Secure Remote Exam: What Level of Proctoring for Each Stakes Level?

A remote exam is not secure by default. It is secure in proportion to the effort invested in it.

The problem: most organisations apply the same level of surveillance to all their exams. Too little for the ones that really matter – and sometimes too much for those that do not justify the investment. In both cases, the framework is miscalibrated.

The right question is not « do we need proctoring? ». It is « what level of proctoring for what level of stakes? ». The answer changes depending on what is at stake for the candidate, for the organisation, and for the third parties relying on the results.

---

1. Defining the Stakes Level of Your Exam

Before selecting a proctoring level, three dimensions must be assessed.

What Is at Stake for the Candidate

A formative module quiz does not have the same consequences as an admissions competition or a professional certification exam. The greater the consequences for the candidate – obtaining a qualification, accessing employment, being awarded a recognised title – the greater the temptation to cheat, and the more robust the framework needs to be.

What Is at Stake for the Organisation

The organisation’s liability differs according to the type of assessment. For a low-stakes formative evaluation, legal exposure is minimal. For a recognised professional certification, a selective competition, or an auditable exam, the organisation must be able to prove that the assessment was conducted under conditions guaranteeing the integrity of results.

In the event of a challenge – a rejected candidate’s complaint, an audit – the absence of evidence exposes the organisation. Session logs, video recordings, and incident reports are not accessories: they are the defensive case file.

What Is at Stake for Third Parties

An employer recruiting on the basis of a selection test, a certification board awarding a recognised title, a competitive institution selecting future students: all rely on the integrity of the process. If that trust is undermined by undetected fraud, it is the value of the title or selection itself that is called into question.

---

2. The Stakes / Proctoring Level Matrix

Stakes level / recommended proctoring level matrix

Stakes level	Examples	Recommended format	Human supervision	Traceability required	Operational cost
Low – continuous assessment	Module quiz, take-home assignment	Browser lockdown	No	Minimal	Very low
Medium – end-of-module exam	End-of-semester exam, recruitment test	Asynchronous AI proctoring	Post-exam alert review	Archived incident report	Low to medium
High – certification / admissions	Professional certification, university entry exam	AI + live hybrid	Real-time intervention on alerts	Complete logs + recordings	Medium to high
Very high – regulated / national exam	National competitive exam, regulated professional exam	Full live (3 streams)	Dedicated invigilator throughout	Complete evidence file, long-term archiving	High

---

3. The 4 Practical Cases

Continuous Assessment in Training: Lockdown Is Sufficient

For a module quiz, a low-weighted assignment, or a formative assessment with no certificative value, browser lockdown covers the essentials.

The limit is clear: a candidate with a second device can bypass the lockdown undetected. For low-stakes assessments, this residual risk is acceptable. For everything else, it is not.

End-of-Module Exam, Recruitment Test: Asynchronous AI Proctoring

For exams whose results have real consequences – a grade that counts towards a qualification, a selection test for a position – asynchronous AI proctoring provides the appropriate security level without prohibitive cost.

AI records the session, analyses suspicious behaviours, and generates a post-exam incident report for review. The pedagogical manager or HR officer reviews the alerts and decides. This is scalable: the same framework works for 50 or 5,000 candidates.

The key caveat: AI alerts are not evidence. They guide the human review. A sanction based solely on an algorithmic alert, without verification, exposes the organisation to challenge.

Professional Certification, Admissions Competition: AI + Live Hybrid

A professional certification, a university or business school entry competition, a recognised sector certification: these assessments justify a higher level. The stakes for the candidate are significant. The obligation of evidence for the organisation is real.

The hybrid approach combines continuous AI proctoring – for coverage and recording – with a human supervisor available in real time to intervene on critical alerts. AI filters. The human decides and documents.

This format produces a solid evidence file: video recordings, timestamped logs, incident reports annotated by the invigilator. In the event of a challenge or audit, the organisation can justify every decision.

National Exam, Regulated Assessment: Full Live

For exams whose integrity determines an irreversible high-stakes collective decision – national competitive exam, access to a regulated profession, certification issued under a public authority mandate – full live proctoring is the only defensible option.

A dedicated invigilator monitors continuously, with 3 simultaneous streams: video (webcam), audio, and screen sharing. Every incident is documented in real time.

The cost is high – one invigilator per 8 to 15 simultaneous candidates. But in this context, the cost of undetected fraud is higher still: exam invalidation, legal proceedings, loss of institutional credibility.

---

4. What a Secure Remote Exam Requires Technically

Whatever proctoring level is selected, a secure remote exam rests on non-negotiable technical foundations.

Multi-Layer Anti-Cheating

Security does not reduce to the webcam. A robust framework combines multiple layers: browser lockdown, question randomisation (each candidate receives a different paper), tab switching and copy-paste attempt detection, and behavioural monitoring.

Each additional layer closes a specific vulnerability. Removing a layer reopens it.

Identity Verification

A monitored exam without identity verification does not guarantee the right candidate is at the computer. Verification can be automated (facial recognition against a reference photo) or human (the invigilator checks ID in real time). It must be documented – timestamped and archived.

Auditable Logs and Data Protection Compliance

Every candidate action must be traced: connection, duration, incidents, disconnections. These logs constitute evidence in the event of a challenge. They must be timestamped, tamper-proof, and retained for a period appropriate to the stakes of the exam.

Video data collected during surveillance is sensitive personal data. Its hosting in Europe, retention period, and access rights must be documented in compliance with GDPR and the guidance of the applicable data protection authority – the ICO in the UK, or the relevant national DPA within the EU.

A Solution Matched to Stakes Level

TestWe Remote Supervision covers the full spectrum: PRO-VIEW for asynchronous monitoring on medium stakes, PRO-LIVE with 3 streams for high-stakes exams with real-time human intervention. Both modes are certified compliant with European data protection authority guidance and host data in Europe. For organisations also looking for a complete exam platform, TestWe integrates this natively – from question creation to result archiving.

To compare market solutions, see our comparison of proctoring solutions.

---

Conclusion

Securing a remote exam is not a binary choice. It is a slider to position according to the actual stakes of the assessment.

Four rules for calibrating the right level:

• Low stakes, formative assessment: lockdown is sufficient.
• Medium stakes, results that matter: asynchronous AI proctoring. Scalable, cost-effective, with incident reports for human review.
• High stakes, certification or competition: AI + live hybrid. Evidence must be solid in the event of a challenge.
• Very high stakes, regulated exam: full live. Continuous human supervision is the only legally defensible option.

The proportionality principle is not only a regulatory requirement. It is also a management rule: over-surveilling is costly and degrades the candidate experience. Under-surveilling exposes the organisation.

---

FAQ