Assessment Security Policy and Procedures
Purpose
This policy outlines the procedures to ensure the security, integrity, and confidentiality of assessment materials throughout their lifecycle, from printing to storage, including the handling of conflicts of interest. The aim is to protect the integrity of the assessment process and mitigate risks related to unauthorised access, information leakage, and conflicts of interest.
1. Printing and Reproduction of Assessment Materials
- Authorised members of staff only: Only staff with specific access roles may print or reproduce assessment materials.
- Controlled Access to Printers: Printing of assessment materials is performed on secure, restricted-access printers located in designated secure areas. We have 2 x printers onsite, one in Farmhouse, and second in Outreach tech office.
2. Securing Assessment Materials
- Physical Security: Printed assessment materials must be stored in locked cabinets within restricted-access rooms. Only authorised staff have access to these storage locations.
- Digital Security: If digital copies of assessment materials exist, they must be stored in a secure, encrypted format on the organisation’s network. Access will be controlled via role-based permissions, and all access to files must be logged and monitored.
- Removal Protocol: Assessment materials should not leave secure premises unless explicitly authorised. In cases where materials must be transported (e.g., to an exam location), they should be placed in brown envelopes, sealed with a signed white label. (Label to be signed by staff member producing materials).
3. Sending and Returning Assessment Materials
- Delivery Protocols: When assessment materials are sent to external sites or individuals, they must be sent through a secure courier service with tracking capabilities. Materials must be signed for upon receipt.
- Secure Return: Completed assessment materials must be returned using the same secure courier procedures. Upon receipt, materials must be logged in, checked for completeness, and immediately stored in the designated secure area. Materials must be signed for upon receipt.
- Electronic Transmission: If assessment materials need to be transmitted electronically, they must be encrypted and sent via secure channels (e.g., secure email with encryption, secure FTP). Only designated recipients are authorised to open such transmissions.
4. Storing and Disposing of Assessment Materials
- Secure Storage: All assessment materials must be stored in secure, access-controlled locations. Retention periods for storing completed assessments, as well as unmarked and marked assessments, must comply with awarding body requirements.
- Archiving and Disposal: Once the retention period expires, assessment materials must be securely shredded (if physical) or permanently deleted from all systems and backups (if digital). Red bags are available across the site stored in designated areas, which are stored securely and then shredded externally by a validated organisation.
5. Managing Conflicts of Interest
- Staff Attending Courses: Staff members who have access to assessment materials or portals must be supervised when accessing and printing to avoid any conflict of interest. If possible, we will use staff who are not attending the course.
- Declaration of Interests: All staff involved in assessment processes must declare any potential conflicts of interest. This includes relationships, shared interests, or prior knowledge of assessments that may compromise objectivity.
- Access Restrictions: Staff with conflicts of interest are to be restricted from accessing assessment materials or related portals. Temporary or conditional access will only be granted under strict supervision if absolutely necessary.
- Audit and Compliance: All access to assessment materials by staff will be audited periodically, and any conflicts of interest will be reviewed to ensure compliance with this policy.
6. Incident Management and Reporting
- Incident Reporting: Any suspected breach of assessment security or conflict of interest must be reported immediately to the Operations Manager.
- Investigation Protocol: Reported incidents will trigger an internal investigation, led by the designated team, to identify the cause, impact, and necessary corrective measures. Investigation results will inform policy updates and staff training.
- Corrective Actions: Based on the findings, corrective actions will include access restriction, retraining, or disciplinary action as appropriate.
7. Review and Updates
- Annual Review: This policy will be reviewed annually to ensure continued relevance and effectiveness in addressing risks associated with assessment security. Any changes to organizational structure, technology, or regulations will prompt immediate review and, if necessary, policy adjustment.
- Staff Training: All personnel involved in handling assessment materials will receive training on this policy upon hiring and annually thereafter. This includes awareness of security best practices and conflict of interest management.
Conclusion
This policy is essential to maintaining the security and integrity of the assessment process. Adherence to these procedures ensures a fair and objective assessment environment while safeguarding against unauthorized access and potential conflicts of interest