Q4 Training Budget: What to Buy Before It Resets (and What to Skip)
If your training budget doesn't roll over, spend it on things your team will actually start in Q1: annual seats with hands-on labs, certification prep tied to a real deadline, and AI skills for your security and IT staff. Skip anything nobody is assigned to use. Defer anything that depends on a decision you haven't made yet.

Year-end money is easy to waste. It's also one of the few times a year L&D and IT leaders can buy without a fight. Use it well and you start 2027 ahead.
Why this matters more this year
Skills, not headcount, are the gap now.
ISC2's 2025 Cybersecurity Workforce Study found 59% of respondents reported critical or significant skills shortages on their teams, up from 44% the year before. 88% said skills shortages led to at least one significant security consequence. AI topped the list of skills needed, cited by 41%.
CompTIA's IT Industry Outlook 2026 points the same way. Training existing employees is the preferred approach to closing skills gaps in 2026. A net 94% of respondents said they're at least somewhat likely to invest in AI-specific training.
Translation: your leadership already expects you to train the team you have. Year-end budget is how you get a head start.
The decision table: buy, skip, or defer
| Item | Call | Why |
|---|---|---|
| Annual team seats with hands-on labs, with names assigned | Buy | Starts delivering in January. Labs build capability, not just watch time. |
| Certification prep for roles with a real deadline (DoD 8140, client contracts, promotions) | Buy | A deadline is the best predictor that training gets used. |
| AI skills training for IT and security staff | Buy | Top skill need in ISC2's 2025 study. Low regret: it applies to almost every technical role. |
| Practice exams and readiness assessments | Buy | Cheap, and they show you who's actually ready before you pay for an exam. |
| Seats with no learner and no plan attached | Skip | Shelfware. Unused seats are the fastest way to lose next year's budget. |
| Exam vouchers for people who won't test by mid-2027 | Skip | CompTIA vouchers are final sale and expire 12 months from purchase. No extensions. |
| Training on a tool or platform you haven't selected yet | Defer | Wait until the platform decision is made. Then train on what you bought. |
| Security+ vouchers before you've picked SY0-701 vs. SY0-801 | Defer the voucher, buy the training | SY0-801 launches Nov 17, 2026. SY0-701 retires June 11, 2027. Decide the version per person first. |
| Multi-year prepay without exit terms | Defer or negotiate | Lock price, not risk. Get seat swaps and true-up terms in writing. |
Prepay: what to check before you sign
Prepaying in Q4 can be smart. Get these answered first.
When does the term start? If you buy in December and nobody logs in until February, you've lost two months. Ask whether the start date can match your rollout date.
Can seats move? People leave. Roles change. Confirm you can reassign a seat without buying a new one.
What's the volume break? Many team plans price by learner count. ACI's current team pricing, for example, applies a volume discount at 8+ learners. Check whether adding one or two seats drops your per-learner price.
What expires? Training subscriptions and exam vouchers run on different clocks. CompTIA vouchers expire 12 months from purchase, even if your training plan runs longer. Don't buy vouchers on the same day as seats unless people will test within the year.
What's refundable? CompTIA voucher purchases are final. Most annual subscriptions are too. Buy for the people you're sure about. Add the rest in Q1.
The Security+ timing question
This one deserves its own section. It affects a lot of teams.
CompTIA Security+ V8 (SY0-801) launches November 17, 2026. SY0-701 stays available through June 11, 2027 for English. Both use the same format: up to 90 questions, 90 minutes, passing score of 750.
For a team, split it by person:
- Already studying, testing by spring 2027: stay on SY0-701. Buy their voucher when they're ready to schedule.
- Starting in 2027: plan around SY0-801. It adds a dedicated AI objective. Buy the training now. Buy vouchers later.
Either way, the training seat is the safe purchase. The voucher is the one to time. More on the exam change: Security+ SY0-801: what's changing and when.
How to justify the spend
Finance doesn't want a course catalog. They want a problem, a fix, and a way to check it worked. One page. Four lines.
- The gap. Name it. "Our SOC has no one certified on cloud security." "Help desk escalations are up." Tie it to a risk or a cost.
- The fix. Who gets trained, on what, by when. Names, not headcount.
- The proof. What you'll measure: course completion, lab completion, practice-exam scores, certifications earned, and one operational metric you already track (ticket escalations, mean time to triage, audit findings).
- The timeline. Q1 start. Q2 checkpoint. Certified by a specific date.
Then add the external case. Use the ISC2 and CompTIA findings above. They show you're not inventing the gap. Your peers are reporting it too.
Lead with risk, not perks. "88% of security pros say skills shortages caused at least one significant security consequence" lands harder than "employees like training." For a deeper ROI argument, see the ROI of IT training.
What to have ready by January 2
Spend is half the job. The other half is making sure it gets used.
- A named learner list, with a role-based path for each.
- A manager who owns each person's progress.
- A 30-day check: who has logged in, who hasn't.
- Reporting you can pull for the Q2 review without building a spreadsheet.
The myACI platform handles the last two. Managers can assign learning paths, track completion and certification readiness, and export progress reports for leadership.
Put year-end budget into training your team will use in January
Annual team seats with hands-on labs, assigned to named learners, tied to a 2027 goal. Certification prep for roles with deadlines comes next. Then AI skills training for technical staff.
Only for people who will test within 12 months. CompTIA vouchers are final sale, expire 12 months from purchase, and can't be extended.
Split by person. Anyone testing by spring 2027 can stay on SY0-701, which retires June 11, 2027. Anyone starting in 2027 should plan for SY0-801, which launches November 17, 2026.
Name the gap, the fix, the measures, and the timeline on one page. Track completion, lab work, practice scores, certifications, and one operational metric you already report.
For most IT and security teams, yes. AI was the most-cited skill need in ISC2's 2025 workforce study, and CompTIA reports a net 94% of organizations are at least somewhat likely to invest in AI-specific training in 2026.
Let's Level Up Together
Subscribe for expert tips, industry news, and smart ways to grow skills—delivered with zero spam vibes.
Join our Newsletter


