Under Construction: The content on this site draft material. It is not the official content of this site and should not be followed at this time.

Not Legal Advice: The content on this site is provided for informational purposes only and does not constitute legal advice. Consult a qualified attorney for advice specific to your situation.

Preparation precedes crisis. Organizations that have invested in accessibility program infrastructure before a legal challenge arrives are far better positioned to demonstrate good faith compliance and achieve favorable outcomes.

Accessibility Program Maturity

Understanding where your program stands is the starting point for improvement. Maturity models provide a structured framework for assessment.

Maturity Assessment

A formal maturity assessment evaluates your organization's accessibility capabilities across multiple dimensions.

  • Initial (Level 1): Ad hoc, reactive, no formal program
  • Managed (Level 2): Some policies, inconsistent implementation
  • Defined (Level 3): Documented processes, assigned ownership
  • Measured (Level 4): Metrics tracked, continuous improvement
  • Optimized (Level 5): Industry-leading, proactive, user-centered

Gap Analysis

Document the gap between your current state and target maturity level. The gap analysis itself demonstrates organizational awareness and intent to improve.

  • Identify capability gaps by domain (design, development, testing, content)
  • Prioritize gaps by legal risk and remediation effort
  • Create a roadmap with measurable milestones
  • Review and update the gap analysis annually

Risk Assessments

Formal risk assessments identify which products, features, and populations present the greatest accessibility liability exposure.

Product Risk Inventory

Not all products carry equal accessibility risk. Prioritize your risk assessment based on:

  • Regulatory coverage (ADA, Section 508, AODA, EN 301 549)
  • User population (public-facing vs. internal tools)
  • Task criticality (e.g., benefits enrollment, job applications)
  • Current conformance status and known issues
  • Litigation history in your sector

Documenting Risk Decisions

When you accept accessibility risk or defer remediation, document the rationale. Documented risk decisions demonstrate thoughtful decision-making rather than negligence.

  • Record who made the risk acceptance decision
  • Document the business justification
  • Set a review date for deferred items
  • Track risk decisions in a formal risk register

Vendor Management

Third-party products introduce accessibility risk that your organization may be legally responsible for. Systematic vendor management reduces that exposure.

Vendor Accessibility Assessment

  • Inventory all third-party software and services
  • Collect current VPATs (ACRs) from each vendor
  • Conduct independent testing of high-risk vendor products
  • Track vendor accessibility roadmaps and commitments
  • Establish escalation paths for vendor accessibility failures

Contract Provisions

Contracts are your primary lever for enforcing accessibility requirements on vendors.

  • Require WCAG 2.2 AA conformance warranties
  • Include accessibility remediation SLAs
  • Negotiate indemnification for accessibility-related claims
  • Require notification of known accessibility issues
  • Include audit rights for accessibility testing

Accessibility Statements

A public accessibility statement is both a legal protection mechanism and a user service. It demonstrates transparency and provides a feedback channel.

Statement Requirements

An effective accessibility statement includes:

  • The applicable standard and conformance target
  • Current conformance status (full, partial, non-conformant)
  • Known accessibility limitations and workarounds
  • Contact information for accessibility feedback and requests
  • Date the statement was last reviewed
  • Links to feedback and complaints procedures

Maintaining Accuracy

An inaccurate accessibility statement can be used as evidence against you. Review and update statements regularly.

  • Review statements after every major release
  • Update known issues as they are remediated
  • Align statement claims with actual audit findings
  • Store historical versions of accessibility statements

Audit Planning

Formal accessibility audits generate the documented evidence needed to demonstrate compliance and identify remediation priorities.

Audit Scope and Frequency

  • Define audit scope by product, template, or user journey
  • Plan annual comprehensive audits at minimum
  • Conduct targeted audits after major releases
  • Use sampling strategies for large websites
  • Consider third-party independent audits for high-risk products

Audit Documentation Standards

Audit documentation is discoverable evidence. Establish consistent formats that demonstrate thoroughness.

  • Document testing methodology and tools used
  • Record tester qualifications and assistive technologies
  • Map findings to specific WCAG success criteria
  • Include reproduction steps and screenshots
  • Assign severity ratings to each finding

Remediation Planning

A documented remediation plan demonstrates that your organization treats accessibility issues seriously and is actively working to resolve them.

Remediation Roadmap

  • Prioritize critical barriers to access first
  • Assign owners and target completion dates
  • Track remediation status in a verifiable system
  • Include remediation progress in accessibility reports
  • Define what "done" means for each issue

Remediation Prioritization Framework

Not all issues are equal. Prioritize based on:

  • Impact: Does this prevent task completion?
  • Breadth: How many users are affected?
  • Frequency: How often is this page or feature used?
  • Legal exposure: Is this covered by active litigation or demand letters?
  • Remediation cost: What effort is required to fix?