19
www.caveon.com 1 Security Challenges in Developing New Testing Programs Coffee and conversation... Josephine Elizaga Jamie Mulkey Genesys Caveon, LLC Caveon Webinar Series

Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

Embed Size (px)

DESCRIPTION

Think back to when you first started your certification program... there were so many things to think about: • Who will develop your items? • Where were items going to be housed? • Where will the tests be delivered? • Who was going to do the fulfillment of certification awards? What you weren't thinking about: • How am I going to protect my test questions from getting stolen? Join us for a virtual coffee and conversation as we discuss the processes you can put in place, things you can do, and tools you can use to stop test theft before it happens. Two programs will be featured and you'll hear lessons learned from each. Josephine Elizaga, Senior Manager of Certification for Genesys will present information from her experience with the recently released Genesys Professional Certification Program. Josephine has fifteen years of experience in training and certification with HP Software Education. She holds an engineering degree with further studies in instructional design and training methods for business and industry. Jamie Mulkey, Executive Director of the Certified Exam Security Professional (CESP) Program and Vice President of Client Services for Caveon, will present some key strategies currently being deployed for the upcoming CESP - Generalist exam. Even if your certification program is not-so-new, you will gain insight on security tips and techniques that will strengthen your testing program.

Citation preview

Page 3: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 3

About our speakers…

• 20 years experience in Information Technology – Software Training industry

• 15 years with Hewlett Packard Software Education

• Experience gained from HP ExpertONE program

• Sr. Manager for Certification, Genesys

Josephine Elizaga

Page 4: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 4

About our speakers…

Jamie Mulkey • 7 ½ years Caveon• 20 years managing,

consulting with certification programs

• CESP Certification Program Executive Director

Page 5: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 5

Agenda

• When’s the time to consider test security?

• What are some resources I can use?• How do I talk with my management

about test security?

Page 6: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

6

Exam Development Cycle

Planning and Analysis Design Development (and Review) Implement Evaluate

Approval for the exam project

• Beta test phase• Feedback

• Business plan• Components in

place:• Resources• Guidelines• Policies• Infrastructure

(technology and organizational)

• Item design and dev workshop

• Competency blueprint

• Exam outline draft document

• Exam bank• Technical review• Psychometric review• Angoff review

• Feedback• Score

adjustment

launch

Page 7: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

7

When Do I Start Thinking about Exam Security?

Planning and Analysis Design Development (and Review) Implement Evaluate

Approval for the exam project

• Candidate agreement for test takers

• Business plan• Components in

place:• Resources• Guidelines• Policies• Infrastructure

(technology and organizational)

• NDA for exam reviewers

• System to gather and distribute input from exam designers

• System to gather input from exam reviewers

• NDA for exam writers

• Infrastructure to house the exam bank

• System or process to review the exam bank without distributing documents

• Ability to create multiple forms

• Monitor exam activity, community channels

In every single phase of the cycle

Page 8: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

What Do I Have Set Up?

• Policies– NDA– Candidate Agreement– Cheating policy

• Guidelines– Item writing guidelines– File-naming guidelines– File distribution guidelines

• Infrastructure (technology and organizational)– Exam development and delivery system– Exam review applications and system (Angoff forms,

psychometric review, form build)– Relationships with legal, marketing, customer support and web

organizations

8

Page 9: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 9

Why is a well-crated candidate agreement important?

Importance of a well-crafted Candidate Agreement• Binding contract• Defines relationship• Memorializes rights/obligations• Makes expectations and remedies clear

(if done properly)

Page 10: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 10

How Do You Talk with Management about Test Security?

• Education management– Exam validity and valid test results

• Other organizations like marketing and legal– IP theft and monitoring

• Executive management– How certification can help the business and

what resources are needed to make it happen

Page 11: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 11

How do you monitor the web when one person is responsible for a program?

• I seek the help of Marketing, Customer Support and Web Administrators who are in charge of the organization’s forums.

Page 12: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 12

What Mechanisms Will You Use to Detect Cheating?

• Web monitoring– Checking chat rooms, brain

dump sites, forums for chatter

• Statistical analysis – Making sure thresholds are

in place to make policy decisions about invalidating test scores

Page 13: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 13

What test security advice do you have for a new testing program manager?

• Don’t wait until you have the first instance of cheating before you start thinking of protecting your IP.

• Establish relationships with the legal, marketing and customer support organizations in your company. – We may be a one-person program but we

can utilize the expertise of many others in the company.

Page 15: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 15

What is the new CESP program doing to integrate security upfront?

• Designed with security in mind• Item Type – Discrete Option Multiple

Choice (DOMC) www.trydomc.com

• Resource usage considerations• Registration• Test administration

Page 16: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

DOMC example

www.caveon.com 16

Page 17: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

Test Security Incident Response Plan

An incident happens…

• What will you do?• Who will you contact?• What are the sanctions?• How do you respond?• How do you communicate with stakeholders?

www.caveon.com 17

Page 18: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

www.caveon.com 18

We’re out of coffee…

• Integrating test security into the exam development life cycle

• Putting processes, policies, & procedures in place

• Talking with management about the importance of test security

• Maximizing your security dollars as new program

Page 19: Caveon Webinar Series - Security Challenges in Creating Testing Programs - September 2014

THANK YOU!

- LinkedIn Group – Test Security- Follow Caveon on twitter @caveon- Check out our blog…www.caveon.com/blog/- LinkedIn Group – Caveon Test Security

Jamie Mulkey, Ed.D.VP, Client [email protected]

Josephine ElizagaSr Manager for [email protected]