Remote Proctoring Technologies and Standards: A Beginner's Guide

Updated on
7 min read

Remote proctoring has transitioned from a niche service to a vital solution for educational institutions, certification bodies, and HR departments. In the wake of the global shift to online assessments since 2020, the necessity for secure yet convenient testing solutions has surged. This article will guide educators, administrators, and hiring managers through the fundamentals of remote proctoring technologies. You will discover various proctoring types, essential technologies, and best practices to ensure assessment integrity while considering privacy and accessibility.


What is Remote Proctoring?

Remote proctoring, often referred to as online invigilation, is the process of overseeing or verifying a candidate’s identity and actions while they take an exam remotely. Combining software, hardware, and human oversight, remote proctoring aims to uphold the integrity of assessments.

Key Components and Actors

  • Candidate (test taker): Uses their device (webcam, microphone).
  • Proctoring platform: Includes client agents, secure browsers, and recording/streaming features.
  • Live proctor or human reviewers: Monitor the exam session.
  • Exam delivery system / LMS: Facilitates the exam process.
  • Storage and reporting systems: House recordings and flagging systems.

Common Use Cases

  • High-stakes certification and licensing exams
  • University final exams and classroom evaluations
  • Remote hiring and pre-employment assessments
  • Professional continuing education and vendor testing

Typical Workflow

  1. Scheduling: Candidates register or are assigned through the LMS.
  2. Identity Check: ID upload, face photo, or multi-factor authentication.
  3. Pre-exam System Checks: Camera, microphone, network, and system evaluations.
  4. Lockdown: Use of a secure browser or app to prevent cheating.
  5. Monitoring: Engagement of live proctor, AI flags, and recorded assessments.
  6. Reporting: Storage of events, recordings, and proctor notes for audits.

Note: Proctoring focuses on integrity and monitoring, different from test authoring and delivery, which concerns question banks, scoring, and grading.


Types of Remote Proctoring

Choosing the right proctoring method requires understanding the context of your assessments. Below is a concise comparison table to help you:

TypeDescriptionProsConsBest For
Live ProctoringReal-time human monitoring via video/audioHuman judgment; flexible; lower false positivesMore costly; scheduling constraintsHigh-stakes exams needing immediate intervention
Recorded (Review)Session recorded for later review by humansLower cost; easier schedulingDelay in review; storage costsMedium-stakes or large cohorts requiring later review
Automated (AI)Algorithms flag suspicious behavior without live monitoringScalable; consistent; reduced costsFalse positives; algorithmic biasLow to medium-stakes assessments
HybridAutomated flagging with human review processBalanced approach; cost-effectiveRequires efficient workflowsScenarios needing fairness and scalability

Choosing a method involves balancing stakes, budget, candidate populations, and regulatory requirements. High-stakes exams often favor live or hybrid approaches with strong identity verification.


Core Technologies Used

Remote proctoring successfully integrates various technologies to monitor candidate behavior effectively:

  1. Video and Audio Capture

    • Primary inputs from webcams and microphones assist in identifying the test taker’s surroundings and potential cheating cues.
    • Streaming vs. Recording: Live proctoring streams to a human, while recorded proctoring retains footage for later analysis.
  2. Screen Capture and Browser Lockdown

    • Secure browsers prevent actions like Alt+Tab and screen sharing; methods include kiosk-mode browsers and native agents.
    • Tools like LTI (Learning Tools Interoperability) and APIs commonly facilitate integration with LMS platforms.
  3. Identity Verification

    • Techniques such as ID uploads, live photo matching, and multi-factor authentication, guided by NIST SP 800-63, help ensure robust identity checks.
  4. Biometrics and Anti-Spoofing

    • Facial recognition aids initial identity proofing. Standards like ISO/IEC 30107 are vital for preventing spoofing attacks.
  5. Behavioral Analytics and AI/ML

    • These systems analyze candidate behaviors and flag anomalies, although human oversight is crucial to minimize bias and inaccuracies.
  6. System-Level Monitoring and Telemetry

    • Proctoring tools may monitor running processes and network connections for unauthorized tools.
    • Use pre-exam checks to automate these processes on Windows systems—see our guide on Windows automation and pre-exam checks.
  7. Data Handling: Encryption, Storage, Retention

    • Utilize TLS for data in transit and AES-256 for at-rest data. Clarify retention policies and access controls for recordings.

Example API Command

This simple command initiates an exam session:

curl -X POST 'https://api.proctor.example.com/v1/sessions' \
  -H 'Authorization: Bearer $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"candidate_id":"12345","exam_id":"chem101","mode":"recorded"}'

Standards, Regulations, and Best Practices

Remote proctoring is intertwined with various laws regarding identity, biometrics, and privacy. Key guidelines include:

  • GDPR (EU) and FERPA (US): These privacy laws govern data handling in educational contexts.
  • NIST SP 800-63: This resource provides crucial identity proofing and authentication levels based on exam risks: Link
  • Biometric Standards: ISO/IEC 30107 and ISO/IEC 24745 are critical for biometric information protection.
  • Accessibility: Follow WCAG and offer reasonable accommodations.

Operational Best Practices

  • DPIAs: Conduct Data Protection Impact Assessments for any use of biometric data.
  • Data Minimization: Collect only what is essential, and anonymize where feasible.
  • Transparency: Provide clear privacy notices detailing data collected, storage duration, and appeal processes.

Implementation Considerations

These factors greatly influence the effectiveness of your proctoring implementation:

LMS and Exam Platform Integration

  • Utilize LTI or APIs for ease of use, single sign-on (SSO), and seamless user experience.

Infrastructure and Scalability

  • Assess bandwidth and storage needs based on expected concurrent sessions to ensure performance.

User Experience: Onboarding and Checks

  • Implement client-side checks for camera and microphone functionality to ease user onboarding.

Support and Incident Handling

  • Establish real-time support during exams and detailed appeals processes.

Remember to choose deployment methods based on compliance needs; whether on-premise or cloud services, ensure data locality meets requirements.


Privacy, Ethics, and Accessibility — Risks and Mitigations

Address potential privacy and ethical issues proactively:

  1. Privacy Transparency: Clearly describe data collection processes, retention, and access controls.
  2. Bias in AI: Ensure fairness in AI applications by emphasizing human supervision and diverse datasets for model validation.
  3. Accessibility: Offer multiple alternatives to webcam requirements, complying fully with WCAG standards.

Choosing a Provider: Checklist

This checklist helps evaluate potential proctoring vendors:

  • Security & Compliance: Ensure encryption standards and penetration testing are validated.
  • Privacy & Data Residency Needs: Confirm support for local data residency through effective DPAs.
  • Operational Capabilities: Assess service uptime and ability to handle peak demands.
  • Accuracy & Anti-Fraud Effectiveness: Request metrics on false positives and detection capabilities.
  • Integration & User Experience: Check for available APIs and pre-exam support tools.

QuickView Checklist Table

AreaAsk / Validate
SecurityEncryption standards, third-party audits
PrivacyDPA availability and biometric data handling
AccuracyPerformance metrics and review workflows
IntegrationAPI support and user-friendliness
OpsScalability and storage solutions

  • Privacy-Preserving Biometrics: Innovations reducing data sharing through on-device processing.
  • Federated Learning: Advances in model training without centralizing sensitive information.
  • Regulatory Changes: Tighter restrictions on biometric data usage are expected.
  • Accessibility by Design: Increased integration of accessibility from the start.

Conclusion & Further Reading

Remote proctoring is a multifaceted toolkit; carefully select components based on your candidate demographics and exam requirements. For practical next steps:

  1. Align exam types to suitable proctoring modes.
  2. Conduct pilot tests utilizing a diverse candidate pool.
  3. Carry out DPIAs and consult with legal teams.
  4. Use the provided checklist to shortlist potential vendors.

Further Reading

  • NIST SP 800-63: Digital Identity Guidelines: Link
  • ISO/IEC 30107-3:2017 – Biometric Presentation Attack Detection: Link
  • UK ICO Guidance on Online Exams and Remote Invigilation: Link

For additional internal resources referenced in this guide:


Call to Action: Start with a focused pilot. Select a single course or exam to document your DPIA and consent, run trials with diverse candidates, and refine your policies for wider implementation. Remote proctoring is as much about procedural integrity as it is about technology—ensuring thoughtful integration is key.

TBO Editorial

About the Author

TBO Editorial writes about the latest updates about products and services related to Technology, Business, Finance & Lifestyle. Do get in touch if you want to share any useful article with our community.