Proctored Exams at UCF

UCF faculty have several remote proctoring solutions from which to choose to ensure academic integrity in electronically-delivered courses. In order to meet course assessment needs during the period of remote instruction during the COVID-19 pandemic, UCF provides the following platforms:

Honorlock Privacy and Security

Be assured that all solutions that UCF implements, including Honorlock, must pass through a privacy and security evaluation by the UCF IT Information Security Office. Honorlock has signed UCF’s rigorous “Secure Handling of UCF Data” agreement. This agreement goes beyond the provider’s general terms of service.

Regarding some specific concerns that have been raised:

  • Honorlock does not sell student information to third parties (section 4 of the Secure Handling of UCF Data Agreement).
  • Honorlock does not scan home networks or monitor data from any device on the network other than network activities within the chrome browser that the plugin is installed within.
  • Honorlock has no access to other devices in the network; it simply interacts with the student’s browser.
  • Since the browser extension is contained within the Chrome browser itself, it only has access to the limited operations that are provided by the browser – nothing else. Students may deactivate the extension when the exam concludes.

For detailed information regarding Honorlock’s privacy and security, please refer to their Student Privacy Statement and their latest blog post: A Message to Students New to Online Education and Remote Proctoring.

Access to a Webcam and/or Mic for Proctored Assessments

Your instructor may require the use of a webcam and/or mic for proctored assessments. Many modern laptops already have these peripherals built in. As a student, it will be your responsibility to review your instructor’s syllabus and acquire such tech if necessary.

During a proctored exam (i.e., assessments using ProctorHub, Honorlock, or Examity) – You will need a webcam and mic connected/integrated to your desktop or laptop that you are taking the assessment on. If you do not have access to a webcam, then view the Webcam Alternatives page to learn how to use a mobile device as a webcam. It’s important to note that you cannot take the assessment on your mobile device, as these proctoring applications do not run on mobile platforms.

As always, if you have any concerns about your ability to meet the technical requirements of any exam, please contact your instructor as early as possible. If you have additional questions, please feel free to contact Webcourses@UCF Support at: webcourses@ucf.edu.

Review this announcement for information how you can acquire a webcam through UCF.

Common Questions

Does the Honorlock application scan (i.e., ping my network) and monitor network data (i.e., network snooping) of other devices on my network?

Honorlock does have secondary device detection but this does not work via network snooping. The Chrome add-on that is installed does not detect, log, or even have access to network traffic, such as mobile devices or other computers on your network. It only monitors the Chrome browser itself.

There are alternative methods of secondary device detection that do not monitor your network traffic nor require the installation of additional software or apps on the secondary device. Much of this is done via honeypot caches on the web and advanced web analytics that are captured from the website’s end. Information about your search activity comes from the unauthorized websites you may visit during a proctored exam. These open websites are set up and owned by Honorlock.

Honorlock has provided some specific information about its privacy compliance practices in a Student Privacy Statement. In addition, this blog post will provide further details addressing some of the privacy concerns that you may have.

Finally, it is important to emphasize that Honorlock has signed UCF’s rigorous Secure Handling of UCF Data Agreement.

Do proctoring applications, such as HonorLock, sell my data to 3rd party companies?

No. Proctoring applications such as HonorLock, Examity, and Respondus Lockdown Browser are prohibited from sharing your personal data with 3rd parties. Before being implemented at UCF, these platforms had to pass through a privacy and security evaluation by the UCF IT Information Security Office. Additionally, they have signed UCF’s rigorous Secure Handling of UCF DataAgreement. This agreement goes beyond the provider’s general terms of service.

It is also important to note that all proctoring platforms must abide by The Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99). FERPA is a federal law that protects the privacy of student education records.

Honorlock has provided some specific information about its privacy compliance practices in a Student Privacy Statement. In addition, this blog post will provide further details addressing some of the privacy concerns that you may have.

How long does HonorLock retain data collected during a proctored exam?

Data Storage:
*Honorlock stores information for 12 months and then purges that data. Honorlock, as an AWS partner, follows federal NIST 800-88 guidelines for proof of data/drive destruction. AWS procedures include a decommissioning process that is designed to prevent customer data from being exposed to unauthorized individuals. AWS uses the techniques detailed in DoD 5220.22-M (“National Industrial Security Program Operating Manual “) or NIST 800-88 (“Guidelines for Media Sanitization”) to destroy data as part of the decommissioning process.

Data Transmission:
*Data transmission is secure to industry standards. Data in transit is encrypted using TLS 1.2, with SHA-256 and RSA 2048-bit public key for ALL data transfers in and out of our system. All transmission of data to and from our network is handled using SSL. All data transmitted into our platform is received over SSL to our web servers and our APIs. Data is transmitted back to our customers through our web servers using SSL. Data in transmission is encrypted following up-to-date SSL protocols, as certified by our latest vulnerability scan.

*Excerpt from Honorlock’s Student Privacy Statement