as a factor in their decision to attend. But that means 42% had other reasons compelling enough on their own. And it means the people who came back year after year, 74% of the room did not come back because they needed the credits. They were coming back because the conference was worth it.
That is the argument your manager needs to hear.
What Actually Drives Value at a Professional Conference
When you look at why Secure360 attendees return across registration data, session feedback, and post-conference survey responses, three factors stand out. These are the same factors that make any professional conference worth the line item.
The content has to be genuinely at the practitioner level. Professional development was the top reason for attending, cited by 80% of respondents. Not networking. Not vendor demos. Content. The highest-rated sessions scored 4.93 out of 5.0, with 100% of attendees saying they would attend that speaker again. Those are the sessions people talk about at work the following week, and the reason they ask their manager to approve the registration fee again next year.
The people in the room have to be worth your time. “I look forward to this every year.” That line appeared in the survey unprompted. It captures something the data cannot fully quantify: the value of spending two days alongside people at a similar level, wrestling with the same problems, without a sales pitch attached. Secure360 draws security engineers, analysts, and practitioners from large enterprises who are genuinely engaged. Returning attendees know each other. New attendees get pulled into existing relationships. You leave with connections you will actually use.
The conference has to be built for someone in particular. Secure360 is a Minnesota-based cybersecurity conference with deep roots in the regional professional community. It is not trying to be RSA or Black Hat. It knows what it is: a practitioner event for security and risk professionals in the upper Midwest who want high-quality content, peer access, and a community that shows up for them year after year. Events that commit to a specific audience and deliver consistently build loyalty. Seventy-four percent retention is what that loyalty looks like.
How to Make the Case to Your Manager
The budget conversation goes better when you give your manager something more specific than “I need CPE credits, and I want to network.”
Here is the argument that holds up.
Lead with professional development, not compliance. The certification maintenance requirement gets you in the door on the justification. Do not ignore it. But it should not be the headline. The headline is: this conference delivers practitioner-level content I cannot get from a webinar, and I will come back with specific knowledge I can apply to our program. Name the session tracks relevant to your current work. Name the problems you are trying to solve. Specificity closes budgets.
Make the networking argument specific. Your manager understands that relationships are valuable. Help them see the specific value. If you are trying to build a vendor relationship, find a peer who has navigated a challenge your team is facing, or benchmark how other organizations handle a specific risk, a room where 300 vetted security and risk practitioners spend two days together is the most efficient way to do any of that. Put it in those terms.
Use the retention data. Seventy-four percent of attendees returned in 2026. NPS of +62. These are not numbers you manufacture with a good marketing campaign. They reflect genuine satisfaction from practitioners who chose to return, often on their own time and at their own expense. If your manager wants evidence that the investment is worth it, these numbers are the evidence.
Quantify the CPE value accurately. If the conference offers 10 to 12 CPE credits and the next-cheapest option that fits your schedule is a multi-week online course, the comparison is meaningful. Do not undersell the credit value; just do not let it be the only value you are claiming.
Offer to come back with something. Commit to a specific deliverable from the conference: a briefing for the team on the two or three most relevant sessions, a contact who can help with a current project, or a benchmark on how your program compares to what peer organizations are doing. A manager who sees the conference as an input to the team’s work, not a perk for an individual, is more likely to say yes. And to say yes again next year.
The Word of Mouth Signal
No conference describes itself as mediocre. Every event claims high-quality content and strong networking.
The one signal that cuts through is whether practitioners tell their colleagues to come. Seventy-one percent of new Secure360 attendees showed up because someone they worked with sent them. That is the most credible endorsement a conference can have, and it is the endorsement that makes your budget conversation easier.
When you walk into your manager’s office and say, “I want to go to Secure360 2027 three people on our team have been, and they keep telling me I should go, that is a different conversation than “I need CPE credits.”
Start there.
Come Back in 2027
If you attended Secure360 2026, you already know what the data confirms. If you have not been, the data makes the case, and so do your colleagues who have.
Secure360 2027 registration is now open. The community that produced a +62 NPS and 74% retention will be back with new content, the same quality of peer, and the same commitment to practitioner-level depth that has kept three-quarters of the audience returning year after year.
Get the budget approved. You will not regret it.

