Proctorio Proctoring Solution: Addressing Student Concerns On Security And Privacy.pdf

It provides a detailed analysis based on available information and official statements from Proctorio and other universities.

Key Findings:

Security:

No major security issues found in AARNET provisioned Zoom instance (used by Proctorio).
Proctorio has implemented robust security features to minimize risk of incidents.
Data stored securely according to DoD standards at Impact Levels 2, 4, and 5, as well as NIST 800-171 controls meeting DFARS and ITAR requirements.

Data Protection:

Proctorio complies with several data privacy regulations: EU GDPR, FERPA, COPPA, SPC, and CSPC.
Data stored within the United States.
Only ANU staff, not Proctorio personnel, have access to collected data.

Privacy Concerns Addressed:

Proctorio has been recognized by the Internet Keep Safe Coalition for meeting stringent test taker privacy standards.
No personal information accessible to "another agency, a contractor, the private sector or to the public."
Limited data collection focused on exam recording and activity verification (webcam/microphone).

Misconceptions:

Conflicting statements online regarding Proctorio's data capture capabilities. The document emphasizes that no conclusive evidence supports these claims.

Additional Points:

Proctorio is used by over 400 universities, including prestigious institutions like Harvard, Kent State, Texas, Columbia, and University of Colorado.
Proctorio undergoes daily vulnerability assessments and penetration tests to ensure robust security.
* Data hosted in the United States, adhering to stringent DoD and NIST security standards.