Join Executive Web Patrol Managers, Cary Straw and Jen Baldwin, as we explore the systems, methods and steps you need to successfully protect and extend the life of your high stakes certification, licensure, and state assessment exams from online threats. Some of the questions we will answer include: • Which processes should I implement to decrease the chance of my content appearing online? • Where are the best places to use online security resources? • Where do I look next if I found a threat, and where are the threats likely to spread? • What are proactive steps I can take to protect my exams online? • Who should be in my protection hierarchy? • Am I "safe" after I've found a threat, and have had it removed?

1. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission.
Who What Where Why
A Guide to Online Protection Strategies
Cary StrawJen Baldwin Christie Zervos
Executive Web Patrol Manager Director Of OperationsExecutive Web Patrol Manager

2. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 2
Protection Strategies Overview

3. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 3
WHO…
Who should be in your
protection hierarchy?

4. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 4
Senior Management
Test Development
Test Security Manager
Legal

5. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 5
Senior Management
• How much exposure are our items getting on the
internet?
• When in the testing cycle do the items begin to show up?
• Do items for any administration appear before they are
delivered?
• What is being said on the internet about our program and
exams?

6. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 6
Test Development
• What forms are most often exposed and can you determine
the reasons why?
• Do your question types invite exposure?
• Are you working hand-in-hand with security to quickly identify
exposures?
• Can you rescue the exposed items by restructuring them?
• How does the level of exposure impact your test’s useful life?
• How does the level of compromise compare across forms and
over time?

7. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 7
Test Security Manager
• What portions of your testing program are showing up
online?
• How quickly do items spread across the internet?
• Who is posting exam items?
• When a site claims to have “real” items, what do they
typically have?
• Are you doing routine checks of approved test prep
providers?

8. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 8
Legal
• Is legal involved from the beginning of the process?
• Are your exams copyrighted?
• Do you have boilerplate letters/procedures to quickly
address exposures?
• How do you address privacy issues?

9. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 9
Who makes the ultimate decision?

10. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 10
Can you quickly respond, regardless of the size of the group?

11. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 11
After all your effort, is the exposure situation getting better or
worse?

12. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 12
Questions/Comments

13. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 13
W
H
A
T
…
What common processes
decrease the chance of your
content appearing online?

14. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 14
• Have a strong presence in online venues where your test
takers congregate, especially during administrations
• Provide a large amount of free practice materials
• Limit re-use of exams, forms, items
• Create and enforce non-disclosure agreements

15. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 15
WHERE…
Where are the best places
to use your online security
resources?

16. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 16
• Determine where your exposures occur online
• Your resources are typically limited. Where can they be
used most effectively?

17. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 17
Why do online protection
strategies matter?

18. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 18
• Lengthens the usable life of your tests
• Perception of exam quality increases
• Cost of replacement costs for exams
decreases

19. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 19
WHY…
Why should I worry? I found
a threat, and got it removed.

20. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 20
• Follow up monitoring
• Website may re-list threat after removal
• Same threat may be shared or posted elsewhere
• Do you even have to remove online threats?

21. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 21
W
H
E
R
E
…
Where are the
threats I find likely
to spread?

22. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 22
• Social Media
• Braindumps
• Forum/Discussion
Groups
• Flashcard Sites
• Blogs
• Archive Sites
• Test Prep Companies

23. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 23
Questions/Comments

24. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 24
WHAT…
What is the potential
risk of an online
threat?

25. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 25
• Reputation Problems
• Media Involvement
• Shortened Exam Life

26. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 26
W
H
E
R
E
…
Where the threat was found may not mean
that’s where it originated geographically.

27. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 27
IP Addresses are not reliable

28. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 28
WHO…
Who can you recruit
to protect your
exams?

29. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 29
• Forum Moderators
• Peer Ambassadors
• Bloggers
• Media Contacts

30. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 30
W
H
Y
…
Why is it important to explore
cutting edge technologies and
processes to stay ahead of the
game?

31. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 31
• Stay ahead of thieves
• Increase exam validity
• Increase overall exam security
• Remove weaknesses typically associated
with outdated testing programs/methods

32. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 32

33. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 33

34. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 34
Questions/Comments

35. © 2018, Caveon, LLC. All rights reserved. Do not copy or distribute without permission. 35
Thank you!
info@caveon.com