Behind every credential:

The hidden work of safeguarding high‑stakes exams in a digital world

  • Blog Post
  • Talent & Leadership
  • Innovation

by Eric D’Astolfo, Vice President, Professional Markets, Pearson Professional Assessments and Dan Doyle, Head of Product Management, Pearson Test of English, Pearson English Language Learning

Across education and professional fields, high-stakes assessments are more than just a test of knowledge; they are a promise to the public that an individual is qualified and competent. Protecting the integrity of these exams is therefore paramount to protecting entire professions and the communities they serve. Everyone in this ecosystem relies on testing they can trust to be reliable, fair, and secure.

When it comes to professional assessment and credentialing today, this trust faces unprecedented pressure. As credentials have become more valuable, organised fraud has become more sophisticated and resourceful. Incidents of test fraud, once isolated and uncommon, now reflect a global industry—inclusive of organised proxy testing and exam item-harvesting schemes shared across social media. Safeguarding trust now demands more dynamic intelligence-driven security that anticipates threats and intervenes before they do harm.

From professional licensure, certification, and regulatory exams to English language proficiency, we see similar patterns: fraudsters are scaling their methods, monetising misconduct, and exploiting new technologies. To guard against those techniques, security capabilities must evolve in tandem. The following behind-the-scenes look reveals the realities and requirements of modern exam security—involving a combination of multi-tiered security, human oversight, and rapid intervention.

A layered, purpose-built approach to exam security

Effective exam security doesn’t necessarily mean “more security”—it requires the right security, applied with intention and a client-centric approach, as each test sponsor will have their own unique risk profile. It is a continuous and iterative process, not a single action. This means implementing specific safeguards at every point of the candidate journey, starting with how exam questions are developed, continuing with precise monitoring during the exam, and ending with a detailed analysis of exam results. And of course, implementing industry best practices and adhering to regulatory requirements, with security and data protection embedded into every stage of the process. On test day, that sometimes means the controlled physical environment of a Pearson Professional Centre with biometric identity verification and in-person professional test administrators. Other times it involves a remote testing experience with AI-enhanced monitoring combined with human review and escalation. What emerges is a connected system of thoughtful test design, secure delivery methods, and meaningful data analysis—an evolving security framework that responds to new risks and helps keeps modern assessments fair and trustworthy.

To combat cyber-criminals using AI and advanced hacking techniques before they succeed, constant surveillance is essential. Mature security operations achieve this by leveraging data from tens of millions of annual exam deliveries.

Detecting and neutralising risk in high‑stakes testing

To combat cyber-criminals using AI and advanced hacking techniques before they succeed, constant surveillance is essential. Mature security operations achieve this by leveraging data from tens of millions of annual exam deliveries. This high-volume analysis, conducted by an experienced team of cybersecurity specialists and intelligence analysts, enables the early detection of anomalous patterns and emerging threats, which in turn strengthens the security posture of each individual exam programme.

Secure test delivery must be grounded in a suite of advanced tools and teams with the experience to effectively use them. Biometric identity checks such as palm vein scanning and facial recognition provide additional layers of certainty to validate that the person taking the exam is who they claim to be. Beyond visible security features, unseen methods like verifying a user's location and “no-test lists” operate in the background (for remote testing), further strengthening measures—so that only legitimate candidates from approved locations can access the exam.

AI-enabled proctoring platforms can flag indicators of suspicious behaviour in real time, triggering human intervention. Continuous monitoring and forensic analysis help uncover patterns that may point to candidate misconduct. Together, these strategies create a strong multi-tiered defence against modern security threats. 

Human expertise at the heart of every investigation

Technology enhances security, but human judgement remains essential. Drawing on deep expertise, security and investigations teams collaborate with test owners on risk assessment, escalation pathways, and candidate remediation decisions. Their work unfolds largely out of sight: gathering intelligence after attempts by bad actors, and sometimes even by organised criminal networks, to compromise high-stakes exams. And when a fraudulent act periodically occurs, investigators trace the sequence back step-by-step, reconstructing events with patience and precision. In rare but serious cases, findings—grounded in evidence, fairness, and policy—may support referrals to law enforcement. Such referrals are always conducted in close coordination with the test sponsor, acting at their direction to protect the integrity of their credential.

Security risks in both English language and professional assessments are growing more aggressive and technically advanced. Staying ahead of them requires constant innovation: the latest in biometrics, enhanced identity assurance, deeper data forensics, and the responsible use of AI. A proactive, collaborative security approach pairs these technologies with preventative action, often long before any outward signs of a problem appear. This commitment to innovation isn’t just about catching cheaters; it’s about safeguarding the value of credentials for all stakeholders. As the threat landscape continues to evolve, much of the work of ensuring exam integrity may be unseen, but its impact is felt across the globe.

  

Eric D’Astolfo is Vice President for Professional Markets within Pearson Professional Assessments. He works with credentialing bodies, certification programmes, and professional regulators globally, helping them design secure, high-stakes assessment strategies.

Dan Doyle leads Product Management and Delivery for Pearson’s English Language Learning (ELL) division. He specialises in digital assessment delivery, candidate experience, and the integration of emerging technologies into secure test design.