Based on VPAT® Version 2.4
Name of Product/Version:
Research & Education Networks Information Sharing & Analysis Center website (REN-ISAC)
Report Date:
December 10th, 2020
Product Description:
The REN-ISAC mission is to aid and promote cybersecurity operational protection and response within the research and higher education (R&E) communities. REN-ISAC serves over 650 member institutions through private information sharing within a community of trusted member representatives. With services like the Security Event System (SES) and Cybersecurity Peer Assessment Services, REN-ISAC enables informed decision-making about threats and events and helps improve the overall security posture of member institutions. REN-ISAC also offers its members daily cybersecurity news reports, alerts and advisories, cybersecurity threats and mitigation analysis reports, and feedback on practices and standards from an active, interested community of subject matter experts.
As a public resource, REN-ISAC is a computer security incident response team (CSIRT) supporting the R&E community at-large that compiles and disseminates information on detected malicious activity. REN-ISAC serves as R&E's trusted partner in commercial, governmental, and private information sharing relationships, as well as in the formal U.S. ISAC community and served networks.
The scope of this VPAT is restricted to specific pages listed in the table below.
- Homepage
- Fee Structure
- Public Resources
- Alerts and Advisories
- HECVAT CBI (not publicly available)
- Helpful Resources
- Registry Support videos (not publicly available)
- Enterprise Participation home (not publicly available)
- Volunteer Today
- Workshops Page
Contact Information:
Jennifer Pacenza at accessibility@ren-isac.net
Notes:
Evaluation Methods Used:
- Manual assessment based on Windows 10, Firefox, and NVDA
- Automation Tools used: (aXe-core 3.5.5).
Applicable Standards/Guidelines
This report covers the degree of conformance for the following accessibility standard/guidelines:
| Standard/Guideline | Included In Report |
|---|---|
| Web Content Accessibility Guidelines 2.0 | Level A (Yes) Level AA (Yes) Level AAA (No) |
Terms
The terms used in the Conformance Level information are defined as follows:
- Supports: The functionality of the product has at least one method that meets the criterion without known defects or meets with equivalent facilitation.
- Partially Supports: Some functionality of the product does not meet the criterion.
- Does Not Support: The majority of product functionality does not meet the criterion.
- Not Applicable: The criterion is not relevant to the product.
- Not Evaluated: The product has not been evaluated against the criterion. This can be used only in WCAG 2.0 Level AAA.
WCAG 2.0 Report
Note: When reporting on conformance with the WCAG 2.0 Success Criteria, the criteria are scoped for full pages, complete processes, and accessibility-supported ways of using technology as documented in the WCAG 2.0 Conformance Requirements.
Table 1: Success Criteria, Level A
Notes:
| Criteria | Conformance Level | Remarks and Explanations |
|---|---|---|
| 1.1.1 Non-text Content (Level A) All non-text content that is presented to the user has a text alternative that serves the equivalent purpose, except for the situations listed below.
| Supports | All images used in the REN-ISAC Web App are provided with appropriate alternative text. |
| 1.2.1 Audio-only and Video-only (Prerecorded) (Level A) For prerecorded audio-only and prerecorded video-only media, the following are true, except when the audio or video is a media alternative for text and is clearly labeled as such:
| Supports | The REN-ISAC Web App does not contain prerecorded audio-only or video-only media. |
| 1.2.2 Captions (Prerecorded) (Level A) Captions are provided for all prerecorded audio content in synchronized media, except when the media is a media alternative for text and is clearly labeled as such. | Supports | The REN-ISAC Web App does not contain prerecorded synchronized media. |
| 1.2.3 Audio Description or Media Alternative (Prerecorded) (Level A) Captions are provided for all live audio content in synchronized media. | Supports | The REN-ISAC Web App does not contain prerecorded video content that would require audio description or a media alternative. |
| 1.3.1 Info and Relationships (Level A) Information, structure, and relationships conveyed through presentation can be programmatically determined or are available in text. | Partially supports | Most of the REN-ISAC Web App product has proper information, structure & relationship. Exception: Text appears & functions like a heading but is not marked as such. This is a problem with the framework & is notified to concerned team. Will be fixed in future releases. |
| 1.3.2 Meaningful Sequence (Level A) When the sequence in which content is presented affects its meaning, a correct reading sequence can be programmatically determined. | Supports | The REN-ISAC Web App presents content in a meaningful sequence. |
| 1.3.3 Sensory Characteristics (Level A) Instructions provided for understanding and operating content do not rely solely on sensory characteristics of components such as shape, color, size, visual location, orientation, or sound. Note: For requirements related to color, refer to Guideline 1.4. | Supports | Instructions in the REN-ISAC Web App do not rely solely on sensory characteristics. |
| 1.4.1 Use of Color (Level A) Color is not used as the only visual means of conveying information, indicating an action, prompting a response, or distinguishing a visual element. Note: This success criterion addresses color perception specifically. Other forms of perception are covered in Guideline 1.3 including programmatic access to color and other visual presentation coding. | Supports | No functions of the REN-ISAC Web App convey information through color alone. |
| 1.4.2 Audio Control (Level A) If any audio on a Web page plays automatically for more than 3 seconds, either a mechanism is available to pause or stop the audio, or a mechanism is available to control audio volume independently from the overall system volume level. Note: Since any content that does not meet this success criterion can interfere with a user's ability to use the whole page, all content on the Web page (whether or not it is used to meet other success criteria) must meet this success criterion. See Conformance Requirement 5: NonInterference. | Supports | The REN-ISAC Web App does not provide any audio content which plays automatically. |
| 2.1.1 Keyboard (Level A) All functionality of the content is operable through a keyboard interface without requiring specific timings for individual keystrokes, except where the underlying function requires input that depends on the path of the user's movement and not just the endpoints. Note 1: This exception relates to the underlying function, not the input technique. For example, if using handwriting to enter text, the input technique (handwriting) requires path-dependent input but the underlying function (text input) does not. Note 2: This does not forbid and should not discourage providing mouse input or other input methods in addition to keyboard operation. | Supports | All functionality of the REN-ISAC Web App can be operated using only a keyboard. |
| 2.1.2 No Keyboard Trap (Level A) If keyboard focus can be moved to a component of the page using a keyboard interface, then focus can be moved away from that component using only a keyboard interface, and, if it requires more than unmodified arrow or tab keys or other standard exit methods, the user is advised of the method for moving focus away. Note: Since any content that does not meet this success criterion can interfere with a user's ability to use the whole page, all content on the Web page (whether it is used to meet other success criteria or not) must meet this success criterion. See Conformance Requirement 5: NonInterference. | Supports | All screens and components of the REN-ISAC Web App do not include keyboard traps. |
| 2.2.1 Timing Adjustable (Level A) For each time limit that is set by the content, at least one of the following is true:
| Supports | The REN-ISAC Web App provides a mechanism to extend the time limit. |
| 2.2.2 Pause, Stop, Hide (Level A) For moving, blinking, scrolling, or auto-updating information, all of the following are true:
Note 1: For requirements related to flickering or flashing content, refer to Guideline 2.3. Note 2: Since any content that does not meet this success criterion can interfere with a user's ability to use the whole page, all content on the Web page (whether it is used to meet other success criteria or not) must meet this success criterion. See Conformance Requirement 5: NonInterference Note 3: Content that is updated periodically by software or that is streamed to the user agent is not required to preserve or present information that is generated or received between the initiation of the pause and resuming presentation, as this may not be technically possible, and in many situations could be misleading to do so. Note 4: An animation that occurs as part of a preload phase or similar situation can be considered essential if interaction cannot occur during that phase for all users and if not indicating progress could confuse users or cause them to think that content was frozen or broken. | Supports | The REN-ISAC Web App does not include elements that move, blink, scroll, or auto-update. |
| 2.3.1 Three Flashes or Below Threshold (Level A) Web pages do not contain anything that flashes more than three times in any one second period, or the flash is below the general flash and red flash thresholds. Note: Since any content that does not meet this success criterion can interfere with a user's ability to use the whole page, all content on the Web page (whether it is used to meet other success criteria or not) must meet this success criterion. See Conformance Requirement 5: NonInterference | Supports | The REN-ISAC Web App does not contain any flashing content. |
| 2.4.1 Bypass Blocks (Level A) A mechanism is available to bypass blocks of content that are repeated on multiple Web pages | Supports | All screens in the REN-ISAC Web App provide a means to bypass blocks of repeated content. |
| 2.4.2 Page Titled (Level A) Web pages have titles that describe topic or purpose. | Supports | Each page in the REN-ISAC Web App is provided with programmatic title that describes that page’s topic or purpose |
| 2.4.3 Focus Order (Level A) If a Web page can be navigated sequentially and the navigation sequences affect meaning or operation, focusable components receive focus in an order that preserves meaning and operability. | Partially supports | Most of the REN-ISAC Web App elements receive focus in a meaningful order. Exception: focus doesn’t move to the search region as soon as it is triggered. This is a 3rd party plug-in from Google. |
| 2.4.4 Link Purpose (In Context) (Level A) The purpose of each link can be determined from the link text alone or from the link text together with its programmatically determined link context, except where the purpose of the link would be ambiguous to users in general. | Supports | All links inn REN-ISAC Web App can be programmatically determined from their context. |
| 3.1.1 Language of Page (Level A) The default human language of each Web page can be programmatically determined. | Supports | On each page of the REN-ISAC Web App, the language is programmatically determinable. |
| 3.2.1 On Focus (Level A) When any user interface component receives focus, it does not initiate a change of context. | Supports | The REN-ISAC Web App components do not initiate a change of context when they receive focus. |
| 3.2.2 On Input (Level A) Changing the setting of any user interface component does not automatically cause a change of context unless the user has been advised of the behavior before using the component. | Supports | Changes of context do not occur automatically on user input in the REN-ISAC Web App. |
| 3.3.1 Error Identification (Level A) If an input error is automatically detected, the item that is in error is identified and the error is described to the user in text. | Supports | Where errors are automatically detected in the REN-ISAC Web App, the error is identified, and an error message is provided as text. |
| 3.3.2 Labels or Instructions (Level A) Labels or instructions are provided when content requires user input. | Supports | Labels & instructions are provided for all form controls where ever required in the REN-ISAC Web App. |
| 4.1.1 Parsing (Level A) In content implemented using markup languages, elements have complete start and end tags, elements are nested according to their specifications, elements do not contain duplicate attributes, and any IDs are unique, except where the specifications allow these features. Note: Start and end tags that are missing a critical character in their formation, such as a closing angle bracket or a mismatched attribute value quotation mark are not complete. | Partially supports | Most of the pages in REN-ISAC Web App meet necessary parsing. Exception: In header region invalid WAI-ARIA attribute has been used. This is a problem with the framework & is notified to concerned team. Will be fixed in future releases. |
| 4.1.2 Name, Role, Value (Level A) For all user interface components (including but not limited to: form elements, links and components generated by scripts), the name and role can be programmatically determined; states, properties, and values that can be set by the user can be programmatically set; and notification of changes to these items is available to user agents, including assistive technologies. Note: This success criterion is primarily for Web authors who develop or script their own user interface components. For example, standard HTML controls already meet this success criterion when used according to specification. | Supports | All elements in REN-ISAC Web App have appropriate name, role, value, state & property. |
Table 2: Success Criteria, Level AA
Notes:
| Criteria | Conformance Level | Remarks and Explanations |
|---|---|---|
| 1.2.4 Captions (Live) (Level AA) Captions are provided for all live audio content in synchronized media. | Supports | The REN-ISAC Web App does not contain audio-only media. |
| 1.2.5 Audio Description (Prerecorded) (Level AA) Audio description is provided for all prerecorded video content in synchronized media. | Supports | The REN-ISAC Web App does not contain prerecorded audio-only or video-only media. |
| 1.4.3 Contrast (Minimum) (Level AA) The visual presentation of text and images of text has a contrast ratio of at least 4.5:1, except for the following:
| Supports | All text in the REN-ISAC Web App meets minimum contrast requirements. |
| 1.4.4 Resize text (Level AA) Except for captions and images of text, text can be resized without assistive technology up to 200 percent without loss of content or functionality. | Partially supports | Most of the pages in REN-ISAC Web App zoom to 200% without loss of content. Exception: In header region content is clipped when zoomed to 200%. |
| 1.4.5 Images of Text (Level AA) If the technologies being used can achieve the visual presentation, text is used to convey information rather than images of text except for the following:
Note: Logotypes (text that is part of a logo or brand name) are considered essential. | Partially supports | The REN-ISAC Web App uses text instead of images of text except for branding elements that are considered essential. Exception: in search field there is a 3rd party image of text that cannot be remediated immediately. |
| 2.4.5 Multiple Ways (Level AA) More than one way is available to locate a Web page within a set of Web pages except where the Web Page is the result of, or a step in, a process. | Supports | More than one way is available to locate a Web page within each page of the REN-ISAC Web App. |
| 2.4.6 Headings and Labels (Level AA) Headings and labels describe topic or purpose. | Supports | The headings and labels in the REN-ISAC Web App are descriptive. |
| 2.4.7 Focus Visible (Level AA) Any keyboard operable user interface has a mode of operation where the keyboard focus indicator is visible. | Supports | All focusable elements in the REN-ISAC Web App have a visible keyboard focus indicator. |
| 3.1.2 Language of Parts (Level AA) The human language of each passage or phrase in the content can be programmatically determined except for proper names, technical terms, words of indeterminate language, and words or phrases that have become part of the vernacular of the immediately surrounding text. | Supports | Within each page or modal of the REN-ISAC Web App, the language of each portion of the page or modal is programmatically determinable. |
| 3.2.3 Consistent Navigation (Level AA) Navigational mechanisms that are repeated on multiple Web pages within a set of Web pages occur in the same relative order each time they are repeated, unless a change is initiated by the user | Supports | The REN-ISAC Web App provides consistent and repeatable navigation across all screens. |
| 3.2.4 Consistent Identification (Level AA) Components that have the same functionality within a set of Web pages are identified consistently. | Supports | Components that have the same functionality within the REN-ISAC Web App are identified consistently. |
| 3.3.3 Error Suggestion (Level AA) If an input error is automatically detected and suggestions for correction are known, then the suggestions are provided to the user, unless it would jeopardize the security or purpose of the content. | Supports | When an error is automatically detected within a data entry form in the REN-ISAC Web, the resulting error message provides suggestions for correction. |
| 3.3.4 Error Prevention (Legal, Financial, Data) (Level AA) For Web pages that cause legal commitments or financial transactions for the user to occur, that modify or delete user-controllable data in data storage systems, or that submit user test responses, at least one of the following is true:
| Supports | When data is being deleted from REN-ISAC Web App user is notified to confirm their choice. |
Table 3: Success Criteria, Level AAA
Notes: Level AAA success criteria are not within the scope of this conformance evaluation.