EC-Council • EDRP
Validates the ability to develop and implement business continuity and disaster recovery plans, covering business impact analysis, risk assessment, recovery strategy development, emergency response procedures, recovery site management, and disaster recovery plan testing and maintenance.
Questions
623
Duration
240 minutes
Passing Score
70%
Difficulty
ProfessionalLast Updated
Feb 2026
The EC-Council Certified Disaster Recovery Professional (EDRP), exam code 312-76, is a professional-level certification that validates a candidate's ability to plan, strategize, implement, and maintain comprehensive business continuity and disaster recovery (BC/DR) programs. The credential covers the full lifecycle of disaster preparedness: from conducting business impact analyses and risk assessments to designing recovery strategies, managing recovery sites, and testing and maintaining disaster recovery plans. It addresses data backup and recovery, virtualization-based recovery, centralized and decentralized system restoration, and telecommunications continuity.
The EDRP v3 curriculum aligns with major industry compliance frameworks including ISO 22301, ISO 22313, ISO 27001, ISO/IEC 27005, ISO 31000, ISO 31010, NFPA 1600, INCITS 483-2012, and the NIST NICE Framework. The program includes cloud-based virtual labs that allow candidates to practice BC/DR techniques in simulated enterprise environments. Recognized under DoD 8570/8140, the EDRP is accepted by U.S. government and military employers as a qualifying credential for information assurance and continuity roles.
The EDRP is designed for IT and information security professionals who are responsible for—or transitioning into—business continuity and disaster recovery roles. Ideal candidates include network and systems administrators, firewall and security administrators, risk assessment professionals, IT infrastructure managers, and cybersecurity analysts who need to formalize their BC/DR knowledge with a vendor-neutral, globally recognized credential.
The certification is also well-suited for IT managers and project managers who oversee organizational resilience programs, as well as professionals in regulated industries such as financial services, healthcare, and government who must demonstrate compliance with continuity standards. Candidates with at least a foundational understanding of IT infrastructure and information security will benefit most, though no strict prior certification is required.
There are no mandatory formal prerequisites to sit for the EDRP exam. However, EC-Council recommends that candidates have some practical experience in the IT BC/DR domain before attempting the certification. A working knowledge of IT infrastructure, basic information security concepts, and familiarity with organizational processes is strongly advised.
Candidates who have completed an official EC-Council course at an Accredited Training Center (ATC), an Academia Partner institution, or through the EC-Council iClass platform are automatically eligible to sit for the exam. Those who have not completed an official EC-Council course must submit an Exam Eligibility Application along with a non-refundable $100 USD fee and demonstrate a minimum of two years of work experience in the information security domain before being approved to test.
The EDRP exam (code 312-76) consists of 150 multiple-choice questions and must be completed within 4 hours. The passing score is 70%. The exam is delivered at authorized ECC Exam Centers and is also available at Pearson VUE testing centers worldwide. The certification is valid for three years, after which recertification is required through EC-Council Continuing Education (ECE) credits.
The exam tests knowledge across all core BC/DR domains rather than being divided into weighted sections with published percentages. Candidates are assessed on practical understanding of disaster recovery planning methodologies, risk and business impact analysis techniques, recovery strategies, and emergency response procedures. No unscored or survey questions have been officially disclosed by EC-Council.
EDRP-certified professionals are positioned for roles such as Disaster Recovery Specialist, Business Continuity Planner, IT Risk Manager, IT Infrastructure Manager, and Cybersecurity Analyst. Salaries for disaster recovery professionals in the United States typically range from approximately $75,000 to $125,000 annually, with median figures around $95,000 depending on experience, organization size, and location. The certification is recognized under DoD 8570/8140, making it particularly valuable for professionals seeking federal government, defense contractor, or military positions.
The global disaster recovery solutions market was valued at $10.93 billion in 2024 and is projected to reach $24.56 billion by 2029—a CAGR of roughly 17.5%—reflecting strong and growing employer demand for credentialed BC/DR professionals. Compared to alternatives such as the DRII CBCP (Certified Business Continuity Professional) or ISACA's CRISC, the EDRP is distinguished by its technical depth in IT systems recovery, its virtual lab component, and its alignment with EC-Council's broader cybersecurity certification ecosystem, making it a strong complement to credentials like CEH or CISSP for security-focused professionals.
1. A financial institution evaluates recovery site options for their algorithmic trading platform. The platform generates $2 million revenue per hour during market operation. Any downtime exceeding 30 minutes causes regulatory reporting violations and customer contract breaches. The platform requires RTO under 1 hour and RPO under 5 minutes. Which recovery site type is most appropriate despite the cost? (Select one!)
2. A virtualization administrator plans disaster recovery testing for VMware infrastructure using Site Recovery Manager. Management wants to verify recovery procedures without impacting production systems or disrupting ongoing replication. Which Site Recovery Manager capability should the administrator use? (Select one!)
3. A cloud services provider implements data protection using Grandfather-Father-Son rotation. Daily incremental backups are Sons kept for 7 days, weekly full backups are Fathers kept for 4 weeks, and monthly full backups are Grandfathers kept for 12 months. Where should Grandfather backups be stored according to best practices? (Select one!)
4. A university IT department develops a comprehensive disaster recovery plan following NIST SP 800-34 Rev. 1 structure. The plan includes supporting information, detailed recovery procedures, and testing schedules. During management review, the CIO identifies that the plan lacks clear criteria for when to activate disaster recovery procedures and how to assess the severity of outages. Which phase of the NIST contingency plan structure is incomplete? (Select one!)
5. A healthcare organization conducts a HIPAA compliance audit of its contingency planning documentation. The auditor identifies that the organization has implemented Testing and Revision Procedures and Applications and Data Criticality Analysis, but documentation for three other specifications under 164.308(a)(7) is incomplete. Which three specifications must the organization implement without exception to achieve HIPAA compliance? (Select three!)
Select all that applyAll exams included • Cancel anytime