Closing Note | Exam Security Summit 2026 | The In-center Edition

This closing addresses the summit's key themes, tracing how organizations are returning to physical centers only to face modern, evolving threat surfaces like AI hardware and AI-generated fake IDs. It correctly notes that proxy testing is a continuous threat that doesn't stop at the front door, meaning remote proctoring capabilities like AI monitoring must be brought inside the testing room. Ultimately, the summary enforces that protecting a credential's value requires a defensible chain of evidence, a commitment to never prioritize speed over security, and a balance of the right people, processes, and technology. 

Transcript

Copy Transcript Copied

SPEAKER_00 0:01

Hello everyone. Thank you all for being here today. I hope you found these sessions as interesting and thought-provoking as I did. They started this morning with a clear point from the keynote, from the San Jose keynote. This test center was never really secure. It was simply not being watched closely enough. And the across three sessions, we started looking what it takes to change that. In the first session, one that Ashwin, Erika, and Lauren talked about the reality of uh running test centers at scale. So, one thing that really stayed with me was the check-in process. In many centers, it still comes down to a person looking at a government ID and comparing it with the person standing in front of them. That process uh haven't changed in 10 years, but threat has changed. Now you can see A generative fake IDs are getting cheaper, better, and easier to make. So we are trying to deal with a modern threat using a process that is more than 10 years old. Eric also shared that ASIS had two of its four exams found online in the last couple of years. And from September, they're pulling back from remote proctoring and moving candidates back to test centers. And that is a big decision. So, but moving back to test centers does not mean we are automatically safe. It simply means we are dealing with a different set of risks. And that was focused in the second session. So Steve, Charles, and Michael highlighted four major risks. Uh, devices being brought into the room, identity checks that depend too much on human judgment. You can see insider pollution and content leaks. Michael also made an important point about proxy testing. It does not sound very high-tech, but it can be very simple. Someone can just look enough like a candidate to get into through the check-in process and uh they can still manipulate the exams. And that brings us to the third session. Ada, Bridget, and Raj you asked an important question. What should be the modern test center actually look like? For high-stak exams, especially in healthcare licensing and immigration, the cost of getting it wrong is simply too high. A test center can provide something, remote testing still struggles to provide a clear, defensible chain of evidence. But a modern test center cannot simply be an old test center with better cameras. We need to rethink identity, we need to use digital IDs and new forms of verification. Uh remote proxy already gives us this useful capabilities, uh, continuous identity checks, AI assisted monitoring, device detection, and these help spotting unusual behavior during the exam. The question is uh why should these capabilities stay limited to remote exam? We should bring some of them into a test center as well. Because as Ada pointed out, proxy testing is not just only a check-in problem. It can happen during any point during exam. Uh, that means we need to keep watching, not just check once and move on. And finally, I think there was one message that came across all three sessions. Security is not just about having the right technology, it is about preventing problems, detecting them when they happen, and making sure everyone understands the risks. And that brings me back to Bridget said we should never choose speed over security. A modern center needs the right technology, the right process, and the right people because the ultimately the value of credential depends on how much we can trust the process behind it. And thank you. Thank you all for your wonderful contribution. And uh, we hope you have enjoyed the discussions today. And we really look forward to seeing you in the next summit. Uh, thank you. Have a great day. Bye.