Document ID: chunk:federal_register_of_legislation:F2024L01438:reg:8:p9
Version: federal_register_of_legislation:F2024L01438
Segment Type: reg
Provision Reference: reg 8 (pt 9/21)
Character Range: 54213–57349

security risks or vulnerabilities in the accredited entity's DI data environment, including in its information technology system when in operation;
 (ii) any other findings; and
 (iii) any recommendations.

Division 2—Useability testing

3.11  Accessible and inclusive services
  This Division applies for the purposes of subsection 30(1) of the Act.

3.12  Useability testing requirements
 (1) Useability testing of an accredited entity's public-facing accredited services must:
 (a) identify any adverse issues in the design, useability and accessibility of the entity's public-facing accredited services; and
 (b) if any adverse issues relating to useability and accessibility by individuals are identified by the assessment, make recommendations on improvements to the entity's public‑facing accredited services to address those issues and to reduce or mitigate any useability issues identified.
 (2) The useability testing must:
 (a) include testing of all user interfaces an individual will progress through when interacting with the accredited entity's public-facing accredited services and, if applicable:
 (i) each interface involving verification or authentication in relation to an individual;
 (ii) alternative channels (if any) available to the individual to complete a specific activity;
 (iii) notices in relation to privacy, including notices or information required to be given to individuals in respect of privacy matters; and
 (iv) any other information required by these rules to be given to individuals;
 (b) involve a diverse range of individuals covering diversity in disability, age, gender and ethnicity; and
 (c) involve a wide range of devices, browser access and platforms so that the testing demonstrates a continuity of support for access to the accredited services across those devices, browsers and platforms.
Note: Paragraph (2)(b) is made, in relation to accredited entities, for the purposes of paragraph 30(2)(c) of the Act. Paragraph (2)(c) is made, in relation to accredited entities, for the purposes of paragraph 30(2)(d) of the Act.

3.13  Useability testing report
  An assessor that has completed useability testing of an accredited entity's public-facing accredited services must prepare a useability testing report that includes:
 (a) a description of the scope of testing;
 (b) a description of the tools and processes used to conduct the testing;
 (c) the results of the testing, including:
 (i) findings and qualitative metrics; and
 (ii) identification of any accessibility or useability issues; and
 (d) recommendations to address any accessibility or useability issues involving the accredited entity's accredited services.

Division 3—WCAG testing

3.14  Accessible and inclusive services
  This Division applies for the purposes of subsection 30(1) of the Act.

3.15  WCAG testing requirements
  WCAG testing must test the extent to which an accredited entity's:
 (a) public-facing information related to accredited services on its web pages (within the meaning of that term in the WCAG) satisfies the Level A Success Criteria specified in WCAG version 2.1 in accordance with subrule