Secure assessment delivery acceptance test plan
Longsight | Updated August 25, 2026

Record the assessment purpose, candidate population, stakes, policy owner, product version, deployment model, integration configuration, test data, environment, and date for every result.

[ ] Document the assessment decision, threat model, acceptable failure behavior, and exception owner.
[ ] Verify candidate identity, eligibility, enrollment, roles, and launch context.
[ ] Test administrator, instructor, proctor, support, scorer, and export permissions for least privilege.
[ ] Record an immutable version, approval record, item and asset inventory, and policy reference for the released assessment.
[ ] Confirm that candidate-facing delivery does not disclose protected answer information, scoring rules, or internal service details.
[ ] Confirm that the host scores against authoritative content and records the scoring version and disposition.
[ ] Test save, restore, navigation, review, break, time, and submit rules in the attempt model.
[ ] Send a duplicate request and record the reviewable result.
[ ] Test a stale tab, browser refresh, reconnect, browser restart, and service recovery against the documented result.
[ ] Test a deadline submission under representative concurrent load against the documented result.
[ ] Confirm that a content correction and rescoring preserve original responses, scores, and decision history.
[ ] Test keyboard operation, visible focus, screen-reader output, zoom, contrast, media alternatives, and error messages.
[ ] Confirm that candidate preferences, additional time, breaks, and other accommodations work in the released workflow.
[ ] Test incident detection, candidate communication, staff roles, retention, correction, and export procedures.
[ ] Retain representative packages, fixtures, test results, unresolved exceptions, and remediation dates.