Can all functions of the application or service be performed using only the keyboard?

Keyboard accessibility is the concern, namely whether every function of the application or service can be performed using only a keyboard, with no mouse or pointing device required. This is a fundamental accessibility requirement that ensures users with motor disabilities or those who cannot use pointing devices can still access all functionality.

In a security assessment context, this question appears because accessibility is increasingly considered part of overall compliance requirements. Organizations must ensure their systems are accessible to all users, including those with disabilities, to comply with regulations like the Americans with Disabilities Act (ADA), Section 508 of the Rehabilitation Act, or the Web Content Accessibility Guidelines (WCAG).

Accessibility also relates to security in that it ensures all users can securely interact with systems without needing assistance that might compromise security protocols. For example, if a user with a disability needs to share credentials with an assistant because they cannot navigate the authentication process independently, this creates a security vulnerability.

When answering this question, you should:

1. Indicate whether all functions can be accessed and operated using only keyboard commands
2. Mention if keyboard shortcuts or focus indicators are implemented
3. Note any exceptions where keyboard-only operation is not possible
4. Reference any accessibility testing or compliance standards you've met
5. If not fully keyboard accessible, explain any remediation plans