Jason’s Fight to Keep Kids Safe Online

Jason Galasso holding his grandson. Text says Protecting Kids Online Takes a Village... And Jason

Did you know that 90% of children have a device (phone, tablet, etc.) in their bedroom at night, half of those children have given their information to strangers they met online, and almost 20% of those kids have met with a stranger?

Pretty scary, eh? That’s why Jason Galasso, Senior Security Engineer at Honorlock, dedicates his time to educating students, parents, teachers across the US, and even senior citizens about the very real dangers lurking online.

About ten years ago, Jason and his wife attended a class at their daughter’s high school on keeping kids safe on social media.

But to his surprise, only two other couples showed up, and that’s when it hit him: “I thought, ‘If the kids and their parents aren’t here, how will they learn about it? How can parents teach their kids if they don’t know what they don’t know?”

It was that nearly empty classroom that started his mission. “That was the turning point for me. I knew I had to do something.” So he did. 

Jason earned a Certified Information Systems Security Professional (CISSP) certification, a globally recognized certification for experienced security professionals.

Jason Galasso holding grandson

This certification gives him the credentials to educate others about security threats, and with over 25 years of IT experience, Jason is well-equipped to protect ABC from a wide range of risks. He oversees the defense against known threats, manages vulnerability and penetration testing programs, leads security awareness training, protects our computer systems and networks, and assesses security risks while managing our Vendor Security and Bug Bounty programs.

Want Jason to speak at your school?
Message him on LinkedIn
REACH OUT

While cybersecurity is complex, Jason’s goal is simple: “Protecting kids today and setting them up to be better cybersecurity citizens in the future.”

Part of that means providing students, parents, and teachers with timely, relevant training and information, “Kids need to learn how to use the internet and technology responsibly, and part of that means parents, teachers, and schools being able to reinforce that.”

Three aspects of Jason’s approach help accomplish that:

1. Stay relevant: “Anything you discuss has to connect with what students, teachers, and schools actually use. Whether it’s social media apps students use and video games they play at home, or the technology and devices they use at school, it has to be relevant to their everyday lives.”

2. Be available: “Even if a teacher called me at midnight with a question, I’ll talk all night if it’ll help them keep students safe.”

3. Keep it simple: “I keep things simple to address issues and what they can do about it… Here’s a problem. Here’s a solution. Here are more resources to help you learn about it.”

Many of those resources come from two cybersecurity programs Jason works with, Be Internet Awesome with Google and the Center for Cyber Safety & Education by ISC2. These programs offer excellent resources that are consistently updated to keep up with cybersecurity risks and happenings.

Jason Galasso in a class teaching students about cybersecurity
Jason teaching students (faces blurred)

Cybersecurity tips & resources

Tips for different audiences

Online safety tips for kids
  • Create strong, unique passwords for every site.
  • Don’t share private information (like passwords) over email.
  • Never tell anyone your passwords—not even your friends!
  • When posting pictures on social media, deactivate geotagging from your photos.
  • If someone is cyberbullying you, tell an adult and remember it's not your fault!
  • Be careful what you post because once it’s online, it’s there forever.
  • Don’t meet people in real life that you only know from the internet.
  • Keep your social media accounts private and be careful about what you share.
  • Only accept messages and friend requests from people you know.
  • Don't post your address or photos of your house.
Tips above adapted from iamcybersafe.org
  • Create strong and unique passwords for every site.
  • Teach your children not to click on pop-ups.
  • Never send sensitive information over email.
  • If your children use social media, remind them to never meet with anyone they met online.
  • Restrict what your child can download until they are the appropriate age.
  • Many devices come with parental controls, use them!
  • Set up central charging stations in your home to keep all devices together.
  • Backup your data using cloud services or an external portable storage device.
  • Be vigilant about reviewing your credit card statements.
  • Shred all documents with personal information that you don’t need.
Tips above adapted from iamcybersafe.org
  • Use strong, different passwords for each website.
  • If you’re unsure about a scholarship, ask financial aid, especially if you didn’t apply for it.
  • Don’t check your bank info on public wifi.
  • Never email personal details like passwords or credit card numbers.
  • Turn off location on photos before sharing them online.
  • Keep your firewalls turned on and up to date.
  • Save your files using cloud storage or a portable drive.
  • Check your credit card statements carefully.
  • Shred papers with personal info that you no longer need.
Tips above adapted from iamcybersafe.org
  • Create strong and unique passwords for every site.
  • Never send sensitive information over email.
  • Do not check your bank information on open wifi.
  • Only accept friend requests on social media from people you know.
  • Shred documents with personal info that you no longer need.
  • Do not use online shopping sites that require you to enter personal information to access coupons or discount codes.
  • If you’re a victim of romance fraud, report it to the police.
  • Be mindful of email and phone call fraud attempts.
  • Question what you see in emails and pop-ups.
  • Download and stream from verified sites only.
Tips above adapted from iamcybersafe.org

Cybersecurity resources

Organization & link
Use cases
Have I Been Pwned
Check if your email address was leaked in a data breach
Identitytheft.gov
Report identity theft & resources to recover
FBI-SOS
Online safety tips for 3rd grade and up
ConnectSafely
General resources about online safety, privacy, security, and digital wellness
StopBullying.gov
Identify bullying and how to stop it
Stay Safe Online
Diverse resources about cybersecurity and staying safe online

Jason’s dedication to educating others shows how vital it is to stay informed and proactive because cybersecurity is everyone’s responsibility. With the right knowledge and tools, we can create a safer online environment for everyone.

Sign up for our blog

Unizin and Honorlock Expand Unizin Data Platform With Testing and Assessment Contextual Data

Incorporating Test-Taking Dynamics into Learning Journeys
Fills Gaps and Provides New Opportunities for Learning Analytics

AUSTIN, TX and BOCA RATON, FL (May 21, 2024) – Unizin, the non-profit member consortium of 14 leading U.S. academic and research institutions, and the leading proctoring service, Honorlock, announced the integration of contextual exam data into the Unizin Data Platform (UDP). The integration enables Unizin member institutions to incorporate basic test-taking parameters into one of the world’s largest repositories of real-time student learning data ever assembled. 

The UDP normalizes and integrates data from more than a dozen learning tools and learning management systems deployed across Unizin member institutions. Academic researchers, data scientists, IT teams, and administrative groups at Unizin member sites collaborate and use UDP data to conduct analysis and build tools to support student success initiatives, enhance student advising, design and refine teaching and learning strategies, and optimize courses.  

“For the magnitude of impact they have on grades, data representing how students navigate assessments are underrepresented in learning datasets,” explains Bart Pursel, Chief Technology Officer and interim CEO of Unizin. “We can see the outcome but have little insight into the process. Integrating data from Honorlock into the UDP allows us to expand upon existing techniques such as item analysis, helping faculty to continually refine assessments.” 

Currently, testing and exam data in the UDP is limited to test scores.  Integrating Honorlock into the UDP will add temporal data such as the time a student spends on a question, as well as student engagement with exam materials.  The UDP will not record any Honorlock test proctoring data or specific proctoring activities.  

“The partnership with Unizin will transform the landscape of academic integrity and online learning. Together, we will empower educators and institutions within the Unizin network with robust solutions to uphold the highest standards of integrity in online assessments,” said Michael Hemlepp, CEO at Honorlock. “This collaboration signifies our collective commitment to advancing the future of education, ensuring that every student’s academic journey is supported with integrity and fairness.”

Through its partnership with the consortium, Honorlock will offer Unizin member institutions preferred pricing on its award-winning remote proctoring platform. 

About Honorlock

Honorlock upholds integrity for academic institutions and professional credentialing organizations by combining its human proctors and AI-powered integrity platform to deliver scalable, on-demand proctoring. 

With Honorlock, organizations can deliver secured exams from anywhere while empowering test takers to do their best work with the flexibility of taking their exams without scheduling and at their point of readiness. Learn more about Honorlock’s proctoring services and software.

About Unizin

Unizin provides institutions with technology solutions and partnerships that enable them to scale their use of data, analytics, digital content and learning tools to improve outcomes and guide student success initiatives. Unizin is membership-based and governed by its member universities as a nonprofit 501(c)(3). To learn more, visit www.unizin.org.

Sign up for more news in online education

Media Contacts

Tony Labriola
PR for Unizin
tony@thinkinsideout.com

Heidi Murphy 
PR for Honorlock
Heidi.Murphy@PadillaCo.com

Jason Galasso holding his grandson. Text says Protecting Kids Online Takes a Village... And Jason
Did you know that 90% of children have a device (phone, tablet, etc.) in their bedroom at night,
The University of California Davis affirms Honorlock’s online proctoring service is the best solution for its faculty and
Open LMS to partner with Honorlock to deliver scalable, remotely proctored examinations to its open-source learning platform.
Honorlock selected to deliver ANAB accredited national certification exam  BOCA RATON, Fla. (Sept. 24, 2024) – Remote proctoring
Examples of how to prevent cheating on online math tests with remote proctoring tools, even if answers are
Docebo clients and Docebo University to both leverage Honorlock remote proctoring to safeguard training and assessment programs BOCA

Honorlock Achieves TX-RAMP Level 2 Certification for Secure Data Handling for Online Exam Proctoring

Certification Affirms Honorlock Commitment to Academic Integrity While Protecting Data

BOCA RATON, Fla. (March 26, 2024) – Honorlock, an online proctoring company for higher education and professional development, has successfully achieved Level 2 certification in the Texas Risk and Authorization Management Program (TX-RAMP).

As part of the Texas Department of Information Resources (DIR), TX-RAMP addresses the security of commercial cloud computing products and services that process data for Texas state agencies, including higher education. It is required for cloud-based software that processes, stores, or transmits data that is considered confidential.

With TX-RAMP certification, Honorlock has met the strict requirements needed to provide Texas educational and corporate institutions with access to safe and secure online proctoring for remote testing that also meets the rigorous security standards mandated by the state.

“Honorlock has access to a minimum amount of test-taker data, but we understand that protecting any and all data is critically important,” said Michael Hemlepp, CEO at Honorlock. “This certification reassures Texas state agencies and higher education institutions that Honorlock can be used and meets the outlined data management, security, and data governance standards. It also gives students peace of mind that any data shared during online exams proctored by Honorlock will remain secure and confidential.”

TX-RAMP Level 2 Certification is the higher of two designated levels of compliance with Texas-state cybersecurity standards for cloud technologies that process, store or transmit data that is deemed confidential and a source of moderate or high-impact information.

About Honorlock's Remote Proctoring Services and Software

Honorlock provides the best remote proctoring services and software for higher education institutions and professional education organizations. Our live proctoring solution is enhanced by AI to protect academic integrity and improve the assessment experience.

Honorlock’s approach to remote proctoring revolutionizes how academic and enterprise institutions promote equity in online courses and exams by upholding honesty and integrity and focusing on reinforcing the trust placed in learners while ensuring integrity for the institution, the instructors’ knowledge and value, and the exams themselves.

Sign up for more news in online education

Jason Galasso holding his grandson. Text says Protecting Kids Online Takes a Village... And Jason
Did you know that 90% of children have a device (phone, tablet, etc.) in their bedroom at night,
Honorlock, the leading online exam proctoring service, earned a spot as one of the Top 10 Superstars for
What's next in industry 4.0?
What is Industry 4.0? The simple answer is that Industry 4.0 uses really smart technologies to make companies

Honorlock Protects Student Privacy

How does Honorlock protect student data?

Have concerns about online proctoring and the privacy and security of your data? Don’t worry. Honorlock has you covered because student privacy is our top priority.

Watch the video below for a quick summary of how Honorlock protects and secures your data.

Common questions from students about data privacy & security with Honorlock's online proctoring solution

Does Honorlock sell my data or monetize my data to third parties outside of my school or university?

No. Honorlock will never sell or monetize your data.

What data does Honorlock collect from students using the service?

Honorlock collects a variety of information as explained in our Privacy Policy, such as: Student information (i.e. e.g., student name, course number, exam name. You will be asked to provide a copy of your student ID. This information is synced with your school’s learning management system (i.e., e.g., Canvas). You may be asked to upload a photo taken with the camera on your device and to do a scan using the webcam of your testing area. During the exam, if requested by your school, we collect a webcam video recording that includes desktop activity and audio recording. Exam and web pages visited by a student during an examination. If your school chooses to use a new Honorlock feature called App Unlock, in limited release, you will be asked to download an application onto your computer (in addition to installing a Chrome extension) designed to detect apps on your device that you use (or attempt to use) during the exam to help your school detect any use of prohibited programs during an exam. Honorlock’s widely available service operates solely through a Chrome extension (no application download) and doesn’t have this capability.

How long does Honorlock keep my data?

The standard retention period for student data is 365 days. Schools can customize the data retention period – shorter or longer – based on their privacy and accessibility policies and needs. Student data is deleted after this retention period. Only a request by a student’s educational institution will extend the retention period.

Is Honorlock tracking my online activities and watching me when I am not taking a proctored exam?

No, Honorlock’s service is designed to collect information (including information about websites you visit on your device) only during a proctored exam. In addition, you are free to uninstall the Chrome browser extension and any software you’ve been asked to install immediately following a proctored exam.

Where is my data stored and how well is my data protected?

All data in transit and data at rest is encrypted and stored within then cloud in an Amazon (AWS) data center. Amazon’s data centers are SOC 3 certified, U.S. Privacy Shield, and General Data Protection Regulation (GDPR) compliant.

Does Honorlock's proctoring platform use facial recognition to verify my identity?

No. Honorlock uses facial detection, which only detects that there is a clear human face in the webcam. We do not identify the face, store any of the facial elements, or match the face to a database. If no face is detected, or if multiple faces are detected, AI will flag the incident and a human proctor may intervene.

Does Honorlock have control of my computer or my mobile phone?

Honorlock’s widely available products use only a Chrome browser extension that uses AI to detect the presence of faces in your camera and different voices. A student will have to install the browser extension to take an examination. The student can immediately delete the browser extension following the examination. Honorlock does not have the ability to control your computer, read your passwords or download any files at any point in time. Honorlock does not have access or the ability to control secondary devices such as mobile phones. If your school chooses to use a new Honorlock feature in limited release, you will be asked to download an application onto your computer (in addition to installing a Chrome extension) designed to detect apps on your device that you use (or attempt to use) during the exam to help your school detect any use of prohibited programs during an exam. Honorlock’s widely available service operates solely through a Chrome extension to ensure accessibility in learning (no application download).

Need more reassurance?

Read these additional detailed resources about how we protect your privacy and data security.

 

Honorlock Completed the SOC 2 Type 2 Audit

Honorlock completed the SOC 2 Type 2 Audit

Honorlock exemplifies commitment to security, availability, confidentiality, privacy, and processing integrity with SOC 2 Type 2 Audit completion

Successful completion of the audit demonstrates Honorlock’s ability to effectively safeguard data

Boca Raton, Fla. (December 14, 2022) – Honorlock, an online proctoring company for higher education and corporate, completed the American Institute of Certified Public Accountants (AICPA) System Organization Control (SOC) 2 Type 2 audit.

Completion of the SOC 2 Type 2 audit confirms that Honorlock has the appropriate and correct system controls in place to safeguard customer data and that the system controls are operating as expected.

“Honorlock has access to a minimum amount of student data, but we understand that protecting any and all data is of the utmost importance,” said Michael Hemlepp, CEO at Honorlock. “Completion of the SOC 2 Type 2 audit demonstrates the value we place on Security and that Honorlock’s offerings meet the highest level of security compliance, going beyond SOC 2 Type 1 audits.”

The SOC 2 Type 2 audit provides reasonable assurance that Honorlock’s service commitments and system requirements were achieved based on trust services criteria relevant to security, availability, confidentiality, privacy and processing integrity.

Unlike SOC 2 Type 1 audits held by other online proctoring companies, which only review systems at one point in time, the Type 2 audit assesses system controls over time, observing and confirming effectiveness.

Successful completion of the audit provides customers with the confidence that Honorlock’s systems have been tested, confirmed and have the correct controls in place to ensure information and data are protected against unauthorized access.

Honorlock completed the audit through Insight Assurance, an auditing and consulting firm that provides cybersecurity compliance, risk management and advisory services. 

If you are an Honorlock customer and would like to read the full report, contact your CSM or email csm@honorlock.com

About Honorlock

Honorlock provides blended proctoring services and software to higher education institutions and corporations.

What is blended proctoring?

Simply put, blended proctoring combines AI and humans to protect online exams and support test takers.

How does blended proctoring work?

Our advanced AI software monitors each exam session and alerts a live proctor if it detect possible dishonest behavior.

Honorlock’s makes online proctoring simple, easy, and human. Our approach to proctoring online exams brings integrity, humanity, confidence, and positive outcomes for institutions, instructors, and test takers.

Sign up below to stay up to date with online learning, webinars, & more.

Be sure to visit our resources section

Tyler Stike

Tyler is Honorlock's Director of Content and a doctoral student at the University of Florida focused on educational technology.

Webinar: Evaluating Technology Vendors

In this digital age, higher education institutions are evaluating an increasing number of new technologies within online and hybrid learning environments. But are they doing all they can to ensure their technology partners are meeting security and privacy standards?

This webinar will guide you through what security really means in 2022 and how the confidentiality-integrity-availability (CIA) triad plays an important role in evaluating security. Additionally, you’ll learn how to assess your technology partners for secure practices and how to identify vendors that are actively fostering a security-first culture.

By the end of this entertaining and informative presentation, you will have the information you need to ensure that all of your third-party technology meets the highest security and privacy standards.

Outcomes

  • Formulate a clear picture of what security in the higher education space means
  • Develop a game plan for assessing technology vendors before implementing
  • Establish a set of guidelines to ensure the technology vendor shares the same security-first culture as your institution

Speakers

Paul Morales

Paul MoralesSVP Information Security

Article & cheatsheet: How secure is online proctoring software?

The security of online proctoring software is crucial for institutions and test takers because they want to know that their data is protected and private. Read about online proctoring software and services security.

It’s important to remember that the online proctoring company you work with becomes your partner because their security becomes your security. 

One thing to remember is that there’s no magic wand when it comes to security. Furthermore, there’s no destination; it’s an ongoing effort that is constantly evolving. It requires organizations to improve both proactive and reactive defenses.

Honorlock believes that every online proctoring company needs to focus on privacy and security practices and that’s why we’re sharing these insights as we improve. 

This article covers:

  • The CIA Triad of security
  • Security best practices for online proctoring companies
  • Online proctoring services compared: what to look for when vetting companies
  • Security assessment for online proctoring service vendors
  • Privacy & security technologies for online proctoring companies services
  • Overview on privacy & security practices at Honorlock

We also provide you with a downloadable cheatsheet that includes example security questions you should ask online proctoring companies. Read the article & download the cheatsheet.

Templated Proctoring Policy

copy and paste template for higher education remote proctoring policies

This page gives you a templated remote proctoring policy that can be copied and tailored to suit your needs.

The template below contains all the information needed to help inform instructors and students about remote proctoring, what it is, how it works, and what to expect.

Swap your information (institution name & abbreviation, etc.) out with the italicized text.

Remote proctoring policy

Academic integrity speaks to the reputation of Full Institution Name (Institution Abbreviation). Ensuring academic integrity in an online environment is just as important as ensuring academic integrity in a campus environment. Taking measures to protect this integrity is in the best interests of Institution Abbreviation and its students, alumni, and faculty.

In addition to existing policies regarding academic integrity, students enrolled in an online or blended learning course will follow additional policies and procedures that specifically apply to online or blended learning courses, such as remote proctoring.

General remote proctoring information

What is remote proctoring?

Remote proctoring, sometimes called online proctoring, uses software and/or live proctors to monitor students’ online exam sessions.

What remote proctoring service is used by Institution Abbreviation?

Institution Abbreviation uses Honorlock to proctor exams online. Honorlock provides remote proctoring services that use a combination of AI software and live proctors to support students during exams and protect academic integrity.

This blend of AI remote proctoring software and live proctors aims to protect academic integrity and to support students through a successful completion of their exam while

 reducing test anxiety.

How does Honorlock work?

Honorlock is a browser extension that uses artificial intelligence (AI) to monitor each student’s online exam session. If the AI detects potential issues, it alerts a live test proctor to review the situation and intervene if needed.

Remote proctoring information for instructors

The student is responsible for ensuring that they have the necessary system requirements (computer hardware, software, and Internet connectivity) necessary for the completion of the online exam. Additionally, students must check the online course within the Learning Management System (LMS) to determine if any additional software or hardware is needed. 

Instructors will provide students with the opportunity to complete online exercises, such as practice exams, to ensure that students meet the system requirements and have access to complete the online exam. 

Before you proctor exams online:

1. Discuss the use of Honorlock and offer practice exams

Review how to use Honorlock with your students. We encourage you to assign practice exams so students can gain familiarity with Honorlock’s Learning Tools Interoperability (LTI).

Note: You can set up the practice proctored exams to mirror the same settings that will be utilized on the actual assessment (including a room scan).

2. Include Honorlock remote proctoring information in your course syllabus

Be sure that students have access to information about Honorlock in your syllabus.

  • Recommended verbiage can be found here.
  • Additional information about Honorlock for students can be found here.

3. Address any student privacy concerns

Have an open dialogue with students and respond to any privacy concerns students may have about remote proctoring.

  • For more information on student privacy resources, visit this link.
  • Additional information on what students can expect during a proctored online exam can be found here.

4. Create awareness and understanding of room scans
Familiarize yourself and your students with what a room scan is and what they can expect from it.

5. Get a signed consent form for room scans

Instructors are encouraged to have their students sign a room scan consent form at the beginning of the course. Before students can log into the exam and take the online exam while using Honorlock’s remote proctoring services the student must acknowledge and accept Honorlock’s Exam Taker Privacy Notice and Honorlock’s Exam Taker Terms of Uses, which both contain notice and consent that the student’s surrounding workspace may be recorded by video and audio.

6. Explain what to expect during a remotely proctored exam
It’s important for students to understand what they can expect during a proctored exam.

Here’s what you can discuss with your students:

The different proctoring tools for online exams and the various settings that can be used and how they work

  • Use similar settings for every proctored exam so students know what to expect and are familiar with functionality.
  • Set up your practice exams to mimic the same settings throughout the semester/quarter.
  • An example of Standard Exam Guidelines language can be found here.

What in-exam flags are, their purpose, and what behaviors may trigger them

  • Share this article about in-exam flags with your students.

Provide clear, unambiguous test rules and instructions for all of your exams

  • Here’s an article with real examples of effective test rules and instructions for online exams and tips to remove any confusion.

7. Create a culture of academic integrity
Academic integrity goes beyond proctoring exams online. Creating a culture of academic integrity in your classroom can support positive decision-making during exams.

Read this article for some helpful tips to improve the academic integrity within your classroom.

Remote proctoring statement for instructors to share with students

The remote proctoring statement below can be provided to students in the course syllabus, in the course LMS, on the school’s website, and in an email:

Institution name instructors are given the discretion to require proctored exams, providing three options for students to test: on campus via the Institution name testing center, at a designated testing center, or through online proctoring. Institution name provides one option for remotely proctored exams through Honorlock. Online proctoring includes video monitoring and requires a room scan as part of the test session, which may be used in cases of academic misconduct. The room scan provides an opportunity for students to display their testing space, free of any unauthorized materials or persons, to ensure the integrity of the test session. The entire testing session will be recorded. A Google Chrome extension plug-in must be installed to use this proctoring service.  

Student nonadherence to the school’s online testing policies and procedures may include consequences including but not limited to: insert potential consequences, such as: email warnings with corrective actions or a grade penalty (e.g., 10% reduction) on the exam.

Addressing potential academic dishonesty

It’s up to the instructor to determine whether academic dishonesty has occurred during the proctored exam. Honorlock is a tool to assist you in making this determination. If academic dishonesty is suspected, please proceed according to the following information: [link to any pages with information for faculty on academic dishonesty]

If a student does not consent to be proctored online by Honorlock, instructors will provide alternative testing venues, such as:

Campus Testing Center: Instructors must provide students with advance written notice of date(s) and include links to institution-specific academic support services and how to access these services (e.g., location of testing center and/or proctored test sites, hours of operation, phone numbers, and email addresses for key personnel).

Off-campus Testing Center: For at-a distance students who are unable to test at an on campus testing center, instructors may offer proctored exams at an approved off-campus testing center. Students are responsible for identifying a testing center in their location and for providing the necessary information to the instructor so materials and instructions can be submitted to that site. Students may access the National College Testing Association for help identifying a testing center in their area. The instructor will provide the necessary test materials and instructions to the approved test location along with instructions for the return of the materials.

Supporting students’ accommodations

When using Honorlock’s remote proctoring software, you can specify any accommodations certain students may require. Notes in the Accommodations section are only visible to Honorlock proctors and support staff. Students cannot see the accommodations set for them.

Please note that only accommodations that relate to remote proctoring or authentication (Student Photo, ID Verification, Room Scan) should be listed here. Accommodations concerning exam availability, time extensions, number of attempts, and extended due dates are all managed within the LMS Name exam settings.

Please review Honorlock’s Accommodations page for more details.

Instructor support

Honorlock provides 24/7/365 support for faculty:

Remote proctoring information for students

What to know about Honorlock’s remote proctoring process:

Installing the Honorlock Google Chrome extension
Students don’t need to download software to use Honorlock. Instead, students only need to add the Honorlock Google Chrome extension plug-in, which can be removed after the exam. 
Get the Honorlock Chrome Extension here.

Checking the test environment
Remote proctoring requires a room scan, which means students use the webcam to show that their testing space is free of any unauthorized materials or persons. 

While the entire testing session will be recorded, only the Honorlock proctor or exam administrator have access to the recording. Furthermore, this means that no other students, instructors, or faculty members have access to the recording.

Exam scheduling isn’t required
Students can take proctored online exams 24/7/365 (within the allowed dates/times provided by the instructor) without scheduling an appointment with Honorlock in advance.

What software and hardware do students need to use Honorlock?

To take an online proctored exam with Honorlock, students need a functioning webcam and microphone and the Honorlock Chrome extension. Students do not need to download any software to use Honorlock.

System requirements:

  • Operating System: Windows 10, Windows 11, MacOSX 10.14 and higher, ChromeOS
  • Browser: Google Chrome (120+)
  • Internet Speed: Speed: 1.5 Mbps download, 750 Kbps upload

Recommendations for students

Take the proctored exam in a suitable environment
Students should take the proctored exam in a well-lit room with a computer on a clean surface that’s clear of any notes and prohibited items like: cell phones, headphones, hats, or smart watches. 

Discuss any access limitations and accommodation needs with appropriate faculty and administrators before the exam
Students with limited access to the testing resources and environment for remote testing (e.g., access to reliable internet service, preventing test access or completion, a suitable environment for remote testing – sitting on a bed or in a car with their laptop, or difficulty preventing interruptions due to other household members and/or pets that are noisy or distracting), or who need accommodations due to absences, bathroom breaks and other emergencies and/or interruptions, should discuss with their appropriate administrators or instructors to explore solutions and accommodations.

 

Student responsibilities:

  • Make sure that you’re able to meet the technical requirements to use Honorlock.
  • If you anticipate technical issues completing any exams through Honorlock, notify Honorlock Support via Live Chat for further assistance.
  • Be aware of the specific exam dates and times and allow adequate time to take the exams.
  • Follow all exam instructions and guidelines.

Student support:

  • Student support is available on-demand through Live Chat or email at support@honorlock.com.
  • If you encounter issues with LMS Name during regular college hours, contact the LMS Name Support team via the Help link on the Global Navigation Menu in LMS Name.

Student privacy information

Institution abbreviation is committed to ensuring that all student information is handled securely and privacy is protected. 

Please review Honorlock’s Student Privacy Statement.

Sign up to receive resources to help improve online teaching and learning.

Tyler Stike

Tyler is Honorlock's Director of Content and a doctoral student at the University of Florida focused on educational technology.

Best practices for online test room scans

Learn about room scans for online exams

Ohio room scan case summary

A judge found that a “room scan” completed during an online exam violated a student’s rights under the Fourth Amendment, but a final ruling in this case has not yet been reached.

Before we jump into further details about the room scan in this situation, we want to emphasize a few things:

1. Honorlock was not involved in the room scan in this situation 

2. Honorlock does not require room scans
Honorlock’s online proctoring platform provides room scans as an optional setting that can be enabled or disabled as needed. We do advocate for clear, posted guidelines and consistent application of them across an institution.

3. Room scans are not unconstitutional, banned, or prohibited.
For more details, see the court documents in this case.

4. The problem was HOW this specific room scan was completed and reviewed

Here’s what happened during the room scan in this situation:
  • Shifting guidelines and expectations regarding the use of room scans leading up to the exam.
  • Due to health reasons, the student took the exam online at home and was only able to take the exam in his bedroom, was not aware he could have taken the exam at another location, and was not given a choice to opt out of the room scan.
  • A school employee completed the room scan on Zoom with other students present and watching.
  • Again, the room scan was not completed through Honorlock.
  • The room scan completed on Zoom was visible to other students taking the exam.

What could this school have done better?

  • Used a remote proctoring software, such as Honorlock, which ensures the privacy of room scans (only the proctor or exam administrator have access to view the room scan)In the factual summary of this case, it states that “Other students taking the remote test can see the room scans of other students.” While this may be possible if an instructor is personally overseeing a group test using any of the common video conferencing platforms, this is not possible using the Honorlock platform. At no point is the recording or room scan accessible to other students, other instructors, or any other party. The Honorlock platform operates as a 1:1 proctoring solution.
  • Used consistent remote testing policies and guidelines at both the institution and course/exam levels
  • Ensured policies were published well in advance (notice), students had access to the policies and guidelines (inform), and students consented to the practice of room scans
  • In this case, at the beginning of the semester, a course syllabus stated students were subject to a room scan before, during, or after an exam. The student objected and the room scan policy was removed by the Professor. The Professor didn’t communicate this to the school’s Testing Services. The school’s Testing Services emailed the student about two hours before the exam and informed the student of the requirement to do a room scan. The student emailed the Testing Services informing them that he did not have enough time to remove sensitive documents from his work space. Before the exam started the proctor required the student conduct a room scan, which the student performed.
  • Used a remote proctoring software, such as Honorlock, which ensures the privacy of room scans (only the proctor or exam administrator have access to view the room scan).
  • In this court’s Opinion & Order, it states that “Other students taking the remote test can see the room scans of other students.” While this may be possible if an instructor is personally overseeing a group test using any of the common video conferencing platforms, this is not possible using the Honorlock platform. At no point is the recording or room scan accessible to other students, other instructors, or any other party. The Honorlock platform operates as a 1:1 proctoring solution.
  • Provided a remote proctoring accommodation for this student who did not consent to room scans.
  • Visit our article for more information on how to provide accommodations with Honorlock.
Where do we go from here?

As the demand for online programs and distance learning continues, safeguarding online exams is a priority for schools to protect their accreditation, their reputation and the value of their programs.

Room scans are one element in creating a secure and equitable testing environment. Other important factors include things such as short test windows, clear expectations, utilizing a test bank for randomly generated test questions. 

This is a good time to review your remote testing policies and procedures and make any necessary adjustments. 

Here are a few questions to consider:

1. Are your remote test security practices, policies and procedures published in advance and readily available for faculty and students?

2. Do your policies include guidelines for when to use room scans and how to conduct a proper room scan?

3. Are your guidelines enforced consistently across all online courses and exams?

Best practices for proctoring online exams with room scans:

1. Publish your remote exam policies and guidelines in advance and include a link in the course syllabus

2. Get student’s written consent to the guidelines, specifically, to the room scan

3. Provide alternative testing locations for students who do not consent to remote room scans

4. For students who must test remotely, but do not consent to the room scan, accommodate their request by notifying the Honorlock proctor that room scans will not be used with that student.

For more information on how to provide accommodations, visit our KnowledgeBase article.

5. Follow your institution’s guidelines for proctoring online exams

Your institution may have certain requirements for proctoring, such as the use of room scans. Please adhere to your institution’s policies and guidelines for remotely proctored exams. Proctor Settings and Student Guidelines for your exam are tailorable and easily adjusted. For more information on what each setting means, use this article to access the respective article for your LMS.

Prior to proctoring online exams:

1. Discuss the use of Honorlock and use practice exams

Review how to use Honorlock with your students. We encourage you to assign practice exams so students can gain familiarity with Honorlock’s LTI.

Note: you can setup the practice exams to mirror the same settings that will be utilized on the actual assessment (including a room scan).

2. Include Honorlock information in your course syllabus

Be sure that students have access to information about Honorlock in your syllabus.

  • Recommended verbiage can be found here.
  • Additional information about Honorlock for students can be found here.

3. Address any privacy concerns

Have an open dialogue with students and respond to any privacy concerns. 

  • For more information on student privacy resources, visit this link.
  • Additional information on what students can expect during a proctored exam can be found here.

4. Create awareness and understanding of room scans
Familiarize yourself and your students with what a room scan is and what they can expect from it.

5. Get a signed consent form for room scans

6. Explain what to expect during a proctored exam
It’s important for students to understand what they can expect during a proctored exam. 

Here’s what you can discuss with your students:

  • Discuss the different proctoring settings that can be used and how they work.
  • Honorlock advises using similar settings for every exam so students know what to expect and are familiar with functionality.
  • We also recommend setting up your practice exam to mimic the same settings throughout the semester/quarter.
  • An example of Standard Exam Guidelines language can be found here.
  • Explain what in-exam flags are, their purpose, and what behaviors may trigger them.
  • We recommend sharing this KnowledgeBase article. about in-exam flags with your students
  • Provide clear, unambiguous test rules and instructions for all of your exams.
  • Here’s an article with real examples of effective test rules and instructions for online exams and tips to remove any confusion.

7. Create a culture of academic integrity
Academic integrity goes beyond proctored exams. Creating a culture of academic integrity in your classroom can support positive decision-making during exams. 

Check out our blog article on some helpful tips to improve the academic integrity within your classroom. 

8. Join our educational webinars
Honorlock provides ongoing educational webinars every semester, including one for every supported LMS, be sure to register here. 

If you do not find what you are looking for, please take a look at our library of previously recorded webinars found here, or please reach out to your CSM and/or Support Chat.

Quick facts about online proctoring room scans
  • What’s a room scan?

A room scan uses a test taker’s webcam to get a 360 degree view of the room.

  • Why are room scans used?

Room scans help protect academic integrity by ensuring that there are no unauthorized resources or people in the room.

  • When are room scans used?

A room scan may be required by an institution or exam administrator at the start of the exam to ensure that no unauthorized resources or people are in the testing environment. A re-scan during the exam may be requested by the proctor should there be indications of unauthorized behavior or resources.

  • How are room scans completed?

Test takers enable their webcam and complete the room scan by panning the webcam on the device around the room.

  • Are room scans commonly used in proctored online exams?

Yes. Room scans are common and, when done correctly, generally considered as one of several best practices for proctored online exams.

  • Do all proctoring companies require room scans

No. Some proctoring companies require room scans, others provide it as an option tool to use.

About Honorlock room scans

Does Honorlock require room scans?

No. Honorlock doesn’t require room scans. Room scanning is an option feature that can be enabled or disabled.

How can instructors using Honorlock disable room scans for test-takers?

After creating the exam in the LMS, the instructor can pick which proctoring features to enable or disable for the exam, including room scanning. 

Does Honorlock allow instructors to disable room scans for specific test takers?

Yes. Instructors can provide proctor instructions that allow specific test takers to bypass the room scan.

Who can view a room scan with Honorlock?

If the institution or instructor requires a room scan, only a Honorlock-trained proctor, the instructor, and key administrators at the institution will have access to review the room scan. 

It’s important to note that a room scan is only viewed if there is questionable behavior flagged during the exam. 

At that point, the proctor may view the recording, including the room scan. The instructor or an administrator may also review the recording, including the room scan, after the exam. Instructors only receive recordings in the event of a flag.

Can other test takers or people view the room scan?

No. The room scan is never accessible to anyone other than the Honorlock proctor, the instructor, and key administrators of the institution.

The recording or room scan is never accessible to other test takers, other instructors, or any other party. 

More information about Honorlock:

Looking for more articles and information about higher education and online learning? Visit our resources section.

Tyler Stike

Tyler is Honorlock's Director of Content and a doctoral student at the University of Florida focused on educational technology.

FBI Cybersecurity Recommendations for Higher Education Institutions

FBI cybersecurity recommendations to protect higher education institutions

The FBI Cyber Division released a notification in May 2022 that they discovered stolen login credentials from higher education institutions readily available on public forums and for sale on the dark web.

The notification also warned that the exposure of the stolen login credentials could put universities and colleges at risk of more cyber attacks in the future.

What is the dark web?

The dark web consists of hidden sites that use specialized browsers to keep internet activity anonymous, making illegal activities hard to track.

Here are some notable higher education cyber attacks in recent years, according to the FBI’s notification document:

  • 2020: Roughly 2,000 .edu usernames and passwords were listed for sale on the dark web.
  • 2021: Over 36,000 .edu email and password combinations were available on a publicly available messaging platform. The group that listed the credentials appears to have ties to credential trafficking in the past.
  • 2022: In January, US-based higher education institutions’ network credentials and VPN access information were listed for sale on Russian cyber criminal forums. The fact that VPN credentials were stolen makes the vulnerability to cyber attacks even higher.
How do cybercriminals get access to these credentials?

Cybercriminals primarily get initial access to utilizing social engineering (most commonly phishing).

What is phishing?

Phishing refers to fraudulent communications that pretend to be sent from a trusted source. The goal of phishing is to trick the receiver into revealing personal information in order to gain access to information such as credit card numbers and login credentials.

Consider this phishing situation and the impact it could have on the students, faculty, and institution

Initially a cybercriminal gets access to a student’s email login credentials. They can now begin reconnaissance and build their attack.

Now that they have access to previous email conversations, they could use those topics in the phishing email they’ll send to the professor and other students. In the email, they can mention the relevant topics and include a malicious hyperlink.

In this situation, the receiver may be more likely to click the malicious link because it’s from a familiar person and their guard is down.

FBI cybersecurity recommendations for higher education institutions
The notification document provided an extensive list of cybersecurity recommendations universities and colleges that we’ve consolidated and summarized:
  • Ensure that all operating systems and software are updated with security patches and automated scanning
  • Segment networks to help prevent the spread of malware and unauthorized access
  • Use multi-factor authentication as often as possible, this way if credentials are compromised attackers would still need another factor to authenticate.
  • Employ network monitoring tools to detect abnormal network activity
  • Prepare and educate students and faculty to recognize phishing attacks with training programs and real-world testing
  • Require strong password policies and lockout rules
  • Establish role-based accounts that exercise the principle of least privilege
Assessing the security of your technology partners
In addition to the FBI recommendations to protect against cyber threats, colleges and universities should also assess the security of their technology partners. This includes all online learning technologies and all additional course software, such as:

Remember, vendor security is your security.

Here’s a high-level list of what to look for and questions to ask when vetting technology partners:

Online proctoring isn’t just a way to deter employees cheating on exams. It’s an integral part of establishing a strong culture of academic integrity at your organization. Our solution and proctors help create a supportive testing environment that levels the playing field and allows test-takers to focus on showing their knowledge.

Data security

  • What data is collected and why?
  • How is data collected and maintained?
  • Who owns the data?
  • Is the data encrypted in transit and at rest?
  • Where is the data stored?
  • What is the data classification policy and how are employees trained to handle different classifications?

Proactive defense

  • How often are vulnerability scans and penetration tests performed?
  • How is security integrated into the vendor’s Software Development Life Cycle (SDLC)?

Incident response plan

  • What is the incident response plan?
  • How often does the company run through the plan in practice and simulation?

Company practices and employee security training

  • How are employees trained on security best practices?
  • How often are employees trained and what does their training include?
  • How are employees trained to report a security incident?
  • Is the organization FERPA compliant?
  • Has the organization had a security breach in the last five years?
  • Will contractors have access to the data?
  • If so, what controls are in place to ensure security?
  • Can you provide a public-facing privacy policy?
Vendor Security Cheat Sheet

For a comprehensive look at vendor security, download our Vendor Security Cheat Sheet. It provides a detailed look at questions to ask technology vendors, software and technologies needed, and important definitions to know.

Tyler Stike

Tyler is Honorlock's Director of Content and a doctoral student at the University of Florida focused on educational technology.