In 2022, The UK’s Department for Transport (DfT) and Civil Aviation Authority (CAA) were seeking a partnership with a third-party provider to develop a replacement for the National X-Ray Competency Test (NXCT). The pace of technological change within aviation security, especially the increasing use of 3D screening, meant that the incumbent test was no longer appropriate for all screeners. Furthermore, the UK CAA had a desire to improve the efficiency of its screener certification system, including ensuring the test was more accessible for all users.  

The proposed replacement would be designated the Digital National X-ray Competency Test (DNXCT). It would be a web-based application accessible via the principal web browsers (Edge, Chrome, Safari, and Firefox) with no local installation requirement. It would cover all relevant operational environments, including 3D image testing. In line with the UK CAA’s charging principles, DNXCT would be a cash-neutral product, with entities (airports, cargo-regulated agents, and training providers) paying a fee per assessment to cover the cost of the DNXCT. 

The UK screener certification transformation project brought many improvements. 

Assessment Validity:

• Goal: Moving towards a test that is representative of operational reality
• Problem: Outdated image banks, no 3D images, test locally installed limiting operational flexibility
• Solution: 7 specific assessments across 4 screening modes, 3D and 2D images, X-Ray correct images (energy maps, not screenshots), clear/search/threat disposal decisions, robust scoring system in the backend, online access.

Data:

• Goal: Creating a test where data points can be accessed and evaluated
• Problem: No immediate data access, limited data availability
• Solution: Dashboard and reporting, full test data available, exportable and integrable, can be shared.

Malpractice and Security:

• Goal: Ensuring that the certification regime is designed to discourage malpractice
• Problem: Avoidance of malpractice, such as trainees sitting tests on behalf of each other, or receiving assistance during the test
• Solution: Authentication key required from Test Manager, data traceable through the system for invigilators and candidates, IP allow-listing, secure image bank.

Regulatory Transformation:

• Goal: Maintaining the correct regulatory provisions to manage the risk
• Problem: Test requirements not outlined within regulation, too stringent requirements on Test Managers, cumbersome approval process
• Solution: Streamlining and digitalisation of Test Manager approval, realignment of the approval requirements with the actual need and risk, and addition of more specific regulations on testing. 

Cybersecurity:

• Goal: Ensuring the certification system kept pace with modern cyber security requirements
• Problem: Emergent cyber risks linked to updating to an online system with more held data
• Solution: Robustly defined requirements and implemented features, Multi-factor Authentication, IP allow-listing
  

From a test performance perspective, the UK certification system has been performing exceptionally. Quality assuring the test itself is a very important part of maintaining effective certification, and the UK approach points towards a highly successful testing system.  

Tens of thousands of users have registered on the system, taken assessments, and been awarded certifications. The UK can have a high level of confidence that all screeners who pass the test have an appropriately high standard of competency in image-based interpretation at the time of certification, and hence confidence in the human element of the screening system.  

Furthermore, screeners undertaking assessments have achieved an average score across all tests that meet the baseline standard and risk requirements of the UK appropriate authority.  

There are over 38,000 hours of assessment time recorded in the system, and the system has shown capability to deliver 32,000 images per hour. 

DNXCT has played a crucial role in helping the UK align with the International Civil Aviation Organisation’s (ICAO) Global Aviation Security Plan (GASeP). 

For example, under “Enhance risk awareness and response”, the system’s ability to track screener performance at a range of levels means that vulnerabilities can be addressed in a proactive manner. And under “Improve technological resources and foster innovation”, the digital certification process and test manager approval process have given greater accuracy and efficiency. The data now available to the UK CAA also meet priority area 5: “Improve oversight and quality assurance” – screener performance data can be used to link into compliance activity and risk assessment.  

By reinforcing these critical GASeP pillars, the digital screener certification system strengthens the UK’s role in upholding the integrity of global aviation security. 

The UK case study demonstrates both the critical importance of screener certification to aviation security and the transformative benefits the installation of the DXCT product can bring. The UK system was designed to meet exacting regulatory requirements based on educational expertise and feeds into a positive security culture and professionalisation, where certification is viewed as a valuable tool to drive up standards.  

These foci, alongside the ample evidence of the system’s success, mean that the UK Regulator can have confidence that their image-based assessment is a valid test of competency and that screeners in the UK system are sufficiently skilled. The assurance of screener competency in this way directly leads to improvement in screening standards –  CAA International and Rapiscan have the shared goals of driving up certification standards globally, following the exemplary UK model.