- EDRP Defined: The EC-Council Credential
- What the Credential Actually Validates
- The 312-76 Exam: Format and Rules
- The Ten Exam Domains
- Who Needs It and Who Hires for It
- Eligibility, Vouchers and Fee Mechanics
- Training Versus Self-Study
- Keeping the Credential Active
- Sequencing Your Preparation by Domain
- Frequently Asked Questions
- EDRP here means EC-Council Disaster Recovery Professional, tested through exam 312-76 (Version 4).
- The exam has 150 multiple-choice questions in 4 hours; the passing score is 70%.
- Risk Assessment, Business Impact Analysis and Disaster Recovery Planning each carry 12% of the blueprint.
- The RPS exam voucher costs USD 450; self-study applicants also pay a USD 100 nonrefundable eligibility application fee.
EDRP Defined: The EC-Council Credential
On this site, EDRP refers to one thing: the EC-Council Disaster Recovery Professional certification. It is issued by EC-Council, the same organization behind credentials such as the Certified Ethical Hacker, and it targets professionals who plan, build, test and run the recovery capabilities that keep an organization alive when systems, facilities or services fail. The acronym is shared by other, unrelated credentials in the wider marketplace, so always confirm that a job posting, course listing or exam voucher names EC-Council before you spend money.
The current exam is EDRP Version 4, exam code 312-76. Version 4 matters because older v3 topic lists and domain weights circulate widely online, and they do not match the present blueprint. The v4 blueprint adds attention to AI, governance and organizational resilience, which older study notes simply do not cover. If you want a closer look at what each content area demands, see our complete guide to all 10 EDRP content areas.
If you are searching for alternate phrasings of the same question, these companion pages cover the same ground from different angles: what EDRP stands for, the meaning of EDRP, and the EDRP certification overview.
What the Credential Actually Validates
EDRP is not a general cybersecurity exam. It is a business continuity and disaster recovery credential, and its scope reflects that. A candidate who holds it is expected to demonstrate the ability to move through the entire continuity lifecycle: understand the foundations, establish a management program, assess risk, analyze business impact, write continuity and recovery plans, implement backup and system recovery, activate plans during an incident, and then test and exercise them so they actually work.
That lifecycle shape is the most useful mental model for the whole certification. The ten exam domains are not ten isolated topics; they are stages of one continuous program. Risk assessment and business impact analysis feed planning, planning feeds recovery design, recovery design feeds activation procedures, and exercises feed improvements back into the plan. Candidates who see the connections tend to find scenario questions easier than candidates who memorize each domain as a separate list.
The 312-76 Exam: Format and Rules
The exam is delivered through the ECC Exam Center and ECC Exam Portal, with remote proctoring handled by EC-Council's RPS team. The core parameters are fixed:
| Element | EDRP v4 (312-76) |
|---|---|
| Questions | 150 multiple-choice |
| Duration | 4 hours |
| Passing score | 70% |
| Delivery | ECC Exam Center / ECC Exam Portal, remote proctored by RPS |
| Reference materials | Closed book |
At 150 questions in 240 minutes, you have roughly a minute and a half per question, which is generous for recall items but tighter for long scenario questions that require you to weigh several plausible recovery options. For a precise explanation of how the threshold works in practice, read our page on the EDRP passing score.
Remote proctoring conditions
Under the RPS conditions in EC-Council's exam user guide, the test is closed book. Calculators, reference notes and assistance websites or software are prohibited. You need a webcam and a single monitor. You may use one pen or pencil and two scratch sheets, and those sheets are destroyed after the exam. Because continuity exams often involve time-based reasoning, expect to rely on scratch paper for working through recovery timelines mentally rather than on any tool.
The Ten Exam Domains
The official blueprint divides the exam into ten domains. Three of them, Risk Assessment, Business Impact Analysis and Disaster Recovery Planning, share the largest weight at 12% each, which corresponds to 18 questions apiece. The full list:
| Domain | Weight |
|---|---|
| 1. Foundations of Business Continuity and Disaster Recovery | 8% |
| 2. Business Continuity Management | 10% |
| 3. Risk Assessment | 12% |
| 4. Business Impact Analysis | 12% |
| 5. Business Continuity Plan | 10% |
| 6. Disaster Recovery Planning | 12% |
| 7. Data Backup and System Recovery | 10% |
| 8. Disaster Recovery Plan Development | 10% |
| 9. Business Continuity and Disaster Recovery Plan Activation | 8% |
| 10. Business Continuity and Disaster Recovery Plan Activation Test, Training, and Exercise | 8% |
Risk Assessment and Business Impact Analysis (Domains 3 and 4)
Together these two domains account for 24% of the exam, so they deserve disproportionate attention. They are the analytical foundation of everything that follows.
- Identifying threats, vulnerabilities and the likelihood and consequence of disruptive events
- Distinguishing risk assessment outputs from business impact analysis outputs
- Determining which business functions are critical and how long they can tolerate disruption
- Translating impact findings into recovery priorities and recovery objectives
Disaster Recovery Planning and Plan Development (Domains 6 and 8)
These domains cover the move from analysis to a documented, executable recovery capability.
- Defining recovery strategies that match the objectives established during impact analysis
- Documenting roles, procedures, dependencies and communication paths
- Selecting and justifying recovery site and infrastructure options, including cloud and hybrid recovery approaches
Data Backup and System Recovery (Domain 7)
The most technical domain, covering how data and systems are protected and restored.
- Backup methods, retention and verification of restorability
- System and data recovery procedures and their sequencing
- Aligning backup frequency and recovery speed to business requirements
Activation, Testing and Exercises (Domains 9 and 10)
At 8% each, these domains cover what happens when a plan is invoked and how it is proven beforehand.
- Declaration criteria, escalation and the mechanics of activating a plan
- Test and exercise types, training programs and how results drive plan improvement
Domains 1, 2 and 5 round out the program: foundational concepts, the management system that governs continuity, and the business continuity plan itself. The v4 blueprint also reflects AI, governance and organizational resilience themes, so expect to see those ideas woven into questions rather than isolated in one section.
Who Needs It and Who Hires for It
The credential suits people whose daily work touches availability, resilience and recovery. Typical audiences include business continuity and disaster recovery planners, IT operations and infrastructure managers, risk and compliance professionals, information security staff who own incident and recovery processes, and consultants who build continuity programs for clients.
Employers that value this kind of certification tend to be organizations where downtime is costly or regulated: financial services, healthcare, government and public sector bodies, telecommunications, utilities and managed service providers. In those environments, recovery planning is a formal obligation rather than a nice-to-have, and a recognized credential helps signal that a candidate understands the discipline. For a look at the roles that list this credential, see our overview of EDRP jobs, and for earning context, our EDRP salary guide. Whether the investment pays off for your situation is covered in our ROI analysis of the EDRP certification.
Eligibility, Vouchers and Fee Mechanics
EC-Council offers two routes to sit the exam, and the route you choose determines both your paperwork and your costs.
Route one: official training
Completing official EC-Council training, or purchasing an official courseware bundle, is a qualifying route. The issuer states that the eligibility application fee is included in official training fees, so training candidates do not pay it separately.
Route two: independent self-study
Self-study applicants must have 2 years of information-security experience, name a boss, supervisor or department lead as a verifier, and submit a USD 100 nonrefundable eligibility application. EC-Council must approve the application, and approved applicants must purchase their voucher within 3 months. The exact rules sit in the Application Process Eligibility section on EC-Council's certification site. Our page on EDRP requirements and how to qualify walks through this in more detail.
Exam pricing
| Item | Price | Notes |
|---|---|---|
| RPS exam voucher | USD 450 | Nontransferable; valid one year from release |
| Approved RPS retake voucher | USD 249 | Subject to EC-Council retake approval and policy |
| Eligibility application (self-study) | USD 100 | Nonrefundable; included in official training fees |
Because the voucher is valid for one year and cannot be transferred, avoid buying it until your preparation is on a realistic schedule. Scheduling logistics are covered in our guide to EDRP exam dates and scheduling.
Training Versus Self-Study
EC-Council's current preparation program is a 5-day live training covering business continuity and disaster recovery, including cloud and hybrid recovery. That five-day figure describes the length of the course, and it is entirely separate from the four hours you get in the exam itself.
The training route bundles instruction with eligibility, which simplifies administration. Self-study suits experienced practitioners who already work with recovery plans and want to fill gaps cheaply, but it adds the application, verification and approval steps described above. Either way, the exam tests the v4 blueprint, so make sure whatever materials you use are current. Our EDRP training overview compares the options, and the EDRP study guide lays out a full preparation approach.
Keeping the Credential Active
EDRP is not a one-time achievement. Maintaining it requires 120 Continuing Professional Education credits within a 3-year cycle, which EC-Council's legacy wording calls ECE credits, plus USD 80 in annual continuing education fees. Paying the annual fee extends your certificate's expiry year by year, but completing the credit requirement remains necessary to carry the credential into the next cycle. Treat the fee and the credits as two separate obligations; paying one does not satisfy the other. The policies are published in EC-Council's CPE Policy and Continuing Education Fees pages.
Sequencing Your Preparation by Domain
Preparation should follow the continuity lifecycle, because each stage depends on the previous one. This sample order puts the analytical domains early, since they underpin the planning and recovery content.
Foundations and Management
- Domain 1 concepts and terminology
- Domain 2 governance and program management
Analysis Core
- Domain 3 Risk Assessment
- Domain 4 Business Impact Analysis, the heaviest paired area at 24% combined
Plans and Recovery Design
- Domain 5 Business Continuity Plan
- Domains 6 and 8 recovery planning and plan development
Technical Recovery and Operations
- Domain 7 backup and system recovery
- Domains 9 and 10 activation, testing, training and exercises
Finish with full-length timed practice, since stamina across 150 questions is a real factor. If you want to gauge readiness, our difficulty guide explains where candidates typically struggle, and the pass rate page explains what is and is not publicly known. For a compact last-minute review, use the EDRP cheat sheet, and drill scenario questions in our practice question bank.
Key Takeaway
Weight your hours toward Domains 3, 4 and 6, which carry 12% each, but do not skip Domains 9 and 10. At 8% apiece they are small, yet activation and exercise questions are scenario-driven and reward practical understanding.
Frequently Asked Questions
It stands for EC-Council Disaster Recovery Professional. Other unrelated credentials share the acronym, so confirm the issuer is EC-Council when evaluating courses, vouchers or job postings. See our page on what EDRP certification is for more.
Exam 312-76 has 150 multiple-choice questions with a 4-hour time limit. The passing score is 70%, and the exam is delivered with remote proctoring through the ECC Exam Portal.
No. Official training or an official courseware bundle is one qualifying route, but self-study applicants can qualify with 2 years of information-security experience, a supervisor verifier, a USD 100 nonrefundable application and EC-Council approval.
The RPS exam voucher is USD 450 and pays for the exam attempt. The USD 650 e-courseware listing is study material only and does not include the examination fee.
Earn 120 CPE credits within each 3-year cycle and pay USD 80 in annual continuing education fees. Paying the fee extends expiry each year, but the credit requirement must still be completed for the next cycle.