Record integrity in relation to assessment security

In 2011, consideration of record integrity in relation to assessment security must take account of the continuity and integrity during disruption and the responsibilities it places before education systems. In reviewing the stated expectation, interpretation should begin with the intended outcome, then identify the controls and evidence needed to show that the outcome is achieved across the declared scope. Review should cover the complete affected scope and preserve material differences between locations, programmes, delivery modes and learner groups. Central policy alone does not establish consistent operation across the declared scope.

The circumstances described by the continuity and integrity during disruption are developing and may differ materially between locations. Decisions on the control should therefore be based on verified information available for the affected community and should be reviewed as conditions change. Temporary measures require recorded authority, learner communication and an end or review point; urgency does not remove the need to preserve safety, fair treatment and reliable records.

The present position

The quality significance of record integrity in relation to assessment security follows from a basic distinction between availability and effective provision. In reviewing the assurance matter, education information should be collected for a defined purpose, protected in proportion to its sensitivity and retained only for an authorised period. Oversight should examine implementation throughout the learner journey, not only at entry or through one reported outcome.

The analysis of the stated expectation should make its decision rule explicit. In reviewing the stated expectation, a reliable record should identify what occurred, when it occurred, who was responsible, the authority for the action and any later correction. Records should remain protected against unauthorised alteration while legitimate amendments remain visible. The method should prevent an unfavourable result from being dismissed through an unrecorded change in interpretation.

The principal risks in relation to the stated expectation are secondary use without adequate authority, uncontrolled supplier access or transfer, collection without a defined educational or legal purpose, and retention beyond an identified need. The risks are interdependent; failure of one control may conceal or disable another. Review should follow the sequence of decisions and records rather than assess documents in isolation.

Implications for education data governance

Relevant evidence for record integrity in relation to assessment security will normally include incident response and notification records, role-based access and access reviews, data-quality and correction controls, retention and secure disposal evidence, and lawful authority and consent records where relevant. Evidence should be current for the reference period, attributable and representative of the conclusion's stated scope. An unresolved contradiction is a limitation on the conclusion and should be reported as such.

The evidential trail should allow an affected decision to be identified, examined and corrected. For the control, the responsible body should be able to identify the evidence considered, the judgement made, the person or body authorised to make it and the action that followed. Historical decisions should be assessed against the information then available, with later amendments separately dated and explained.

• Control third-party processing before any material decision relies on it.
• Test incident and recovery arrangements, identifying the accountable function and affected scope.
• Assign accountable data owners, including material exceptions and unequal effects.
• Minimise collection, identifying the accountable function and affected scope.
• Verify accuracy where information affects learners before using it to determine a learner or provider outcome.

What should be examined

Implementation of record integrity in relation to assessment security should be organised around a decision that can be tested. The analysis of the matter under review proceeds on the basis that evidence is sufficient when it is current, attributable, representative of the relevant scope and capable of being reconciled with other available records. In practice, the stated objective should connect to responsibility, committed resources, operating evidence and the outcome reported for oversight.

Implementation of the assurance matter can be tested without imposing unnecessary reporting. The method for the matter under review is to specify mandatory fields, source ownership, access rights, retention and correction procedures. Test a sample from creation through use, amendment, reporting and disposal, including records created during disruption or by a delivery partner. The assurance record may draw on existing sources, provided their limitations and fitness for the current purpose are examined.

Assurance concerning the matter under review should be expressed at the level established by the evidence. A sample may support a conclusion about the sampled process, but not automatically about every location or programme. Where reliance is placed on central controls, testing should confirm that local operation and exceptions are reported accurately to the centre.

For the assurance matter, governing bodies should receive a concise account of the intended result, affected scope, principal risks, evidence limitations and unresolved exceptions. Material action requires a named responsible function and a defined completion point. Closure requires evidence that the condition has changed; completion of planned activity is not sufficient.

Jurisdictional and evidential limits

Interpretation of record integrity in relation to assessment security should avoid two errors: treating a formal commitment as proof of effect, and treating one adverse case as proof that every part of the system has failed. Oversight of the control should reflect the principle that security, privacy and data quality are related but distinct. A secure record may still be inaccurate or used without adequate authority, and a lawful use may still be poorly governed. In reviewing the matter under review, the volume of documentation is not a measure of conformity. Relevance, integrity and coverage are more important than the number of records produced.

The present development should inform review of the relevant requirement, with attention to the relationship between commitment, implementation and demonstrated outcome. Institutional improvement and public confidence both depend on transparent responsibility and credible evidence.