ITAC-05

Web Link to Accessibility Statement or VPAT

Explanation

This question is asking for a web link to your organization's Accessibility Statement or Voluntary Product Accessibility Template (VPAT). An Accessibility Statement is a public-facing document that outlines how your organization addresses digital accessibility in your products or services. It typically includes information about your commitment to accessibility, the standards you follow (like WCAG 2.1), known limitations, and how users can report accessibility issues. A VPAT is a standardized document that explains how information and communication technology (ICT) products and services comply with Section 508 standards and WCAG guidelines. It provides a detailed breakdown of accessibility conformance across various criteria. This question is being asked in a security assessment because: 1. Regulatory Compliance: Many organizations must comply with accessibility laws like the Americans with Disabilities Act (ADA), Section 508 of the Rehabilitation Act, or similar international regulations. 2. Risk Management: Non-compliance with accessibility requirements can pose legal and reputational risks. 3. Inclusive Design: Accessibility is increasingly viewed as part of overall security and trust posture - ensuring all users can safely and effectively use your systems. To best answer this question: - Provide a direct URL to your publicly available Accessibility Statement or VPAT - If you have both, you can provide links to both documents - If your VPAT is not publicly available, the guidance indicates you can attach it to your response - Ensure the link is current and the document is up-to-date - If you don't have either document, explain your current accessibility compliance approach and any plans to develop these documents

Guidance

VPAT can also be added as an attachment

Example Responses

Example Response 1

https://www.ourcompany.com/accessibility - Our accessibility statement is publicly available at this URL, which details our WCAG 2.1 AA compliance status, known limitations, and contact information for accessibility support We also maintain a current VPAT which can be provided upon request or found at https://www.ourcompany.com/vpat.

Example Response 2

We maintain our VPAT at https://company.sharepoint.com/accessibility/CompanyProduct-VPAT-2023.pdf (attached to this response) Our public-facing accessibility statement can be found in the footer of every page of our application or directly at https://product.company.com/legal/accessibility Both documents are updated annually, with our most recent update completed in March 2023.

Example Response 3

We currently do not have a formal Accessibility Statement or VPAT published Our product was developed before accessibility requirements were fully integrated into our development process We are currently working with a third-party accessibility consultant to conduct an audit of our platform, with plans to publish both an Accessibility Statement and VPAT by Q3 of this year In the interim, we address accessibility concerns on a case-by-case basis through our support team at support@ourcompany.com.

Context

Tab
IT Accessibility
Category
IT Accessibility

ResponseHub is the product I wish I had when I was a CTO

Previously I was co-founder and CTO of Progression, a VC backed HR-tech startup used by some of the biggest names in tech.

As our sales grew, security questionnaires quickly became one of my biggest pain-points. They were confusing, hard to delegate and arrived like London busses - 3 at a time!

I'm building ResponseHub so that other teams don't have to go through this. Leave the security questionnaires to us so you can get back to closing deals, shipping product and building your team.

Signature
Neil Cameron
Founder, ResponseHub
Neil Cameron