This document describes the accessibility and usability barriers in the Cybersecurity Awareness Training delivered by MediaPro and recommends the use of the Option #2 Canvas Cybersecurity Awareness Training for users with disabilities.
Cybersecurity Awareness Training is offered through the UW–Madison Office of Cybersecurity. This document describes the accessibility and usability barriers in the Cybersecurity Awareness Training delivered by Drip7 and recommends the use of the Option #2 Canvas Cybersecurity Awareness Training for users with disabilities.
The Cybersecurity Awareness Training educates UW-Madison faculty and staff on ways to avoid as well as address cybersecurity risks online.
The university offers two modes of training to support accessibility and diverse learning needs:
Option #1: A highly visual and interactive Cybersecurity Awareness Training delivered through the Drip7 platform. You can complete this training in approximately 20 minutes. This training is less accessible to people with visual and motor disabilities.
Option #2: A text-based Cybersecurity Awareness Training delivered in Canvas by the UW–Madison Office of Cybersecurity. This training is accessible to all users, including those with disabilities. Enroll at https://canvas.wisc.edu/enroll/F7G6PP.
The following report details the barriers discovered in the more visual and interactive Cybersecurity Awareness Training (Option #1). This documentation will update as new information comes available. At this time this training (Option #1) is not accessible to users who are blind or have low vision and need to navigate the training using a screen reader, braille display, or similar assistive technology that relies on the developer’s code in order to decipher content relationship.
Contact the DoIT Help Desk for general assistance or to report an accessibility or usability barrier.
The following information is provided to help people with disabilities know what potential barriers may exist within the Cybersecurity Awareness Training.
When navigating via keyboard, many buttons and links are not accessible because of mis-ordered focus and links having an extra tab focus on them before the interactive element.The following keyboard navigation barriers were discovered in testing the Security Awareness interactive training.
The date links on the dashboard have a focus indicator on them but do nothing when a user tries to click on them.
Focus indicators are used to let users navigating with a keyboard know when they have reached an interactive element. Because of double focus on multiple elements, users will see the focus indicator but nothing happens when they try to take action. This was found in multiple places including on the login button, the navigation menu, and the archived question categories
When navigating the training via screen reader, state changes are not all announced, alternative text is missing from images, and many interactive elements are marked as text elements. The following are examples of screen reader navigation barriers were discovered in testing the Security Awareness interactive training:
Missing alternative text on images means that they are not announced by the screen reader. The pie chart on the dashboard is completely skipped by screen readers so that users with low vision will not know what it is or that it is there at all.
When the user clicks the login button they are taken to the dashboard but that is not announced. The user has no way of knowing that the action they took happened.
When a link or a button is announced as a “text element” by a screen reader, a user is being told that it is not interactive. Any link or button that is mis-labeled as a text element is not accessible to a screen reader.
When magnified, some content is overlapping or missing from the page. It is not possible to navigate the training when magnified at 400%.
Some elements of the page are low contrast when the user focuses or hovers over them, and may be difficult for some users to navigate and read if they have low vision or are color blind.