- What the EDRP Actually Is
- Why EC-Council Built a Recovery Credential
- The Ten Exam Domains, Explained
- Exam Format and Remote Proctoring Rules
- How You Qualify to Sit the Exam
- What the Fees Look Like
- Who Benefits From the Credential
- Sequencing Your Preparation Around the Weights
- Keeping the Certification Active
- Frequently Asked Questions
- EDRP here means EC-Council Disaster Recovery Professional, exam 312-76 (Version 4): 150 multiple-choice questions in 4 hours, 70% to pass.
- Risk Assessment, Business Impact Analysis and Disaster Recovery Planning each carry 12%, the heaviest domain weights.
- Official EC-Council training is a qualifying route; self-study applicants need 2 years of security experience plus a USD 100 application.
- The RPS exam voucher costs USD 450; an approved retake voucher is USD 249.
What the EDRP Actually Is
The EDRP is the EC-Council Disaster Recovery Professional certification. It validates that a practitioner can plan, build, activate, and test the programs that keep an organization running (and bring it back) when systems, facilities, or services fail. The current exam is EDRP Version 4, exam code 312-76.
If you landed here after searching "What is a EDRP?", note that the acronym is shared by several unrelated credentials from other bodies. This article covers only the EC-Council credential. For other phrasing of the same question, see our pages on what EDRP is, what EDRP stands for, and EDRP meaning.
Why EC-Council Built a Recovery Credential
EC-Council is best known for security certifications, but resilience is the other half of the security conversation. Prevention fails eventually, so organizations need people who can answer practical questions: what must be restored first, how fast, from which backup, by whom, and how do we know the plan works?
The Version 4 blueprint reflects how that work has changed. It includes AI, governance, and organizational resilience, and EC-Council's current preparation program addresses cloud and hybrid recovery. Older Version 3 topic lists and weights are version-specific, so make sure any study material you use targets v4 rather than an earlier outline.
The Ten Exam Domains, Explained
The official blueprint divides the exam into ten domains. Weights range from 8% to 12%, so no single area dominates, and a weak spot anywhere can cost you. A deeper walkthrough lives in our complete guide to all 10 EDRP content areas; here is the summary.
| Domain | Name | Weight |
|---|---|---|
| 1 | Foundations of Business Continuity and Disaster Recovery | 8% |
| 2 | Business Continuity Management | 10% |
| 3 | Risk Assessment | 12% |
| 4 | Business Impact Analysis | 12% |
| 5 | Business Continuity Plan | 10% |
| 6 | Disaster Recovery Planning | 12% |
| 7 | Data Backup and System Recovery | 10% |
| 8 | Disaster Recovery Plan Development | 10% |
| 9 | Business Continuity and Disaster Recovery Plan Activation | 8% |
| 10 | Business Continuity and Disaster Recovery Plan Activation Test, Training, and Exercise | 8% |
The analytical core: Domains 3, 4 and 6
Risk Assessment (12%)
You must be able to identify threats and vulnerabilities, evaluate likelihood and impact, and choose treatments.
- Distinguishing a threat from a vulnerability from a risk
- Qualitative versus quantitative evaluation
- Mapping risks to the assets and processes they endanger
Business Impact Analysis (12%)
The BIA is where recovery priorities come from, and exam scenarios lean on it heavily.
- Identifying critical functions and their dependencies
- Recovery time objective (RTO), recovery point objective (RPO), and maximum tolerable downtime relationships
- Translating business impact into recovery order
Disaster Recovery Planning (12%)
This domain turns analysis into strategy.
- Selecting recovery strategies that fit the RTO and RPO targets
- Alternate-site options and their cost-versus-speed trade-offs
- Cloud and hybrid recovery considerations
Together these three domains account for 36% of the exam, and each is worth 18 questions. They also feed the later domains: a plan is only as good as the risk and impact work underneath it.
The build-and-run domains: 2, 5, 7, 8
Business Continuity Management covers program governance: policy, roles, and ongoing oversight. Business Continuity Plan focuses on keeping business functions operating during disruption. Data Backup and System Recovery is the most technical domain, covering backup types and rotation, replication, restoration procedures, and verifying that backups are actually recoverable. Disaster Recovery Plan Development addresses how to write, structure, and maintain the DR plan document itself.
The lifecycle domains: 1, 9, 10
Foundations establishes terminology and the relationship between BC and DR. Plan Activation covers declaring an incident, escalating, communicating, and executing recovery. Test, Training, and Exercise covers tabletop walkthroughs, simulations, awareness training, and capturing lessons learned. At 8% each these look small, but they combine for 24% of the exam, so skipping them is a costly gamble.
Key Takeaway
The three 12% domains are the heaviest, but five domains sit at 10% or below and together make up the rest. Even coverage beats over-investing in one area, which is why our EDRP study guide spreads time across all ten.
Exam Format and Remote Proctoring Rules
The exam is 150 multiple-choice questions in 4 hours, with a passing score of 70%. It is delivered through the ECC Exam Center and ECC Exam Portal, with remote proctoring by EC-Council's RPS team. For a closer look at how scoring works, read our breakdown of the EDRP passing score.
EC-Council's remote proctoring guide sets these conditions:
- The exam is closed book.
- Calculators, reference notes, and assistance websites or software are prohibited.
- A webcam and a single monitor are required.
- One pen or pencil and two scratch sheets are permitted; the sheets are destroyed after the exam.
Four hours for 150 questions leaves reasonable time per item, so the challenge is rarely raw speed. The questions reward judgment: recognizing which recovery action fits a described scenario, or which document or analysis should come first. If you want a candid read on difficulty, see how hard the EDRP exam is, and for what the available data does and does not say, see our EDRP pass rate discussion.
How You Qualify to Sit the Exam
There are two routes, and the difference matters for both cost and paperwork. Our EDRP requirements guide covers this in full; the essentials are below.
| Route | What it involves |
|---|---|
| Official EC-Council training | Completing official training or an official courseware bundle is a qualifying route. The issuer states the application fee is included in official training fees. |
| Independent self-study | Requires 2 years of information-security experience, verification from a boss, supervisor, or department lead, a USD 100 nonrefundable eligibility application, and EC-Council approval. |
Self-study applicants who are approved must purchase their exam voucher within 3 months of approval. Treat that window as a real deadline when planning your preparation timeline. The official rules sit on EC-Council's Application Process Eligibility page, which is the authority if anything here ever differs.
What the Fees Look Like
- RPS exam voucher: USD 450, nontransferable, valid for one year from release.
- Approved retake voucher: USD 249, available only with EC-Council retake approval and subject to its policy.
- Self-study eligibility application: USD 100, nonrefundable.
- E-courseware: listed separately at USD 650. This is study material, not the examination fee, and should not be confused with the voucher price.
Because the voucher is valid for a year from release, you have room to schedule thoughtfully rather than rushing. For the full picture including renewal costs, see the EDRP certification cost breakdown, and check the EDRP exam dates and scheduling page for how booking works in practice.
Who Benefits From the Credential
The EDRP fits people whose work touches resilience, whether as a specialist or as part of a wider security or IT role. Typical fits include:
- Business continuity and disaster recovery coordinators and managers, who own the plans and the program
- IT operations and infrastructure staff responsible for backup, replication, and restoration
- Security and risk professionals who need to connect threat analysis to recovery planning
- Compliance and audit staff who assess whether continuity controls are real
- Consultants and service providers who build or review recovery programs for clients
Roles that mention continuity, resilience, or recovery in the title are the most direct match; our EDRP jobs page explores where the credential appears. On pay, we deliberately avoid quoting unsourced figures; the EDRP salary guide discusses the factors that influence earnings, and our ROI analysis helps you weigh cost against career goals.
Sequencing Your Preparation Around the Weights
You do not need a elaborate system, but the order in which you study EDRP domains does matter, because they build on one another. A BIA cannot be understood without the risk vocabulary, and a recovery strategy cannot be chosen without RTO and RPO targets from the BIA.
Foundations and management
- Domains 1 and 2: terminology, program governance, BC versus DR
- Build a glossary of RTO, RPO, MTD, and related terms
The analytical core
- Domains 3 and 4: risk assessment, then business impact analysis
- Practice deriving recovery priorities from an impact scenario
Planning and technical recovery
- Domains 5, 6, 7, and 8: BCP, DR planning, backup and recovery, plan development
- Compare recovery strategies against stated RTO and RPO
Execution and proof
- Domains 9 and 10: activation, testing, training, exercises
- Full-length timed practice, then revisit your weakest domain
Keep the exam rules in mind while you practice: closed book, no calculator, no notes. A scenario question that asks you to reason about recovery order should be answerable from understanding alone. A one-page EDRP cheat sheet is a useful last-week review aid, and you can test yourself with scenario-style questions on our EDRP practice test site.
Key Takeaway
Study the chain, not the isolated facts: risk feeds the BIA, the BIA sets RTO and RPO, those targets drive strategy and backup design, and testing proves it all works. Scenario questions tend to follow that chain.
Keeping the Certification Active
Passing is the start of a maintenance cycle. EC-Council requires 120 Continuing Professional Education credits within a 3-year cycle. Older materials sometimes call these ECE credits, which is legacy wording for the same concept. You also pay USD 80 in annual CE fees.
Paying the annual fee extends the certificate's expiry year by year, but completing the credit requirement is still necessary to carry into the next cycle. The two obligations are separate, so track both. The authoritative details are in EC-Council's CPE Policy and Continuing Education Fees pages.
Practitioners in this field often earn credits naturally through work: running exercises, attending resilience conferences, publishing, or delivering training all tend to fit, subject to EC-Council's policy on what counts.
Frequently Asked Questions
It stands for EC-Council Disaster Recovery Professional. The current exam is Version 4, code 312-76. Other credentials from other organizations share the acronym, but they are unrelated to this one.
The exam has 150 multiple-choice questions to complete in 4 hours, and the passing score is 70%. It is delivered through the ECC Exam Center and ECC Exam Portal with remote proctoring.
No. Official training or an official courseware bundle is one qualifying route, but independent self-study applicants can qualify with 2 years of information-security experience, a supervisor verifier, a USD 100 nonrefundable application, and EC-Council approval.
Risk Assessment, Business Impact Analysis, and Disaster Recovery Planning each carry 12% (18 questions each), the largest weights. However, the other seven domains range from 8% to 10%, so balanced coverage is essential.
An approved retake voucher costs USD 249, but it is subject to EC-Council's retake approval and policy. The original USD 450 voucher is nontransferable and valid for one year from release, so confirm current retake rules with EC-Council before planning.
For a broader overview of the credential beyond this article, our pages on EDRP certification and EDRP training are good next stops, and the main practice test site is the place to put what you learn under timed conditions.