Organizing Professional Certification Exams

A complete redesign. That is how the International Organization for Standardization describes ISO/IEC 17024:2026, published in March 2026, the most significant revision of the personnel certification standard since 1999. For certification bodies operating internationally, the room for interpretation has narrowed. Organizing professional certification exams now requires more method, more evidence, and more anticipation.

The same dynamic plays out under regional frameworks. In the United States, ANAB, the ANSI subsidiary, and the NCCA operated by the Institute for Credentialing Excellence, both anchor their accreditation programs in ISO/IEC 17024. In the United Kingdom, Ofqual has launched in 2026 a consultation on stricter recognition criteria for awarding organisations operating qualifications referenced against the Regulated Qualifications Framework (RQF). Across the European Higher Education Area, ENQA members align their quality assurance practices with the same body of standards.

Industry sectoral bodies, universities, large training providers, professional associations: any organization issuing credentials referenced against the European Qualifications Framework, an Ofqual-regulated qualification, or an ANAB-accredited certification is concerned. The 2026 edition introduces explicit requirements on AI use, remote examination integrity, and traceability that were absent in the 2012 version. A single documentation gap can compromise an accreditation or trigger corrective actions from the accreditation body.

How many members on the panel? How can assessment methods be justified for each competency unit? Which records must be kept and for how long? What can be reasonably digitized without compromising integrity? These questions come up in every session.

The challenge is no longer just about running an exam. It is about steering a full certification scheme: assessment framework, exam design, scheduling, panel, traceability, archiving. This guide covers the essential steps to organize a compliant and sustainable session in line with international standards.

1. The 2026 regulatory framework: what ISO/IEC 17024:2026 changes

ISO/IEC 17024:2026, published in March 2026, marks the most important restructuring of personnel certification requirements since the standard replaced its 1999 edition. It revisits the principles applicable to certification scheme design, impartiality, remote examination, and the use of AI in any part of the certification process.

The new requirements for certification bodies

A certification body must now document much more upstream. The scheme owner role has been clarified: each certification scheme must be formally maintained, with documented competence requirements, prerequisites, validity duration, and surveillance mechanisms. The certification body becomes the quality steward of its scheme throughout the registration period, not only at the moment of accreditation.

Outsourcing has been tightened. The certification body must keep full responsibility for the decision on certification. This decision cannot be outsourced to any other body. Any contractual relationship with assessment partners or remote proctoring providers must be documented and audited.

AI integration and remote examination

Two areas have been substantially reinforced in the 2026 edition.

• AI tools used in certification activities must be trustworthy, transparent, and subject to human oversight
• Remote examinations must offer equivalent confidence to supervised in-person assessment, including robust identity verification and controlled conditions

These updates align ISO/IEC 17024 with broader international expectations on AI governance, including the EU AI Act for European certification bodies and parallel frameworks in the UK and the US. They make the documentation of the certification process non-negotiable. Every requirement must be justified by concrete, traceable, time-stamped evidence.

Transition timeline 2025-2026

ISO/IEC 17024:2026 came into force in March 2026. Certification bodies accredited under the 2012 edition typically have a transition period of three years, during which they must align their schemes with the new requirements. National accreditation bodies publish their own conversion calendars: ANAB in the United States, UKAS in the United Kingdom, A2LA and IAS for international scope.

In parallel, Ofqual launched in March 2026 a consultation on new recognition criteria for awarding organisations, in the wake of the UK Curriculum and Assessment Review. The criteria emphasize prior recognition, demonstrated expertise on the required scale, and reliable systems and processes. UK awarding organisations should expect a phased recognition timeline running through 2028. In the US, the 2021 NCCA Standards remain the operational benchmark for voluntary certification programs and align with the new ISO requirements on impartiality and assessment integrity. For higher education awarding bodies, the alignment with the European Higher Education Area’s quality assurance standards remains a parallel reference. ISO/IEC 17024:2026 becomes the operational reference document for all decisions taken by the certification body during this transition.

2. Frameworks and exam design: the foundations of a session

Before considering the panel or the calendar, organizing exams rests on a foundation: the certification scheme. A professional certification scheme aligned with ISO/IEC 17024 is built around three normative components that cannot be separated. Every assessment must connect to a precise element of this foundation.

The three components: job analysis, competence requirements, assessment scheme

The job analysis describes the professional activities of the role concerned. The competence requirements structure these activities into units of competence that can be validated independently. The assessment scheme identifies the methods and criteria used to evaluate each unit. These three components together form the documented certification scheme required by clause 8 of ISO/IEC 17024.

The assessment scheme is the reference document for designing exams. It defines, for each competence: which method to retain, which performance criteria, which level of demand, which evidence is expected. A poorly formalized scheme weakens the entire chain. Conversely, a solid scheme makes exam design almost mechanical.

Aligning exams with units of competence

Each unit must be evaluated by at least one method. ISO/IEC 17024 requires that assessment methods be fair, valid, reliable, and consistent. Schemes that allow modular validation, similar to the European Qualifications Framework approach, require that each unit be independently validatable. This rules out single exams that combine competences from several units without allowing the panel to distinguish acquisition unit by unit.

This constraint shapes design. The certification owner must think about exam structure unit by unit, ensuring each one is supported by its own body of evidence. A professional project can cover several units, provided each unit has a separate evaluation grid and an independent decision from the panel.

Choosing assessment methods

ISO/IEC 17024 allows a wide variety of methods, on condition that each one is consistent with the competence being assessed. Certifications usually combine several formats.

Assessment methods available for a unit of competence

Method	When to use it	Typical evidence
Final written exam	Measuring knowledge under standardized conditions, on a set date	Marked papers, scored MCQs, oral defense in front of a panel
Continuous assessment	Assessing progress in real conditions, across several moments	Dated scores, recorded observations, assessment file
Workplace simulation	Verifying a complex skill in conditions close to the actual role	Case study, role-play, deliverables, panel observation grid
Oral defense	Validating analysis, posture, and capacity to argue	Presentation, scoring grid, dissertation or summary note
Professional portfolio	Documenting real experience already acquired	Work deliverables, reports, employer attestations
Recognition of prior learning	Recognizing experience acquired outside formal training	Evidence portfolio, panel interview, workplace simulation

The choice of method must be justified by the competence being measured. A procedural competence (a technical skill) suits a workplace simulation. An analytical competence is verified through written case study or oral defense. Combining methods within a unit strengthens the reliability of the assessment: the broader the body of evidence, the stronger the final decision of the panel.

3. Setting up an impartial and competent assessment panel

The quality of the panel determines the value of the certification. ISO/IEC 17024 sets precise rules on its composition, impartiality, and operations. Any deviation here weakens the decision and exposes the certification body to suspension by its accreditation body.

Regulatory composition

The panel must include at least two persons. The impartiality rule is stricter: panel members must be free from any conflict of interest with candidates, and the certification body must demonstrate this independence through documented criteria. Specifically, individuals who have provided training to the candidate within the past two years cannot participate in the certification decision for that candidate.

Impartiality also means the absence of subordination links between panel members and the certification body’s commercial activities. Members may be compensated for their time, but this compensation cannot take the form of a salary or a disguised service contract. When the certification body is represented on the panel, all members have equal weight in the final decision.

« The decision on certification can only be made by the certification body and cannot be delegated. The certification body shall ensure that personnel involved in the certification activities are competent for the function to be performed. »

ISO/IEC 17024:2026, Conformity assessment – General requirements for bodies operating certification of persons

Training and managing assessors

Independence alone is not enough. Panel members must hold the competences required to appreciate those of the candidates. This means a sound knowledge of the role concerned, of the assessment scheme, and of the criteria specific to the certification. Without preparation, two assessors facing the same candidate can deliver divergent decisions on the same unit.

The most mature certification bodies put in place a formal training program for assessors, with presentation of the scheme, calibration exercises on grids, and case simulations. A regular refresher process completes the system. This practice is recommended by all reputable accreditation bodies and is a strong signal during audit.

Managing decisions and tracing them

The decision is collegial. Each candidate is evaluated individually, then discussed by the panel. The decision applies to each unit, not only to the full certification. This granularity is essential: a candidate can validate three units out of four and benefit from a partial credentialing record.

The traceability of the decision is now a major audit point. Signed minutes, evaluation grids per unit, justifications for refusals, retention of papers and deliverables: each element must be retrievable within the records retention period defined by the accreditation body, typically five to ten years depending on jurisdiction.

4. Securing and tracing the full session

A session does not end on exam day. It begins with candidate notification and ends with the delivery of the certificate, sometimes several months later. Securing this chain requires anticipating the operational logistics, the documentary traceability, and the integrity of the exams.

Planning the session step by step

Planning an exam session is built backwards from the exam date. Candidate notification at least two months before the session, room booking, panel mobilization, paper preparation, communication of detailed conditions: dates, times, location, authorized materials, reasonable accommodation provisions for candidates with disabilities. Each step must be documented and dated.

This discipline is especially important for multi-site or multi-cohort sessions, where organizational gaps can create fairness disparities between candidates. An unclear notification on authorized materials is enough to invalidate an exam if a candidate disputes it.

Tracing assessments: five years minimum

Retaining evaluation evidence for at least five years is an obligation, not a comfort. In case of an audit by the accreditation body, these elements must be immediately available, organized by session, by candidate, and by unit.

The minimum elements to retain include:

• candidate papers, deliverables, and productions
• completed and signed evaluation grids
• minutes of the panel with justifications
• presence and pass/fail attestation per unit
• identity verification and exam conditions records

A structured digital archive is now the most solid solution. On paper, the risk of loss or disorganization grows mechanically with the volume of sessions.

Ensuring exam integrity

Fairness between candidates is one of the foundations of any quality framework. It implies that each candidate sits the exam in the same conditions, with the same tools, the same allocated time, and the same identity verification. Fairness disruptions, even unintentional, are now recurrent audit findings.

The candidate’s identity must be verified upon entering the session, and exam conditions must be consigned in a signed document. For remote sessions, identity verification deserves particular attention, as we will see in the next section.

5. Digitizing exams: opportunities and safeguards

Pressure to digitize is rising. Remote exams, assisted marking, digital archiving: the tools exist and the operational benefits are real. But data protection regulations strictly frame what a certification body can do remotely.

Which formats can move online

Not every method digitizes well. MCQs, written case studies, oral defenses, and document production exams transfer online with a good reliability level. Complex workplace simulations, which require fine in-person observation, remain harder to transpose.

The right reflex is not to reason by principle but by competence being assessed. A writing competence verifies as well remotely as in person. A relational competence on the ground requires an observation setup that webcams cannot replicate.

Remote proctoring, data protection, and integrity

ISO/IEC 17024:2026 makes remote examinations explicitly subject to equivalent confidence requirements. Proctoring tools are intrusive by nature. This requires two principles: data minimization and clear information to candidates on the nature and duration of the surveillance.

The certification body remains responsible for the data processing, even when relying on a third-party provider. The contract must guarantee that data collected is used only to administer and monitor the exam, and that it is deleted within clear deadlines. Certain AI uses in proctoring are classified as high-risk by the EU AI Act, which further reinforces documentation obligations in Europe.

Digital archiving and auditability

Digital archiving transforms traceability. Done well, it makes every piece of evidence immediately retrievable, time-stamped, and auditable. It also makes the multi-year retention manageable, which becomes unmanageable on paper beyond a certain volume of sessions.

Three minimum technical requirements for a digital system: file integrity (checksum, signature), access traceability (who consulted what, when), and continuity plan in case of incident. These are the elements that make the difference between simple storage and probative archiving.

Five key takeaways for running a compliant session

Organizing professional certification exams now requires a full operational discipline. Five points structure every session:

1. ISO/IEC 17024:2026 has tightened the rules. Every scheme must anticipate the new criteria and prepare traceable evidence.
2. The job analysis, competence requirements, and assessment scheme form the non-negotiable foundation of every exam.
3. The panel must include at least two members with documented impartiality. Without this independence, the decision is fragile.
4. Documentary traceability over five to ten years is no longer optional, it is an audit point.
5. Digitization is possible but requires solid data protection mastery. The responsibility for the processing remains with the certification body.

Beyond compliance, these steps describe a deeper requirement: that of a certification scheme capable of holding up over time, audit after audit, candidate after candidate. The value of a credential rests as much on what happens before the session as during it.

FAQ