• Background
• Test Developers
• Test Publishers
• Test Users
• Technological Issues
• Quality Issues
• Control Issues
• Security/Privacy Issues
• Official Translations
• Acknowledgements
• References
• Appendix
• Glossary

International Test Commission

International Guidelines on Computer-Based and Internet Delivered Testing

Make appropriate provision for security and safeguarding privacy in CBT and Internet testing

1. Know the features that have been developed to ensure the security of test materials, and develop procedures that reduce unauthorised access to such materials.
2. Respect the sensitive nature of test materials and intellectual property rights of test publishers/developers.
3. Protect test materials from being copied, printed, or otherwise reproduced without the prior written permission of the holder of the copyright.
4. Protect passwords and usernames from becoming known to others who are not authorised or qualified to have them.
5. Inform the service provider/publisher of any breach in security.

1. Prior to test administration, have knowledge of and inform test-takers of the security procedures used to safeguard data transmitted over the internet.
2. Confirm with the service provider that they frequently back up data.
3. Verify that the service provider is able to allow test users and authorised others to discharge their responsibilities as data controllers under local data protection and privacy legislation (e.g. the European Union’s Directive on Data Protection).

1. Know how confidentiality will be maintained when data are stored electronically.
2. Adhere to country-specific data protection laws/regulations governing the collection, use, storage and security of personal data.
3. Protect all material via the use of encryption or passwords when storing sensitive personal data electronically on test centre facilities.
4. A pply the same levels of security and confidentiality to backup data as to the data on the live system when backups are used to store personal data.