Remote proctoring is designed to replicate the visibility and control of a physical exam room in a digital environment. For institutions delivering high-stakes assessments at scale, the question is not whether monitoring occurs, but what is actually observed, recorded and reviewed. A clear understanding of these layers helps assessment teams evaluate platforms, address privacy concerns and maintain defensible academic integrity processes.
Candidate identity and presence
The first element monitored is identity. Before the assessment begins, the system captures a live image and compares it with an approved identification document using facial recognition and biometric authentication. Many platforms also apply liveness detection to confirm that the image comes from a real person rather than a static photo or pre-recorded video. This continuous verification process sits at the core of remote online proctoring because every other monitoring layer depends on a confirmed and uninterrupted candidate session.
Once the exam has started, the same video stream is used to confirm continuous presence. The software checks that the same face remains in view and that there are no unexplained substitutions. This creates a verified attendance record for the full duration of the assessment, which is particularly important for regulated qualifications and professional certification where identity assurance is a compliance requirement rather than a preference.
Video and audio behaviour
The camera and microphone monitor observable behaviour in the same way an invigilator watches a candidate in an exam hall. Through computer vision and behavioural analytics, the system identifies events such as a candidate repeatedly looking away from the screen, moving out of view for extended periods or interacting with someone off-camera.
Audio monitoring detects additional voices, whispered speech or sudden environmental changes that may indicate external assistance. These are not treated as automatic breaches. Instead, they are flagged as time-stamped events so a human reviewer can interpret them in context. This distinction allows institutions to separate genuine misconduct from normal behaviour such as thinking, stretching or brief technical interruptions.
On-screen activity during the exam
The digital equivalent of watching a candidate’s desk is screen monitoring. Using screen recording within a secure browser, the system observes which applications are active and whether the candidate attempts to leave the assessment interface.
This includes switching tabs, opening unauthorised websites, using keyboard shortcuts linked to copying and pasting, or launching external programs. The result is a complete playback of the candidate’s on-screen activity, aligned with video and audio. For assessment teams, this synchronisation provides a clear and reviewable narrative of what happened at any moment during the session.
Use of secondary devices and displays
A core integrity risk in online exams is the use of additional hardware. Through device fingerprinting, the platform records the candidate’s system configuration at the start of the session and enables multi-monitor detection to identify changes such as a second display, screen mirroring or remote access software. Research on multimodal proctoring supports the impact of this layered monitoring, with a significant difference in achievement scores before and after implementation, indicating reduced cheating under continuous authentication and environment scanning.
At the same time, the webcam provides visual confirmation of the physical workspace. If a mobile phone, tablet or additional screen enters the frame, it becomes part of the session record. This combined technical and visual oversight ensures that both digital and physical forms of external assistance remain visible during post-exam review.
The testing environment and surroundings
Before the exam begins, candidates are required to show their surroundings to the camera. This process, known as environment validation, confirms that the workspace is clear of unauthorised materials and that no other person is present.
During the assessment, the camera continues to verify that the environment remains consistent. Some systems apply object recognition to detect items such as books, handwritten notes or additional screens if they appear within reach. This mirrors the room inspection performed in a traditional test centre and provides documented evidence of the testing conditions.
Why monitoring is structured this way
Each monitored element corresponds to a control that exists in a physical exam room. Identity checks replace ID verification at the door. Video presence replaces an invigilator’s line of sight. Screen monitoring replaces the ability to see a candidate’s desk. Environment scans replicate room inspections.
Together, these layers produce a complete record of who took the exam, what happened on their device, and what occurred in their surroundings. For institutions, this is not about surveillance but about maintaining consistency, credibility and comparability across digital and in-person assessment delivery.
Tim Williamson, a psychology graduate from the University of Hertfordshire, has a keen interest in the fields of mental health, wellness, and lifestyle.
