{"schema_version":"ICEQC_NEWS_ARTICLE_V1","id":"iceqc-news-9814cfe582e76684","slug":"2011-05-16-record-integrity-in-relation-to-assessment-security","language":"en","publication_status":"READY_FOR_IMPORT","publication_date":"2011-05-16","last_modified_date":"2011-05-16","title":"Record integrity in relation to assessment security","summary":"Explains how record integrity in relation to assessment security should be applied in practice, including scope, evidential sufficiency, accountable decisions and justified.","category":{"code":"STANDARDS_INTERPRETATION","label":"Standards Interpretation"},"article_type":"Standards interpretation","publisher":"International Council for Education Quality Certification (ICEQC)","jurisdictional_scope":"International","historical_reference_basis":"Continuity and integrity during disruption","reference_authority":"Relevant public authorities and official international sources","sections":[{"heading":null,"paragraphs":["In 2011, consideration of record integrity in relation to assessment security must take account of the continuity and integrity during disruption and the responsibilities it places before education systems. In reviewing the stated expectation, interpretation should begin with the intended outcome, then identify the controls and evidence needed to show that the outcome is achieved across the declared scope.","The circumstances described by the continuity and integrity during disruption are developing and may differ materially between locations. Decisions on the control should therefore be based on verified information available for the affected community and should be reviewed as conditions change. Temporary measures require recorded authority, learner communication and an end or review point; urgency does not remove the need to preserve safety, fair treatment and reliable records."]},{"heading":"Meaning in practice","paragraphs":["The quality significance of record integrity in relation to assessment security follows from a basic distinction between availability and effective provision. In reviewing the assurance question, education information should be collected for a defined purpose, protected in proportion to its sensitivity and retained only for an authorised period.","The analysis of the stated expectation should make its decision rule explicit. In reviewing the stated expectation, a reliable record should identify what occurred, when it occurred, who was responsible, the authority for the action and any later correction. Records should remain protected against unauthorised alteration while legitimate amendments remain visible. The method should prevent an unfavourable result from being dismissed through an unrecorded change in interpretation.","The principal risks in relation to the stated expectation are secondary use without adequate authority, uncontrolled supplier access or transfer, collection without a defined educational or legal purpose, and retention beyond an identified need. In relation to record integrity in relation to assessment security, the risks are interdependent; failure of one control may conceal or disable another. In relation to record integrity in relation to assessment security, review should follow the sequence of decisions and records rather than assess documents in isolation."]},{"heading":"Responsibilities and material risks","paragraphs":["Relevant evidence for record integrity in relation to assessment security will normally include incident response and notification records, role-based access and access reviews, data-quality and correction controls, retention and secure disposal evidence, and lawful authority and consent records where relevant. An unresolved contradiction is a limitation on the conclusion and should be reported as such.","The evidential trail should allow an affected decision to be identified, examined and corrected. For the control, the responsible body should be able to identify the evidence considered, the judgement made, the person or body authorised to make it and the action that followed. Historical decisions should be assessed against the information then available, with later amendments separately dated and explained."],"bullets":["Control third-party processing.","Test incident and recovery arrangements, identifying the accountable function and affected scope.","Assign accountable data owners.","Minimise collection, identifying the accountable function and affected scope.","Verify accuracy where information affects learners before using it to determine a learner or provider outcome."]},{"heading":"Basis for a reliable conclusion","paragraphs":["Implementation of record integrity in relation to assessment security should be organised around a decision that can be tested. The analysis of the issue under review proceeds on the basis that evidence is sufficient when it is current, attributable, representative of the relevant scope and capable of being reconciled with other available records. In practice, the stated objective should connect to responsibility, committed resources, operating evidence and the outcome reported for oversight.","Implementation of the assurance question can be tested without imposing unnecessary reporting. The method for the issue under review is to specify mandatory fields, source ownership, access rights, retention and correction procedures. Test a sample from creation through use, amendment, reporting and disposal, including records created during disruption or by a delivery partner. The assurance record may draw on existing sources, provided their limitations and fitness for the current purpose are examined.","Assurance concerning the issue under review should be expressed at the level established by the evidence.","For the assurance question, governing bodies should receive a concise account of the intended result, affected scope, principal risks, evidence limitations and unresolved exceptions. Material action requires a named responsible function and a defined completion point. Closure requires evidence that the condition has changed; completion of planned activity is not sufficient."]},{"heading":"Maintaining effective oversight","paragraphs":["Interpretation of record integrity in relation to assessment security should avoid two errors: treating a formal commitment as proof of effect, and treating one adverse case as proof that every part of the system has failed. Oversight of the control should reflect the principle that security, privacy and data quality are related but distinct. A secure record may still be inaccurate or used without adequate authority, and a lawful use may still be poorly governed. In reviewing the issue under review, the volume of documentation is not a measure of conformity. Relevance, integrity and coverage are more important than the number of records produced.","The present development should inform review of the relevant requirement, with attention to the relationship between commitment, implementation and demonstrated outcome. Institutional improvement and public confidence both depend on transparent responsibility and credible evidence."]}],"word_count":833,"content_hash":"sha256-5042c983a28477a7856b092bab85867fd08d83e350c76136763a62e69cc63702","seo_keywords":["record integrity in relation to assessment security","education quality standards","education quality","ICEQC"],"schema_type":"TechArticle"}