Cheating in the Internet Era: Cisco Security Innovations for Combating the Exam Threat

BRKCRT-1107

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

2

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

1

Session Presenters
Session Moderator:
Cindy Hoffman: Certifications Assessments Bus. Manager

Panelists:
Sarah Demark: Expert Certs & Strategic Assessments Manager Fred Weiller: Director of Marketing, Learning@Cisco Victoria Quinn-Stephens: PM Certs Security, Learning@Cisco Mark Poole: Pearson VUE Director of Exam Security

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

3

“If you want the convenience and lower costs that the Internet provides you for testing, you have to up the ante on security. It’s a tradeoff.”

David Foster Kryterion

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

4

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

2

Today’s Exam Security Challenges

Prime Threats

Brain Dumps By Item Harvesters

Proxy Testing

Candidate Cheating

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

5

Key Drivers Threatening Exam Security

Pervasiveness of the internet: technology makes it easier to cheat Test center corruption [collusion, organized crime rings, proxy testing] Cultural influencers [cheating is acceptable, fierce competition to get ahead] Economic incentives [correlation between exam cost and cheating] Weak legal protections Flaws in delivery channel
BRKCRT-1107 14558_04_2008_c1 © 2008 Cisco Systems, Inc. All rights reserved. Cisco Public

6

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

3

Cisco’s Exam Security Solutions
Multi-Layered Solutions A comprehensive multi-layered security strategy integrates proactive measures and best practices. Program integrity supports: Credibility with customers Value to employers Platform for career development Select single vendor relationship Improve exam security policies Harden testing channel Improve candidate agreements Build better exams Enact continuous improvement plan Support industry security initiatives
BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

7

Methods of Security Planning
Prevention

Detection

Enforcement

Communications

Reporting
BRKCRT-1107 14558_04_2008_c1 © 2008 Cisco Systems, Inc. All rights reserved. Cisco Public

8

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

4

Security Planning: Prevention
Newest Channel Hardening Features: CAP [Candidate Authentication Process] Photo on score report Photo on web to verify candidate exam score and credential status

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

9

Prevention: CAP
What is it? CAP is the capture of digital photos and signature at the point of admissions by the test center administrator Why important? CAP provides greater assurance of certificant’s true identity at point of admission

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

10

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

5

Prevention: Photo on Score Report
What is it? Photo on Score Report is a digital photo of candidate imprinted on EVERY score report provided to candidates upon exit Why important? Photo on Score Report authenticates the test taker’s true identity to employers & third parties

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

11

Prevention: Photo on Web
What is it? Photo on Web is a digital photo of the candidate imprinted to the verification document showing their current exam score Why important? With candidate’s permission, Photo on Web permits employers to authenticate a candidate’s current exam score and most recent photo on VUE’s website

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

12

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

6

Prevention: Exam Innovations
Increase performance-based testing
Simulations & emulations

Increase rate of content development Dynamic items Randomization of content
Forms, items, options

Practice exams Localization of exam content

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

13

Security Planning: Detection
Web-monitoring What is it? Method that monitors the internet to identify and investigate exam content exposure Why important? Maintains strong evidence path to support further analysis, enforcement actions and process improvements Data forensics What is it? An analytical method to detect aberrant testing patterns associated with test fraud Why important? Identifies candidates who fail to meet a valid measure of knowledge or competence as sampled by an exam Provisional score report What is it? Notification on the score report that exam results may be monitored and statistically analyzed for any aberrances at any time after testing Why important? Communicates to candidates and employers that certificants must meet valid measures of program knowledge or competence as sampled by the exam
BRKCRT-1107 14558_04_2008_c1 © 2008 Cisco Systems, Inc. All rights reserved. Cisco Public

14

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

7

Security Planning: Detection
Web-monitoring and data forensics provide evidence of: Where / When / Who…. compromise exams

Detection methods trigger: Incident investigations Program analysis for continual improvements Robust policies and best practices

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

15

Security Planning: Enforcements
Security monitoring of test channel operations On-going monitoring of test centers via program data forensic analysis Test center, candidate and TCA investigations, legal actions & sanctions Test center site closures Candidate data privacy protection Exam IP protection On-going monitoring of auction websites Cisco policy statements for IP compliance on public website forums

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

16

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

8

Security Planning: Communications
On-going strategic messaging campaign emphasizing how Cisco is working to ensure exam integrity: What is in place and working What is new What is and is not compliant candidate behavior

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

17

1 Million Certifications Press Highlights
COVERAGE CATEGORIES
/ Biz General 52% Tech 16%

COVERAGE OUTLETS

PICKUP DISTRIBUTION
Broadcast 30% Blogs/ Online 35%

Training 32%

Print 35%

155 Pieces of Coverage
TOP QUOTE
“Cisco certifications bring valuable, measurable rewards to network professionals. Holding a Cisco certification, particularly obtaining a CCIE, gives you an elite status within the industry. Because of its stature in the networking profession, I value my CCIE more than I do my college degree.” Dominic M. DelBalso, CCIE #7311
BRKCRT-1107 14558_04_2008_c1 © 2008 Cisco Systems, Inc. All rights reserved. Cisco Public

18

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

9

Security Planning: Reporting
Rigorous collection of data for program reporting You can’t manage what you do not measure The evidence is in the data Reduces cheating Strengthens exam security Emphasizes ethical test taking

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

19

“The candidate authentication program is the first real security effort since we rolled out IT certification in the late 80’s, and we are glad that the leadership at Cisco was willing to take the brave first step. Combined with the forensics and educational outreach we are confident that the program will have a major impact on exam security worldwide.”

Randy Trask Pearson VUE

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

20

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

10

Cert Communities Call to Action
Review Cisco Exam Policies on http://www.cisco.com/web/learning/le3/le11/learning_ certification_exam_policies.html Use Cisco’s tipline for reporting suspicious content or behavior www.tipline@cisco.com Look for continuing Cisco communication on exam security protection

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

21

Q and A

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

22

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

11

Recommended Reading
Continue your Cisco Live learning experience with further reading from Cisco Press Check the Recommended Reading flyer for suggested books

Available Onsite at the Cisco Company Store
BRKCRT-1107 14558_04_2008_c1 © 2008 Cisco Systems, Inc. All rights reserved. Cisco Public

23

Complete Your Online Session Evaluation
Give us your feedback and you could win fabulous prizes. Winners announced daily. Receive 20 Passport points for each session evaluation you complete. Complete your session evaluation online now (open a browser through our wireless network to access our portal) or visit one of the Internet stations throughout the Convention Center.
Don’t forget to activate your Cisco Live virtual account for access to all session material on-demand and return for our live virtual event in October 2008. Go to the Collaboration Zone in World of Solutions or visit www.cisco-live.com.

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

24

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

12

BRKCRT-1107 14558_04_2008_c1

© 2008 Cisco Systems, Inc. All rights reserved.

Cisco Public

25

© 2006, Cisco Systems, Inc. All rights reserved. Presentation_ID.scr

13