System governance & accountable owner
Show the accountable owner, approved intended use, governance authority, risk acceptance, operating boundaries, change approval and management review for the proctoring or assessment technology in scope.
Vendors and operators of AI-enabled proctoring, identity verification, or assessment-monitoring technology used in high-stakes testing.
Build a requirement-to-evidence index, identify owners, and include implementation records rather than policy text alone. CHSPS does not issue a predictive readiness score.
Show the accountable owner, approved intended use, governance authority, risk acceptance, operating boundaries, change approval and management review for the proctoring or assessment technology in scope.
Show identity methods, anti-impersonation controls, enrollment or session matching, confidence or exception handling, human escalation and representative adjudication records.
Show the defined flagging purpose, test and validation evidence, operating thresholds, false-positive and false-negative review, subgroup analysis where applicable, monitoring and known limitations.
Show which flags or decisions require human review, reviewer qualification, evidence available to the reviewer, override and escalation authority, consistency controls and retained adjudication records.
Show what candidate and biometric data are collected, why they are used, notices or consent where applicable, access, retention, security, deletion or disposition and handling of privacy requests or incidents.
Show compatibility with approved accommodations and assistive technology, accessibility testing, exception handling, client configuration requirements and evidence from representative accommodated sessions.
Show security architecture and access controls relevant to the service, monitoring, vulnerability or incident handling, evidence preservation, client notification, corrective action and closure.
Show connectivity and service resilience, interruption detection, support and recovery workflows, preservation of session state or evidence, client and candidate communication and restart or reschedule controls.
Show version identification, change classification, testing and validation before release, approval, client notice where relevant, rollback capability and monitoring after a material model or configuration change.
Show the controlled information supplied to client organizations about intended use, operating requirements, limitations, human-review expectations, performance evidence, privacy and security responsibilities, changes and incident coordination.