Has a VPAT or ACR been created or updated for the solution and version under consideration within the past 12 months?

This question is asking whether your organization has created or updated a Voluntary Product Accessibility Template (VPAT) or Accessibility Conformance Report (ACR) for the specific version of your software solution that's being assessed, and whether this was done within the past 12 months. A VPAT/ACR is a document that explains how information and communication technology (ICT) products such as software, hardware, electronic content, and support documentation meet (or don't meet) the Section 508 Standards and WCAG 2.0 Guidelines for accessibility. These documents help organizations understand whether your product is accessible to people with disabilities. This question appears in a security assessment because accessibility is increasingly considered part of overall compliance and risk management. Organizations may have legal obligations to provide accessible technology (especially government and educational institutions), and using inaccessible software could expose them to legal and reputational risks. To best answer this question: 1. Verify if your organization has created a VPAT/ACR specifically for the version of the product being assessed 2. Check when the VPAT/ACR was last updated - it must be within the past 12 months 3. If you have a current VPAT/ACR, provide a link to it or attach it 4. If you don't have one, or it's outdated, answer 'No' (don't guess or assume) Even if your product has strong accessibility features, without a current VPAT/ACR documentation, the answer should be 'No'.