
Empire Certified Third-Party Risk Specialist
The ECTPR credential shows you can reach a defensible conclusion about an organization you do not control, without their full cooperation, and show your working.
You complete your purchase and sit the exam on the Empire eLearning platform.
At a glance
- FormatMultiple choice (computer-adaptive)
- Number of questions100 to 125
- Duration2 hours
- ResultPass / Fail
- Exam languageEnglish
- Attempts4 per 12 months
- Voucher includes2 attempts
- Voucher validity1 year
- Credential validity3 years
- PrerequisitesNone required
- CredentialVerifiable Open Badge 3.0
About this certification
The Empire Certified Third-Party Risk Specialist (ECTPR) credential shows that you can do the real work of a third-party risk practitioner. Most security credentials test what you can do inside your own environment. This one tests the harder problem: the party operating the controls is not the party carrying the consequence, and you have to form a judgement anyway.
That work has moved from good practice to filing obligation. Registers are validated automatically before a supervisor reads them. Supply chain compromises reach organizations through software nobody chose. Incidents arrive as a partial notification at an awkward hour from a company whose facts you cannot verify.
ECTPR is the capstone credential of Empire’s Third-Party Risk and Vendor Security Specialist career path, and it proves your capability across the areas that path teaches: the lifecycle and how relationships are tiered, due diligence and questionnaire practice, evidence and assurance review, the software supply chain and the parties behind your vendors, the DORA and NIS2 obligations, contracts and exit, and running a programme day to day.
Exam blueprint
Questions are drawn across these areas, weighted as shown.
What to expect
The ECTPR exam is an adaptive, proctored exam. The questions adjust to your performance, so the exam measures your ability efficiently and no two candidates see the same set. It serves 100 to 125 items and is closed book: notes and outside resources are not allowed. Any tool the exam requires is provided on screen. You book your sitting for a scheduled time. Admission is automated: you verify your identity with government photographic identification and complete an environment and workstation check, and your exam is released as soon as those checks pass. A proctor monitors your sitting throughout and is there if you need help, and your screen, camera and microphone are recorded for the whole session. Because the exam is adaptive, the number of questions varies from one candidate to another, and it ends once it has enough information to decide your result, within a time limit of two hours. You cannot return to or change a previous answer. Your result is pass or fail against a set standard. More than half the questions are scenarios: you are given a situation, a document extract, or a set of facts and asked what follows.
Who it's for
ECTPR is for third-party risk analysts and vendor risk managers, GRC and compliance professionals carrying supplier obligations, security analysts moving into supplier assurance, and procurement or contract professionals with security responsibility. It suits anyone who has completed the Third-Party Risk and Vendor Security Specialist path and wants to prove the capability. A technical background is not required.
- Third-party risk analysts and vendor risk managers
- GRC and compliance professionals carrying supplier obligations
- Security analysts moving into supplier assurance
- Procurement or contract professionals with security responsibility
How to get certified
Prepare
Work through the Third-Party Risk and Vendor Security Specialist path, which teaches the full workflow the exam assesses.
Get your voucher
Purchase your ECTPR exam voucher.
Verify
Complete identity verification and the automated proctoring check, and accept the exam terms.
Take the exam
Sit the adaptive exam online within the time limit.
Earn your credential
Receive your certificate and badge on passing.
Validity & renewal
Your certification is valid for 3 years from the day you pass. Keep it current through continuing education, tracked automatically when you complete eligible content on Empire platforms.
Up to 4 attempts within 12 months. Each voucher includes 2 attempts.
What you earn
- A verifiable digital certificate with a unique verification link.
- A shareable Open Badge 3.0 credential employers can confirm instantly.
Ready to earn your ECTPR?
Get your voucher and complete identity verification, then sit the adaptive, proctored exam online. On passing, you receive your certificate and verifiable badge. Not exam-ready yet? Start the recommended career path first to prepare.
Frequently asked questions
Is the exam proctored?
Yes. Admission is automated: you verify your identity with government photographic identification and complete an environment and workstation check, and your exam is released as soon as those checks pass. A proctor monitors your sitting throughout and is there if you need help, and your screen, camera and microphone are recorded for the whole session.
Is the exam open book?
No. The exam is closed book: notes and outside resources are not allowed. Any tool the exam requires is provided on screen.
Why does the number of questions vary?
ECTPR is computer-adaptive. The questions adjust to your performance, so the exam serves 100 to 125 items and ends once it has enough information to decide your result, within a time limit of two hours. No two candidates see the same set.
Will I see a score?
Your result is pass or fail against a set standard. Because the exam is adaptive, you receive a pass or fail decision rather than a numeric score.
How many attempts do I get?
Up to 4 attempts within 12 months. Each voucher includes 2 attempts and is valid for 1 year.
How long is the credential valid?
Your ECTPR credential is valid for 3 years from the day you pass. You keep it current through continuing education, tracked automatically when you complete eligible content on Empire platforms.
What do I earn?
A verifiable digital certificate with a unique verification link, and a shareable Open Badge 3.0 credential that employers can confirm instantly.
