Online Cybersecurity Exams: How Proctoring, Retakes & Policies Work

Remote-proctored cybersecurity exams went mainstream during the pandemic and have stayed that way. In 2026, CompTIA, ISACA, EC-Council, and GIAC all deliver their flagship credentials online from a candidate's home or office, while ISC2 still requires a Pearson VUE test center for the CISSP, SSCP, and CCSP. That split matters because the rules are not standardized.

Proctoring platforms, allowed materials, ID requirements, retake windows, and reschedule fees differ by vendor, and sometimes by exam within the same vendor. A candidate who assumes CompTIA's scratch-paper rules apply to an ISACA exam can lose an attempt before answering the first question. The exam-day rulebook you actually sit under is written by the credential issuer, not the industry.

Which Cybersecurity Certifications Offer Online Proctored Exams?

Four of the five major cybersecurity certification vendors now offer online proctored exams, while ISC2 remains test-center-only as of mid-2026. Understanding which credentials you can earn from home versus which require travel to a testing facility shapes your study timeline, budget, and scheduling flexibility. For a complete directory of certifications and their delivery methods, consult the Cybersecurity Certification Finder.

Vendor-by-Vendor Online Proctoring Comparison

• CompTIA: Security+, CySA+, and CASP+² are available through Pearson VUE OnVUE remote proctoring.¹ You can also take these exams at a physical Pearson VUE test center if you prefer.

• GIAC: GSEC, GCIH, and other GIAC certifications use GIAC Remote Proctoring, the organization's proprietary platform. Test center delivery is also an option.

• EC-Council: CEH and CHFI exams are offered through EC-Council Remote Proctoring. Candidates can choose between online delivery and test center appointments.

• ISACA: CISM, CISA, and CRISC are available via PSI Remote Proctoring. ISACA also maintains test center access for those who prefer in-person testing.

• ISC2: CISSP, SSCP, and CC (Certified in Cybersecurity) remain test-center-only through Pearson VUE. ISC2 has not announced online proctoring for these credentials as of July 2026.

Quick Reference Table

A Note on Credential Types

The certifications listed above are professional certifications, which require passing a standardized exam, often have work experience prerequisites, and typically mandate ongoing continuing education. These differ from professional certificates (structured training programs often offered by universities or employers), bootcamp badges (completion credentials from intensive training programs), and academic certificates (credit-bearing credentials from accredited institutions). When evaluating your options, confirm you are pursuing a certification recognized by employers in your target role rather than a similarly named but structurally different credential. Many of these certifications are vendor-neutral, covering broad security principles; see our comparison of vendor-neutral vs. vendor-specific certifications for more details.

Confirm Details Before Scheduling

Vendors occasionally adjust their delivery options, exam platforms, and technical requirements. Before registering, review the official candidate handbook for your specific certification. These handbooks contain the most current information on proctoring platforms, identification requirements, and permitted materials. You can also compare certifications side by side to see how each credential's requirements stack up, and for a broader career roadmap, check our guide to becoming a cybersecurity professional.

Last verified: July 2026

How Online Proctoring Works: Platforms and Monitoring Methods

The core tradeoff with online proctoring is convenience versus scrutiny: you skip the drive to a test center, but you invite a camera, a microphone, and monitoring software into your home office. Understanding how that surveillance actually works helps you decide whether remote testing fits your temperament and setup.

The Three Monitoring Models

Proctoring generally falls into three approaches, and most vendors use a hybrid of them rather than sticking to one.

• Live human proctoring: A real proctor watches your video and audio feed in real time through a secure browser. They can speak to you, ask you to reposition the camera, or pause the session if something looks wrong. This model powers most high-stakes cybersecurity certifications.
• AI-monitored proctoring: Software flags anomalies (a second face, a phone glow, eyes drifting off-screen, unexpected audio) and either interrupts you or logs the event for later review. It scales cheaply but generates false positives.
• Record-and-review: The session is recorded and audited after the fact. A human decides post-exam whether behavior warrants an invalidated score. This model is more common for lower-stakes assessments and academic quizzes than for major industry certifications.

The Major Platforms

Three platforms handle most cybersecurity certification delivery. Pearson VUE OnVUE is the delivery arm for (ISC)2 (CISSP, SSCP, CCSP), CompTIA (Security+, CySA+, PenTest+, CASP+), and Cisco. ProctorU, now part of Meazure Learning, delivers EC-Council exams (CEH, CHFI) and several ISACA credentials. PSI handles GIAC exams for SANS-affiliated certifications, along with some vendor-specific tracks. Each platform has its own scheduling portal, system-check tool, and rules booklet, so consult the materials for your specific cybersecurity certification.

A Typical Session, Start to Finish

Expect a fairly standardized flow: log in 15 to 30 minutes early, run a system check, verify your government ID on camera, complete a 360-degree room scan showing walls, desk, and floor, share your screen while lockdown software disables other applications, then begin the exam under continuous video and audio monitoring. The proctor closes the session, uploads your response file, and you usually see a provisional pass or fail on-screen.

Is Remote Harder Than a Test Center?

The exam content is identical. What differs is the environment: at home you control the chair and the temperature, but you also shoulder the tech risk and the stricter behavioral rules (no muttering, no leaving the frame, no unapproved scratch paper). Proctor authority varies too. OnVUE proctors can pause your exam directly; some ProctorU sessions escalate anomalies to the vendor for a post-exam decision rather than intervening live. Neither environment is objectively easier; pick the one that matches how you handle pressure.

Questions to Ask Yourself

Technical Requirements and Device Setup

Meeting minimum specs gets you into the exam; meeting recommended specs gets you through it without a proctor cancellation. That distinction matters more than most candidates realize, because a machine that barely qualifies at check-in can still fail mid-exam when video streams, screen recording, and the test engine all compete for bandwidth and RAM.

Consolidated Hardware and Connection Checklist

Before booking a remote proctored cybersecurity exam, verify your setup against the current requirements for whichever platform your certification uses.

• Operating system: Pearson VUE OnVUE supports Windows 10, Windows 11, and macOS 14 or newer¹. ProctorU (Meazure Learning) and PSI accept macOS 10.15 or newer on the Mac side³⁴.
• RAM: OnVUE requires 4 GB². ProctorU and PSI list 4 GB as the floor, with 8 GB recommended³⁴.
• Display: OnVUE requires at least 1024x768 resolution with 16-bit color², and recommends 1920x1080 at 32-bit color².
• Webcam and microphone: OnVUE accepts a 640x480 webcam minimum²; ProctorU recommends 720p³. A working built-in microphone is required across all platforms.
• Internet: OnVUE wants 6 Mbps down and 2 Mbps up². ProctorU and PSI list 3 Mbps down and 1 to 2 Mbps up as the minimum³⁴, with 10 Mbps down recommended³⁴. Wired ethernet beats Wi-Fi every time.

Secure Browsers and Why They Lock Things Down

Remote proctored cybersecurity exams run inside dedicated secure applications: the OnVUE app for Pearson VUE, the PSI Secure Browser, and the Guardian Browser for GIAC exams delivered through ProctorU. These apps close other running programs, disable copy/paste, block screen capture, and prevent virtual machines from launching the exam. That is not overreach; it is the mechanism that makes an at-home exam defensible to employers and accreditors.

Configuration Gotchas

Corporate-managed laptops are the single biggest source of preventable failures. Group policy, mandatory VPN clients, and endpoint protection agents routinely block secure browsers from launching or capturing video. Test on a personal machine whenever possible.

Other common flags include active VPN or proxy connections, aggressive firewalls, Bluetooth peripherals, dual monitors (disconnect the second display entirely), and pending OS updates that trigger a reboot mid-exam. Pause Windows Update and macOS auto-updates the day before.

Run the platform's system check tool at least 48 hours out, not the night before. If something fails, you will need time to swap machines, contact support, or reschedule without penalty.

Remote Proctored Exam Technical Requirements at a Glance

Before exam day, confirm your device and internet connection meet your proctoring platform's minimum specs. Requirements vary across the three major platforms used for cybersecurity certifications. Always verify final requirements in your vendor's official candidate handbook, as specs may update between publication cycles.

Identification, Environment Rules, and Allowed Materials

What identification do you need for an online cybersecurity exam, and what can you keep on your desk?

Before you log in, knowing exactly what to show, what to remove, and what to keep nearby helps your exam session run smoothly. Certification vendors enforce consistent-but-specific identity, environment, and materials policies through live proctors and AI monitoring.

Identification Requirements

Remote proctors accept only government-issued identification that includes a photo and a signature. A valid, unexpired passport works across all major platforms, including Pearson VUE OnVUE, ProctorU, and PSI. Other acceptable forms usually include a driver’s license, state ID, or military ID. Some vendors restrict national IDs or certain residency cards, so consult your specific exam’s candidate handbook before test day. If your ID’s name does not exactly match the name on your exam registration, have supporting legal documentation ready.

The Room Scan and Desk Setup

At the start of your exam, the proctor will guide you through a 360-degree webcam sweep of your testing environment. Expect to move your laptop or camera slowly around the room so the proctor can check for unauthorized materials, additional monitors, or other people. You must remove everything from your desk surface except the permitted items listed in your exam’s policy. This includes clearing away books, papers, sticky notes, and even unplugged monitors. Proctors may also ask to see your ears (to confirm no earbuds), wrists (no smartwatches), and the area under your desk. Some platforms require a mirrored view of your screen using your phone’s camera before the exam launches.

Scratch Paper and Note-Taking Policies

Each vendor handles scratch materials differently, and using the wrong method can invalidate your results:

• CompTIA OnVUE (Pearson VUE): No physical scratch paper is permitted. Instead, a built-in digital whiteboard provides a text area and free-form drawing space, usable only with a mouse or trackpad. Be aware that if your internet disconnects, the whiteboard content is wiped clean.
• GIAC (ProctorU): Physical scratch paper is allowed. You may use one erasable whiteboard or one to two sheets of blank paper. These must be blank at the start, shown to the camera, and then destroyed or erased on camera at the end of the exam.
• EC-Council (ECC Exam Center, ProctorU, or PSI): Physical scratch materials are allowed: one sheet of blank paper or one small whiteboard, plus one pen or pencil. The same show-and-destroy rules apply.
• ISACA (PSI): When taking an ISACA exam via PSI, you can use one sheet of blank paper or a small erasable whiteboard and a writing utensil. If your ISACA exam is delivered through Pearson VUE OnVUE, physical scratch paper is not allowed, and you must use the digital whiteboard.

Items You Must Remove or Disable

A short list of universally prohibited items helps avoid common policy violations:

• Second monitors or peripherals not explicitly permitted
• Mobile phones, tablets, and smartwatches (all must be powered down and placed out of reach)
• Headphones or earbuds (unless a proctor permits them for hearing accommodations)
• Printed reference materials, sticky notes, or wall charts
• Food and beverages (exceptions for clear water in a transparent bottle may exist, but check first)

Policies can shift between vendors and over time. The last-verified dates in this section reflect 2025-2026 data, but always review the official candidate handbook for your specific exam code before test day to avoid surprises.

Related Articles

Retake Policies by Certification Vendor

Retake rules vary widely across cybersecurity vendors, and the tradeoff involves speed to recertify versus the total cost of a failed attempt. A vendor with no waiting period lets you regroup quickly, but if the retake fee equals the full exam price, each attempt carries a real cost. Here is how major issuers compare, but policies shift, so always confirm the latest details in the issuer's official candidate handbook before scheduling.

Comparison of Major Vendor Retake Policies

• CompTIA (Security+, CySA+, PenTest+, CASP+): No waiting period between your first and second attempt, and subsequent attempts require a 14-day wait.¹ There is no stated lifetime cap on attempts.¹ Full exam price applies to every retake, with no free retest or standing discount.¹ Beta exams are limited to one attempt.¹ Once you pass, you cannot retake the same exam version for 12 months.² Last verified: 2026-07.
• GIAC exams (GSEC, GCIH, GPEN, GCIA, and others) , for example, the GIAC GPEN Certification Guide , treat retakes as a separate purchase. If you fail, you buy another attempt, and the cost is significant because GIAC exams are among the most expensive in the industry. Candidates who purchased through a SANS training bundle sometimes have a retake included or discounted, but standalone certification attempts do not. A waiting period typically applies between attempts. Verify current terms in your GIAC account before assuming any retake credit. Last verified: 2026-07.
• EC-Council (CEH, CHFI): Generally allows up to five attempts within a 12-month period, with escalating waiting periods after the first failure. Each retake requires a separate voucher purchase or an ECC exam retake voucher, which is priced below a full exam. Last verified: 2026-07.
• ISACA (CISM, CISA, CRISC, CGEIT): Candidates can attempt the exam up to four times in a 12-month rolling period. Waiting periods escalate: 30 days after the first failure, 90 days after the second, and 90 days after the third. Each retake requires a new registration fee. Last verified: 2026-07.
• ISC2 certifications (CISSP, SSCP, CCSP, and the entry-level CC) , see the ISC2 Certified in Cybersecurity Guide , have escalating wait times. Typically 30 days after the first failure, 60 days after the second, and 90 days after subsequent attempts, with a cap of four attempts per 12 months. Each attempt requires the full exam fee. Last verified: 2026-07.

Online Versus Test Center Delivery

Retake rules generally do not differ between online proctored and in-person test center delivery. The waiting period, attempt cap, and fee follow the exam, not the venue. What can differ is availability: if your first attempt was online and the platform flagged an integrity issue, some vendors require your next attempt to be in a physical test center. Read your score report carefully after any failed or voided attempt.

The GIAC Cost Warning

Worth restating: GIAC's retake economics are the outlier. Because a standalone GIAC certification attempt already runs into four figures, a single failed exam can cost more than three CompTIA retakes combined. If GIAC is on your roadmap, budget for the possibility of a retake from the start, or pursue the exam through a SANS training bundle that includes a retake benefit.

What Happens if Something Goes Wrong During Your Exam

Some test-takers assume an online exam will run perfectly, but others know technical hiccups can happen and prepare accordingly. Being prepared is what gets you back on track.

Reconnection Time Windows and Timer Behavior

Online proctored exams typically run on live video and screen-sharing. If your internet drops mid-exam, the proctoring software detects the interruption. Most platforms allow a brief reconnection window, often a few minutes, before the session is terminated. During that window, the exam timer usually keeps counting down. Some vendors pause the timer as soon as connectivity is lost, but this is not universal. Your first move should be to check your device's network connection and rejoin the exam using the same session link.

The proctor may attempt to contact you via the on-screen chat box, a phone call, or an automated alert. If you do regain access, the proctor will verify your environment again and may review the recording for any suspicious activity. If reconnection fails entirely, the exam is typically marked as an incomplete.

Requesting a Free Retake After Verified Technical Failure

If a verified technical failure on the vendor's side prevents you from completing the test, you often qualify for a free retake. The key is verification: the proctor or support team must confirm that the issue originated from the delivery platform, not your equipment or internet. Common qualifying scenarios include server outages, proctoring software crashes, or persistent malfunction of the virtual whiteboard or exam interface. Equipment failures on your end, like a laptop battery dying or a home Wi-Fi dropout, do not usually qualify.

After the disruption, a case number is generally created. You then file a formal incident report with the exam sponsor, not just the proctoring company. The response time varies, but most sponsors aim to resolve within a few business days.

Filing an Incident Report

Immediately after a disruption, document everything: the time the issue occurred, error messages, proctor names if visible, and any communication. Most exam delivery vendors provide a post-exam incident form. File it right away while details are fresh. The certification sponsor (e.g., the cybersecurity organization whose credential you are pursuing) ultimately decides whether to grant a free retake. Check the candidate handbook for the exact process, as it differs across bodies.

How to Find Specific Policies for Your Exam

The single most authoritative source is the official exam candidate guide published by the certification vendor. These documents detail reconnection time limits, timer behavior, refund eligibility, and how to contact support. Secondarily, the exam delivery site (Pearson VUE, PSI, ProctorU, or others) will have a dedicated support portal with technical troubleshooting steps. For broader career data or salary context, BLS.gov provides reliable government statistics, and professional associations like (ISC)² or ISACA maintain up-to-date exam policy libraries. Avoid relying on forum posts or third-party summaries, as policies shift. Before test day, locate the exact support phone number and live chat link for your exam, and save them somewhere you can reach even if your computer is offline, such as a printed card or a cell phone.

Accommodations, Scheduling, and Cancellation

Accommodations are adjustments to the exam environment or timing that ensure candidates with documented disabilities can equitably demonstrate their knowledge on online cybersecurity exams. Scheduling logistics, rescheduling rules, and regional availability all vary by testing platform, so planning ahead makes a big difference in a smooth exam experience.

Requesting Accommodations for Remote Proctored Exams

Each exam vendor runs its own accommodations process, and the required documentation and approval timelines differ. Most request that you submit a request well before your target test date. Here is how the major platforms handle common requests like extra time, screen magnification, or separate breaks:

• Pearson VUE: Supports extra time, screen reader software (JAWS, NVDA, Dragon), and other custom adjustments. Approval typically takes about 10 business days after you submit your request directly through their accommodations portal.¹
• Microsoft certification exams: Require documentation only for specific accommodations such as extra time or an additional adult present; a formal diagnosis is not always needed.³ Plan for about 10 business days for review.²
• PSI: Offers extended time, additional breaks, screen reader support (JAWS, NVDA, VoiceOver), screen magnification, and modifiable colors.⁵ They ask for at least 35 days advance notice, and recommend applying 30 days ahead.⁴
• ProctorU / Meazure Learning: Common accommodations include extra time, screen magnifier (note: extension-based magnifiers are not supported), additional breaks, a human assistant, speaking aloud, headphones, food, and alternate ID.⁶ Check ProctorU’s accessibility page for the full list and start the process early.

Most accommodations require that you provide some form of supporting documentation, such as a professional recommendation, proof of past accommodations, or a statement of accommodation history.⁷ Breaks taken during the exam may have to occur within the camera’s view, as the proctor still monitors the session.⁶ Approval can take 2 to 4 weeks, so apply as soon as you decide on a testing date.

Scheduling Your Exam Session

Online proctored exams typically offer far more scheduling flexibility than test-center appointments. Many platforms provide near-24/7 availability, with slots opening up days or even hours in advance. However, peak times (evenings, weekends, and holiday periods) can fill up quickly, especially for popular cybersecurity certifications. Booking at least two weeks out is a safe practice when your schedule is fixed.

Before scheduling, verify that online proctoring is available in your region. Some countries are not eligible due to platform restrictions or limitations with ID-verification processes. The vendor’s scheduling page usually includes an up-to-date list of supported locations.

Rescheduling, Cancellation, and Regional Limitations

Most vendors require 24 to 48 hours notice to reschedule or cancel without forfeiting the exam fee. The exact window varies: a 24-hour cutoff is common, but some impose a 48-hour requirement. Always check the cancellation policy for your specific certification on the vendor’s candidate handbook before booking.

Regional availability can also affect your options. If your country is not listed for online proctoring, you may need to travel to a testing center or consider cybersecurity certifications vs bootcamps as an alternative pathway. Reconfirming eligibility shortly before exam day helps you avoid last-minute surprises.

For the most accurate and current details, go directly to the accommodations request page of your exam vendor, Pearson VUE, PSI, ProctorU, or the certification body’s own portal, and start the application early.

Your Exam-Day Preparation Sequence

Following a consistent preparation sequence reduces surprises on exam day. Use this timeline as a bookmark-ready checklist whether you are sitting for CompTIA, ISC2, ISACA, or another remotely proctored cybersecurity exam.

Exam-Day Checklist and Frequently Asked Questions

Before exam day, the single best thing you can do is read the official candidate handbook published by your certification vendor. Policies on identification, allowed materials, retake windows, and technical requirements differ across organizations, and handbooks are updated more frequently than third-party summaries. The checklist and answers below offer general guidance, but always confirm details at the source.