Appendix 12 - NARA Website Requirements Checklist.xlsx
XLSX spreadsheet 45 KB Posted
- Attached to
- Presidential Library Ticketing System
- Solicitation number
- 88310326Q00008
About this file
This document is a NARA Website Requirements Checklist, a comprehensive guide for creating and maintaining websites within the National Archives and Records Administration (NARA). The checklist covers six primary domains: accessibility, security, legal requirements, design, usability, and efficiency, with detailed specifications for each area. Key requirements include meeting Web Content Accessibility Guidelines (WCAG 2.0 AA level), implementing secure HTTPS connections, using approved domain names, following NARA's Visual Identity Guide, ensuring mobile-friendly design, and using the U.S. Web Design System's components.
The checklist provides specific technical and design guidelines, such as using Source Sans Pro and Merriweather fonts, implementing high-contrast text, providing descriptive alt text for images, using clear external link disclaimers, including footer links to Accessibility and Privacy pages, and ensuring all digital objects are linked to the National Archives Catalog. Each requirement is mapped to a specific policy reference, including OMB memorandums, NARA directives, and federal regulations. The document is designed to help NARA staff and contractors create consistent, accessible, and compliant websites, with contact information provided for various implementation questions.
View the file
Other files
Show all 15
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Checklist
| Guidance | NARA Website Requirements Checklist | Last updated: 5/1/2021 | Contact domains@nara.gov before using Checklist and for any questions | ||||
| URL: | 0/48 completed | Start Date: | Date Completed: | ||||
| POC Feedback | Tech Feedback | V Review Feedback | ✓ | Requirements Report | For More Information | Notes | Policy Reference |
| Accessibility: Site meets Web Content Accessibility Guidelines | |||||||
| Meets Web Content Accessibility Guidelines at the WCAG 2.0 AA level | WCAG Overview | Example of an Accessibility Testing Tool | NARA 807.6.b | ||||
| PDFs are accessible | PDF Techniques for WCAG 2.0 | Avoid using PDFs - use more accessible formats such as webpages that are also more easily searched. Ensure new PDFs are compliant; then work to remediate existing PDFs. Guidance on When to Use PDFs | OMB M-17-06 | ||||
| Multimedia files such as audio/video are accessible (e.g., include captions or transcripts, audio descriptions, and/or use an accessible player) | Web AIM Guide to Captions, Transcripts, and Audio Descriptions | Start with new multimedia going forward. Work on a plan to remediate existing multimedia. | OMB M-17-06 | ||||
| Images that convey contextual content use appropriate descriptive alt text | Web AIM Guide to Alternative Text | Accessibility for Websites and Other Digital Services | OMB M-17-06 | ||||
| There is a high contrast between text and background images or color | U.S. Web Design System: Text Accessibility | Contrast ratio should be at least 4.5:1. Use this tool to check accessibility: http://wave.webaim.org/ | OMB M-17-06 | ||||
| Links are easily identified without relying on color alone and can be activated to hover and focus states with both a mouse and a keyboard | U.S. Web Design System: Links Accessibility | OMB M-17-06 | |||||
| Forms clearly and consistently distinguish required data entry fields from optional data entry fields | Web Accessibilty Guide to Forms | OMB M-17-06 | |||||
| Includes link in footer to "Accessibility" page | Example on Archives.gov | The Accessibility page should include statements explaining NARA facility accessibility (e.g., parking, large text labels), website accessibility, and contact information for comments about accessibility. | OMB M-17-06 | ||||
| Security: Procedures are in place and have been reviewed by IT | |||||||
| Provides services through a secure connection (HTTPS) and uses HTTP Strict Transport Security (HSTS). | Fill out 8022 IT Hardware / Software Request Form or contact sslcertrequest@nara.gov for assistance securing an SSL certificate. | Use HTTPS Scoring and Testing Tools - verify FISMA, BOD, and OMB Compliance, including SSLv2, SSLv3, 3DES, and RC4 disabled, and the HSTS and HSTS header must have Strict-Transport-Security: max-age=31536000. | OMB M-15-13 | ||||
| Complies with email security requirements (applies to any emails). | For more information email Information.Services@nara.gov If a user can send email or submit a form, email security guidelines must be followed. | The site must have Valid Sender Policy Framework (SPF) Record, Domain-based Message Authentication, Reporting and Conformance (DMARC) Policy, and DMARC reports must be configured to be sent to the Department of Homeland Security (DHS). | BOD 18-01 | ||||
| Prevents users from saving credentials (including usernames, passwords, and credit card numbers) in browsers | Web Credentials Controls | NARA Audit 16-05-1f | |||||
| The website is included in the List of NARA Websites, with current information about points of contact, hosting, etc. | Fill out Entry Form on List of NARA websites | Contact domains@nara.gov for assistance | NARA Audit 16-01-4 | ||||
| The site has passed IT Security scans of the site prior to launch and accommodates future scans | Contact Information.Assurance@nara.gov for assistance | NARA 804 | |||||
| If the site is hosted outside of NARA's environment, a copy of the hosting and contract / agreement is with the NARA contracts office. | CIO has verified IT controls and security for the web hosting environment | Contact Information.Assurance@nara.gov for assistance | NARA 804 | ||||
| NARA Google Tag Manager Code is in place, which includes NARA's Google Analytics code and GSA's Digital Analytics Program (DAP) code | Instructions: How to Install NARA's Google Tag Manager on Your Website | Note: If you have additional scripts to include in the GTM please send a request to webprogram@nara.gov. | OMB M-17-06 | ||||
| Legal: Requirements are followed for privacy, FOIA, external links | NARA 807.6.b | ||||||
| Domain name follows NARA guidance, including using a .gov domain unless an exception is granted in consultation with General Counsel | SOP: Process for Requesting a New Domain or Subdomain | New Federal .gov domain names must be approved by the General Services Administration’s Office of Government-wide Policy (OGP) | OMB M-17-06 | ||||
| For new domain names, domain has been approved and DNSSEC (Domain Name System Security Extensions) key is applied for top-level domains. | SOP: Process for Requesting a New Domain or Subdomain | Initiate domain requests / url changes via domains@nara.gov for assistance | OMB M-08-23 | ||||
| Links to external sites are clearly indicated and disclaimer language is provided. Exceptions include links to other NARA websites, .gov sites, and approved social media accounts | Example disclaimer language on Archives.gov | Indication of an exit link can be implemented in multiple ways; suggested approaches include: an arrow or similar icon next to the link that displays disclaimer language on hover or click, an interstitial pop-up, or a disclaimer elsewhere on the page (e.g., in the footer) | OMB M-17-06 | ||||
| Includes link in footer to "Privacy" page | Example privacy page on Archives.gov | The link should be cleared by General Counsel to link to archives.gov/privacy if it differs from current policy, or link to the site's own specific privacy page | OMB M-17-06 | ||||
| All 3rd party applications have been approved by Information Services and NGC and have a federal-friendly Terms of Service | Contact it-help@nara.gov with questions | OMB M-17-06 | |||||
| Includes a link in footer to "Freedom of Information Act" (or otherwise explains how users can access information under FOIA) | Example FOIA page on Archives.gov | Link should point to https://www.archives.gov/foia/ or the site's own FOIA page | OMB M-05-04 | ||||
| Design: NARA branding and style has been properly applied | |||||||
| Follows fonts designated by the NARA Visual Identity Guide (Source Sans Pro and Merriweather) | Visual Identity Guide | 18. Ensure a Consistent Look and Feel Across Websites | OMB M-17-06 | ||||
| Uses color palette designated by the U.S. Web Design System | Visual Identity Guide | U.S. Web Design System - Colors | OMB M-17-06 | ||||
| Uses user interface components designated by the U.S. Web Design System (e.g., buttons, search bar, alerts, form controls, tables, accordions) | U.S. Web Design System - UI components | OMB M-17-06 | |||||
| Incorporates the Visual Identity header and navigation bar, in accordance with the Visual Identity Guide | How to Install NARA's Google Tag Manager on Your Website | Contact webprogram@nara.gov for assistance | NARA 105 | ||||
| Includes link to Archives.gov in navigation | Visual Identity Guide Branding | Can be a hyperlinked NARA logo in Visual Identity header bar | NARA 807.12 | ||||
| Other logos have been approved for use on websites | Visual Identity Guide Logos | NARA 105 | |||||
| Includes link to "About Us" in footer or elsewhere | Example About page on Archives.gov | The page should explain the site’s mission, governance, and responsible parties | OMB M-05-04 | ||||
| Usability: Content and interactions are based on customer needs | |||||||
| Content is written using plain language and the NARA Style Guide | Plain Writing Checklist | Email plainlanguage@nara.gov to request help reviewing key pages | OMB M-17-06 | ||||
| Content and urls follow NARA Guidance | Naming Files and Directories | Common errors: DC not D.C., email not e-mail, website not web site | NARA 201-S2 | ||||
| Mobile friendly or responsive web design is implemented | "Mobile friendly" means that the website is configured in such a way that it may be navigated, viewed, and accessed on a smartphone, tablet computer, or similar mobile device. | Pub. L. 115-114: Connected Government Act | |||||
| Includes link in footer to "Contact Us" or provides another easily findable way for users to contact organization | Example Contact page on Archives.gov | Verify routing, formatting and consistent language is applied for sender and recipient | NARA 807.12 | ||||
| Includes a search function and uses U.S. Web Design Guidelines for search bar | U.S. Web Design System: Search Bar | If you'd like to use GSA's free Search.gov tool, email webprogram@nara.gov for assistance with implementation | OMB M-17-06 | ||||
| Indicates the file type (e.g., "PDF" or PDF icon) and size for very large downloadable files | NARA 807.6b | ||||||
| All forms (including contact us and registration) are approved by NARA | NARA Forms Register | Email forms@nara.gov for assistance and review of all forms | NARA 205 | ||||
| Efficiency: Uses shared tools, services, and content to maximize efficiency | |||||||
| Content is reviewed every quarter by content owners | Content must be reviewed every quarter for accuracy, tone, timeliness, and completeness | NARA 808 | |||||
| Uses Drupal content management system or other approved system | Drupal is NARA's preferred CMS. Contact webprogram@nara.gov for guidance on alternative CMS proposals. | ||||||
| The site is hosted within NARA's enterprise cloud environment (AWS). Exceptions must be granted by the CIO | Contact Information.Assurance@nara.gov for assistance | ||||||
| Descriptions of holdings are available in the National Archives Catalog | Contact catalog@nara.gov for assistance | NARA 816 | |||||
| All digital objects are linked to the National Archives Catalog and/or are served by the Catalog API | NARA API Developer Documentation | Contact catalog@nara.gov for assistance | NARA 816 | ||||
| Digitization projects and description projects are coordinated with the Office of Innovation | Contact catalog@nara.gov for assistance | NARA 816 | |||||
| If posting events, news, or exhibits, uses structured content models to make data shareable across platforms | Government open and structured content models | By using standardized content models, NARA can reuse content across websites. Contact webprogram@nara.gov for guidance. |
https://wave.webaim.org/https://icn.nara.gov/docs/DOC-37859https://work.nara.gov/websites/accessibility.htmlhttp://wave.webaim.org/https://work.nara.gov/forms/na-8022/index.html?type=softwarehttps://docs.google.com/document/d/1QwrL02zOG48a-uBe7KvtvwQWQ2j3HyTilKo4ywExsLs/edithttps://docs.google.com/document/d/1mI-Pby3HUEPQlpVNY7WdIkHm7RedAyUrPbOw90ajHk0/edithttps://docs.google.com/document/d/1mI-Pby3HUEPQlpVNY7WdIkHm7RedAyUrPbOw90ajHk0/edithttps://work.nara.gov/forms/index.html Instructions
| Before using this checklist - contact domains@nara.gov |
| Before creating a new website or significantly changing an existing one, you must first inform and coordinate with the Office of Innovation and the Office of Information Services. |
Contact domains@nara.gov to initiate the NARA Website Requirements Checklist
> applies to steps throughout the website lifecycle - from proposal to after launch > addresses OIG Audit recommendations > reinforces NARA 807 Website Management Requirements
Innovation Office is responsible for ensuring that policies and best practices are applied to all NARA websites. The website checklist was created to provide a convenient "cheat sheet" for some of the major policy implications NARA staff and contractors need to understand when redesigning or creating new websites.
The checklist covers: accessibility, measurement, legal, usability, efficiency, design, and security concerns. The final column lists the originating policy reference for each item on the checklist.
https://www.google.com/url?q=https://work.nara.gov/websites/website-checklist.html&sa=D&ust=1569956576874000&usg=AFQjCNFTDGsmyJ58Wnj5aJAgcE_J3JOGCw Options
| Yes |
| No |
| Doesn't apply |
| Need more information |
Changelog
| Date of Change | Description of Change |
| May 2021 changes | Fixed NARA@work Form links |
Updated Visual Identity Guide links Replaced Archives.gov link in footer with Branding bar Updated hosting and contract requirements Updated header rows Fixed borders Fixed options Pending Use Monsido
807 update
RFC approvals of Security documents
Revise based on IDEA Act requirements https://www.congress.gov/bill/115th-congress/house-bill/5759 Eliminate redundant items - link to official source https://policy.cio.gov/web-policy/ and https://digital.gov/resources/required-web-content-and-links and https://www.congress.gov/bill/115th-congress/house-bill/5759 and https://digital.gov/resources/checklist-of-requirements-for-federal-digital-services/
Frozen / evergreen disclaimer - this content is not updated
What applies to Social Media (blogs etc.)
US Web Guide as a guide -- https://designsystem.digital.gov/design-principles/ IDEA Act - https://www.congress.gov/bill/115th-congress/house-bill/5759 https://obamawhitehouse.archives.gov/sites/default/files/omb/egov/memo/policies-for-dot-gov-domain-issuance-for-federal-agency-public-websites.pdf
Search - build essential SEO components into your page templates from the beginning: unique page <title> tags, <main> and other semantic elements for page sections, date metadata in the <head>, XML sitemap.
Custom 404
Internal Review Board - maintenance requirements - tiers for Change Control Boards - notify prior to maintenance etc.
NARA Notice 2018-022 don't use unapproved free or unauthorized software
Email services / Security https://docs.google.com/document/d/1aGDkLo5CHDkd00CkizO0dFD3k6gw3TqZyT2ArmQV9dU/edit?ts=5f35833f# https://docs.google.com/document/d/1uvN9W4uNAG6wT2FMwuIQnfjiTebhUBiFFygnCdwI6Kk/edit https://csrc.nist.gov/publications/detail/sp/800-115/final https://csrc.nist.gov/topics/laws-and-regulations/laws/fisma
SSL - justification for not using AWS / Entrust certificates
Join Site Owners Google Group or attend scheduled (monthly?) meetings June 2020 changes Re-organized based on Priority (Accessibility and Security first)
Changed links to Visual Identity Guide including fonts - Header font is Merriweather (fallback: any serif font) Body font is Source Sans Pro (fallback: any sans serif font) https://work.nara.gov/visual-identity-guide/index.html https://work.nara.gov/nara_policies_and_guidance/directives/0100_series/nara0105.html
Changed Section 508 2.1 to 2.0 (per Joc 11/13/19) - use https://webaim.org/resources/contrastchecker/ Jaws https://wave.webaim.org/ https://portal.audioeye.com/ https://webaccessibility.com/ https://www.section508.gov/test https://www.w3.org/WAI/ER/tools/ https://webaim.org/resources/contrastchecker/ https://abilitynet.org.uk/news-blogs/five-golden-rules-compliant-alt-text
Changed contact info from Web Program to Domains
Websites | Fixed Header and Navigation Bar Official websites belonging to National Archives organizations should incorporate the Visual Identity header and navigation bar. This bar is deployed at the agency level by the Office of Innovation’s web team. https://work.nara.gov/visual-identity-guide/social-media-websites.html 1/16/19 Moved POC Feedback / Tech Feedback / VES Review Feedback to frozen row to be viewable via all rows
6/10/19 Renamed as Template Locked columns B-E to prevent revisions #8 Removed links to PNG logo #21 Moved Form accessibility to Accessibility section #33 Added File Naming Conventions #35 Added Verify routing, formatting and consistent language is applied for sender and recipient #51-52 Added links to the Audits #52 Change Domain Database link to https://work.nara.gov/websites/list.html #53 Added future scans to address monthly cross-scripting scans Removed Instructions tab and linked to Guidance Added Reviewed by
| 5/9/19 | Added Instructions tab |
| 3/20/19 | #1 Added link to Checklist description on NARA@work (not accessible externally) |
#2 Added fields for date / url #4 Added Who to Contact #5 Added 18. Ensure a Consistent Look and Feel Across Websites #8 changed top of all pages to header or footer - Includes NARA's official agency logo (eagle) at the top of all pages, in accordance with the Visual Identity Guide #9 moved from #11 to connect with #8 and moved logo to Notes - Includes link to Archives.gov in the footer (can be a hyperlinked NARA logo) #10 changed from contact to Initiate domain requests / url changes via the Web Program #25 added Domain meets federal requirements and related links #54 changed MOU Agreement to Agreement / Contract and send link to Web Program (for Domain Database / OIG Audits)
| 2/26/19 | Changed contact webprogram to Contact webprogram@nara.gov prior to using checklist |
| 12/3/18 | Fixed tracking to capture items #4-53 |
| 10/19/18 | Fixed NARA broken Directive links - replaced NARA 807 root url with https://work.nara.gov/nara_policies_and_guidance/directives/0800_series/nara0807.html, NARA 808 with https://work.nara.gov/nara_policies_and_guidance/directives/0800_series/nara0808.html, NARA 816 with https://work.nara.gov/nara_policies_and_guidance/directives/0800_series/nara0816.html, NARA 205 with https://work.nara.gov/nara_policies_and_guidance/directives/0200_series/nara0205.html |
| 9/13/18 | Fixed NARA 804 links - changed to https://work.nara.gov/nara_policies_and_guidance/directives/0800_series/nara0804.html#804.5 |
| 6/22/18 | Changed title of document from "NARA Website Review Checklist" to "NARA Website Requirements Checklist"; moved Design section to top and reordered rows into logical order; changed "U.S. Web Design System have been applied. This includes fonts, color palette, and other user interface components." to "Uses fonts designated by the U.S. Web Design System (Source Sans Pro and Merriweather)." and added link to typography page; added "Uses color palette designated by the U.S. Web Design System" and added link to color palette page; added "Uses user interface components designated by the U.S. Web Design System (e.g., buttons, search bar, alerts, form controls, tables, accordions)" and added link to UI components page; changed "NARA's official agency logo (eagle) is visible on homepage and all main pages (and links to Archives.gov)" to "Includes NARA's official agency logo (eagle) at the top of all pages, in accordance with the Visual Identity Guide" and added note "Contact webprogram@nara.gov for assistance with including standard branding bar"; changed "Site is hosted on a .gov domain (unless an exception is granted in consultation with General Counsel)" to "Domain name follows NARA guidance, including using a .gov domain unless an exception is granted in consultation with General Counsel" and added link to Domain name guidance document; moved information from Accessibility blue bar regarding WCAG to new row that reads "Meets Web Content Accessibility Guidelines at the WCAG 2.1 AA level"; changed "All 3rd party applications have been approved by NARA" to "All 3rd party applications have been approved by Information Services and NGC" and changed "Contact socialmedia@nara.gov with questions" to "Contact it-help@nara.gov with questions"; moved "Written content follows the NARA Style Guide" up a few rows; Changed "A content management workflow plan is in place and content owners have been assigned" to "Content is reviewed every quarter by content owners according to the website's content management workflow plan"; added "National Archives" to all references to the "Catalog"; removed "Digital objects are available in the National Archives Catalog"; combined two rows into one that reads "Digitization projects and description projects are coordinated with the Office of Innovation"; reordered rows related to the Catalog; changed "The website is listed in the central domain database on NARA@work (with up-to-date information about points of contact, where it is hosted, etc.)" to "The website is included in the List of NARA Websites, with current information about points of contact, hosting, etc." and changed "NARA Website Contacts & Properties" to "List of NARA websites"; corrected typo in "environment" |
| 5/21/18 | Changed "HTTPS is implemented" to "Provides service through a secure connection (HTTPS) and uses HTTP Strict Transport Security (HSTS) to ensure this."and added to the notes: "To pass this requirement, the site must be: HSTS compliant, SSLv2 ,SSLv3, 3DES, and RC4 disabled, and HSTS header must have Strict-Transport-Security: max-age=31536000." Added a requirement: "If a user can send email (e.g., using an online form), email security guidelines must be followed. The site must have a Valid Sender Policy Framework (SPF) Record, Domain-based Message Authentication, Reporting and Conformance (DMARC) Policy, and DMARC reports must be configured to be sent to the Department of Homeland Security (DHS)." and the note "Submit a Request for Change (RFC) to ECAB_CM@nara.gov. Example body of email request: DNS Record TXT file should be reconfigured to the following: [anygovdomain.gov] IN TXT "v=spf1 –all" _[anygovdomain.gov] IN TXT "v=DMARC1; p= [none, quarantine, or reject]; rua=mailto:reports@dmarc.cyber.dhs.gov; ruf=mailto:dmarc.reports@nara.gov; sp=none; fo=1" For more information email: Information.Services@nara.gov" as well as a link to the policy BOD 18-01. |
| 5/18/18 | Changed title of document from "NARA Website Checklist" to "NARA Website Review Checklist" |
| 5/17/18 | Updated references to "H.R.2331: Connected Government Act" to "Pub. L. 115-114: Connected Government Act" |
| 5/1/18 | Added Changelog tab to document edits made to checklist (see below). |
| 2/27/18 | Added link to instructions for installing Google Tag Manager Code and contact information |
| 1/25/18 | Updated all references to "U.S. Web Design Standards" to new name, "U.S. Web Design System" |
| 1/23/18 | Updated language regarding "mobile friendly or responsive web design"; added definition of "mobile friendly"; added link to H.R. 2331: Connected Government Act |
| 10/17/17 | Added links to NARA 816 to checklist items related to description and digitization |
| 10/12/17 | Added links to NARA logo files; added links to NARA 811-2 for Catalog-related items; added "in consultation with General Counsel" to .gov domain exception language; added links to NARA 804 for IT security items; changed "Uses Federal and other available APIs, as appropriate (e.g., National Archives Catalog API)" to "Digital objects are linked to the Catalog and/or are served by the Catalog API" and added link to NARA API Developer Documentation; changed "U.S. Web Design Standards have been applied appropriately to visual style (e.g., fonts, color palette, etc.)" to "U.S. Web Design Standards have been applied. This includes fonts, color palette, and other user interface components."; Added example of NARA logo linked in footer |
| 10/5/17 | Added "Content must be reviewed every quarter for accuracy, tone, timeliness, and completeness: in notes and added link to NARA 808; changed removed "("website" / "email" / full names of NARA facilities, etc.)"" and added "common errors" to NARA Style Guide note; added " and uses U.S. Web Design Guidelines for search bar" to "includes a search function" and added a link to the U.S. Web Design search bar guidance and added note "If you'd like to use GSA's free DigitalGov Search tool, email webprogram@nara.gov for assistance with implementation"; added link to example Accessibility page; changed "All links to external sites (that are not NARA, .gov, or approved social media sites) are indicated using an exit notice, with an icon that links to exit notice, or a disclaimer visible elsewhere on the page (e.g., the footer)" to "Links to external sites are clearly indicated and disclaimer language is provided. Exceptions include links to other NARA websites, .gov sites, and approved social media accounts" and added "Indication of an exit link can be implemented in multiple ways; suggested approaches include: an arrow or similar icon next to the link that displays disclaimer language on hover or click, an interstitial pop-up, or a disclaimer elsewhere on the page (e.g., in the footer)" to notes field; added link to privacy page on Archives.gov; Added link to approved social media sites; added example FOIA page on Archives.gov; added link to example Contact page on Archives.gov; changed "All new forms must be approved through forms@nara.gov. Forms must clearly and consistently distinguishe required data entry fields from optional data entry fields." to "All new forms (including contact us and registration) must be approved by NARA. Forms must clearly and consistently distinguish required data entry fields from optional data entry fields." |
| 10/4/17 | Added note "The Accessibility page should include: statements explaining NARA facility accessibility (e.g., parking, large text labels), website accessibility, and contact information for comments about accessibility. Example: https://www.archives.gov/global-pages/accessibility"; updated links for more information on transcripts, alt text; |
| 8/24/17 | Added NARA 807.12 policy reference for Contact Us, About Us, and link to Archives.gov in footer; added link to OMB M-17-06 for responsible web design |
| 8/22/17 | Added "and DNSSEC (Domain Name System Security Extensions) key is applied" for new top-level domains; Changed "Information about the website (points of contact, hosting, etc.) has been entered into the NARA Web POCs & Properties domain database on NARA@work" to "Contact information and other revelant data has been added to central website list on NARA@work" and added link to NARA Website Contacts & Properties List |
| 8/17/17 | Added WAVE WebAIM tool to alt text note; added "Use this tool to check accessibility: http://wave.webaim.org/" to text contrast note |
| 3/31/17 | Added example accessibility page; removed usablity guidelines link for PDF file types |
| 3/17/17 | Changed "On forms, clearly and consistently distinguishes required data entry fields from optional data entry fields. All new forms must be approved through forms@nara.gov." to " "All new forms must be approved through forms@nara.gov. Forms must clearly and consistently distinguishe required data entry fields from optional data entry fields." |
| 2/2/17 | Changed "Contact webprogram@nara.gov for assistance securing an SSL certificate" to "Contact sslcertrequest@nara.gov"; added "Contact webprogram@nara.gov for assistance" for new top-level domain names; changed "Information about the website (points of contact, hosting, etc.) has been entered into the domain database on NARA@work" to "has been entered into the NARA Web POCs & Properties domain database on NARA@work" |
| 1/26/17 | Added "and has been associated with NARA's DAP account" to "GSA's Digital Analytics Program (DAP) code is in place" |
| 1/9/17 | Added "All new forms must be approved through forms@nara.gov." to "On forms, clearly and consistently distinguishes required data entry fields from optional data entry fields." |
| 6/10/16 | Added "(eagle)" after "NARA's official agency logo" |
| 6/9/16 | Changed "Link in footer to Accessibility information. Should include: statements explaining NARA facility accessibility (e.g., parking, large text labels), website accessibility, and contact information for comments about accessibility." to "Provides a link in footer to Accessibility information. This page should include: statements explaining NARA facility accessibility (e.g., parking, large text labels), website accessibility, and contact information for comments about accessibility."; changed "DAP Google Analytics code is in place" to "GSA's Digital Analytics Program (DAP) code is in place"; changed "A link is visible in the footer to NARA's privacy notice or a customized privacy notice" to "Provides a link in footer to NARA's privacy notice or a customized privacy notice"; Changed "Provide a Contact Us link in the footer or other easily findable way for users to contact organization" to "Provides a link in the footer to Contact Us or provides another easily findable way for users to contact organization" |
| 5/24/16 | Added "Information about the website (points of contact, hosting, etc.) has been entered into the domain database on NARA@work" |
| 5/20/16 | Changed "A workflow plan is in place and content owners have been assigned" to "A content management workflow plan is in place and content owners have been assigned" |
| 5/13/16 | Added "Contact webprogram@nara.gov for assistance (Presidential Libraries contact Mary.Knill@nara.gov)" to guidelines for external hosting |
| 5/12/16 | Changed "Start with new PDFs going forward. Work on a plan to remediate existing PDFs." to "Start by ensuring new PDFs are compliant; then work to remediate existing PDFs. Consider if PDF is the best format (vs. webpage)." |
http://archives.gov/https://designsystem.digital.gov/design-principles/https://abilitynet.org.uk/news-blogs/five-golden-rules-compliant-alt-texthttps://work.nara.gov/websites/list.html Archived Checklist
| Guidance | NARA Website Requirements Checklist | Last updated: 4/1/2021 | Contact domains@nara.gov before using Checklist | ||||
| Questions? Contact domains@nara.gov | 0/48 completed | URL: | Start Date: | ||||
| POC Feedback | Tech Feedback | V Review Feedback | ✓ | Requirements Report | For More Information | Notes | Policy Reference |
| Accessibility: Site meets Web Content Accessibility Guidelines | |||||||
| Meets Web Content Accessibility Guidelines at the WCAG 2.0 AA level | WCAG Overview | Example of an Accessibility Testing Tool | NARA 807.6.b | ||||
| PDFs are accessible | PDF Techniques for WCAG 2.0 | Avoid using PDFs - use more accessible formats such as webpages that are also more easily searched. Ensure new PDFs are compliant; then work to remediate existing PDFs. Guidance on When to Use PDFs | OMB M-17-06 | ||||
| Multimedia files such as audio/video are accessible (e.g., include captions or transcripts, audio descriptions, and/or use an accessible player) | Web AIM Guide to Captions, Transcripts, and Audio Descriptions | Start with new multimedia going forward. Work on a plan to remediate existing multimedia. | OMB M-17-06 | ||||
| Images that convey contextual content use appropriate descriptive alt text | Web AIM Guide to Alternative Text | Accessibility for Websites and Other Digital Services | OMB M-17-06 | ||||
| There is a high contrast between text and background images or color | U.S. Web Design System: Text Accessibility | Contrast ratio should be at least 4.5:1. Use this tool to check accessibility: http://wave.webaim.org/ | OMB M-17-06 | ||||
| Links are easily identified without relying on color alone and can be activated to hover and focus states with both a mouse and a keyboard | U.S. Web Design System: Links Accessibility | OMB M-17-06 | |||||
| Forms clearly and consistently distinguish required data entry fields from optional data entry fields | Web Accessibilty Guide to Forms | OMB M-17-06 | |||||
| Includes link in footer to "Accessibility" page | Example on Archives.gov | The Accessibility page should include statements explaining NARA facility accessibility (e.g., parking, large text labels), website accessibility, and contact information for comments about accessibility. | OMB M-17-06 | ||||
| Security: Procedures are in place and have been reviewed by IT | |||||||
| Provides services through a secure connection (HTTPS) and uses HTTP Strict Transport Security (HSTS). | Fill out 8022 IT Hardware / Software Request Form or contact sslcertrequest@nara.gov for assistance securing an SSL certificate. | Site must be BOD Compliant, including SSLv2,SSLv3, 3DES, and RC4 disabled, and HSTS header must have Strict-Transport-Security: max-age=31536000. | OMB M-15-13 | ||||
| Complies with email security requirements (applies to any emails). | For more information email Information.Services@nara.gov | If a user can send email or submit a form, email security guidelines must be followed. The site must have Valid Sender Policy Framework (SPF) Record, Domain-based Message Authentication, Reporting and Conformance (DMARC) Policy, and DMARC reports must be configured to be sent to the Department of Homeland Security (DHS). | BOD 18-01 | ||||
| Prevents users from saving credentials (including usernames, passwords, and credit card numbers) in browsers | Web Credentials Controls | NARA Audit 16-05-1f | |||||
| The website is included in the List of NARA Websites, with current information about points of contact, hosting, etc. | List of NARA websites | Contact domains@nara.gov for assistance | NARA Audit 16-01-4 | ||||
| The site has passed IT Security scans of the site prior to launch and accommodates future scans | Contact Information.Assurance@nara.gov for assistance | NARA 804 | |||||
| If the site is hosted outside of NARA's environment, copy of the hosting and contract / agreement is with CIO. | CIO has verified IT controls and security for the web hosting environment | Contact Information.Assurance@nara.gov for assistance | NARA 804 | ||||
| NARA Google Tag Manager Code is in place, which includes NARA's Google Analytics code and GSA's Digital Analytics Program (DAP) code | Instructions: How to Install NARA's Google Tag Manager on Your Website | Note: If you have additional scripts to include in the GTM please send a request to webprogram@nara.gov. | OMB M-17-06 | ||||
| Legal: Requirements are followed for privacy, FOIA, external links | NARA 807.6.b | ||||||
| Domain name follows NARA guidance, including using a .gov domain unless an exception is granted in consultation with General Counsel | SOP: Process for Requesting a New Domain or Subdomain | New Federal .gov domain names must be approved by the General Services Administration’s Office of Government-wide Policy (OGP) | OMB M-17-06 | ||||
| For new domain names, domain has been approved and DNSSEC (Domain Name System Security Extensions) key is applied for top-level domains. | SOP: Process for Requesting a New Domain or Subdomain | Initiate domain requests / url changes via the Web Program. Contact domains@nara.gov for assistance | OMB M-08-23 | ||||
| Links to external sites are clearly indicated and disclaimer language is provided. Exceptions include links to other NARA websites, .gov sites, and approved social media accounts | Example disclaimer language on Archives.gov | Indication of an exit link can be implemented in multiple ways; suggested approaches include: an arrow or similar icon next to the link that displays disclaimer language on hover or click, an interstitial pop-up, or a disclaimer elsewhere on the page (e.g., in the footer) | OMB M-17-06 | ||||
| Includes link in footer to "Privacy" page | Example privacy page on Archives.gov | The link should be cleared by General Counsel to link to archives.gov/privacy if it differs from current policy, or link to the site's own specific privacy page | OMB M-17-06 | ||||
| All 3rd party applications have been approved by Information Services and NGC and have a federal-friendly Terms of Service | Contact it-help@nara.gov with questions | OMB M-17-06 | |||||
| Includes a link in footer to "Freedom of Information Act" (or otherwise explains how users can access information under FOIA) | Example FOIA page on Archives.gov | Link should point to https://www.archives.gov/foia/ or the site's own FOIA page | OMB M-05-04 | ||||
| Design: NARA branding and style has been properly applied | |||||||
| Follows fonts designated by the NARA Visual Identity Guide (Source Sans Pro and Merriweather) | Visual Identity Guide | 18. Ensure a Consistent Look and Feel Across Websites | OMB M-17-06 | ||||
| Uses color palette designated by the U.S. Web Design System | Visual Identity Guide | U.S. Web Design System - Colors | OMB M-17-06 | ||||
| Uses user interface components designated by the U.S. Web Design System (e.g., buttons, search bar, alerts, form controls, tables, accordions) | U.S. Web Design System - UI components | OMB M-17-06 | |||||
| Incorporates the Visual Identity header and navigation bar, in accordance with the Visual Identity Guide | How to Install NARA's Google Tag Manager on Your Website | Contact webprogram@nara.gov for assistance | NARA 105 | ||||
| Includes link to Archives.gov and Explore our Websites banner | Visual Identity Guide | NARA 807.12 | |||||
| Other logos have been approved for use on websites | Visual Identity Guide | NARA 105 | |||||
| Includes link to "About Us" in footer or elsewhere | Example About page on Archives.gov | The page should explain the site’s mission, governance, and responsible parties | OMB M-05-04 | ||||
| Usability: Content and interactions are based on customer needs | |||||||
| Content is written using plain language and the NARA Style Guide | Plain Writing Checklist | Email plainlanguage@nara.gov to request help reviewing key pages | OMB M-17-06 | ||||
| Content and urls follow NARA Guidance | Naming Files and Directories | Common errors: DC not D.C., email not e-mail, website not web site | NARA 201-S2 | ||||
| Mobile friendly or responsive web design is implemented | "Mobile friendly" means that the website is configured in such a way that it may be navigated, viewed, and accessed on a smartphone, tablet computer, or similar mobile device. | Pub. L. 115-114: Connected Government Act | |||||
| Includes link in footer to "Contact Us" or provides another easily findable way for users to contact organization | Example Contact page on Archives.gov | Verify routing, formatting and consistent language is applied for sender and recipient | NARA 807.12 | ||||
| Includes a search function and uses U.S. Web Design Guidelines for search bar | U.S. Web Design System: Search Bar | If you'd like to use GSA's free Search.gov tool, email webprogram@nara.gov for assistance with implementation | OMB M-17-06 | ||||
| Indicates the file type (e.g., "PDF" or PDF icon) and size for very large downloadable files | NARA 807.6b | ||||||
| All forms (including contact us and registration) are approved by NARA | NARA Forms Register | Email forms@nara.gov for assistance and review of all new forms | NARA 205 | ||||
| Efficiency: Uses shared tools, services, and content to maximize efficiency | |||||||
| Content is reviewed every quarter by content owners | Content must be reviewed every quarter for accuracy, tone, timeliness, and completeness | NARA 808 | |||||
| Uses Drupal content management system or other approved system | Drupal is NARA's preferred CMS. Contact webprogram@nara.gov for guidance on alternative CMS proposals. | ||||||
| The site is hosted within NARA's enterprise cloud environment (AWS). Exceptions must be granted by the CIO | Contact Information.Assurance@nara.gov for assistance | ||||||
| Descriptions of holdings are available in the National Archives Catalog | Contact catalog@nara.gov for assistance | NARA 816 | |||||
| All digital objects are linked to the National Archives Catalog and/or are served by the Catalog API | NARA API Developer Documentation | Contact catalog@nara.gov for assistance | NARA 816 | ||||
| Digitization projects and description projects are coordinated with the Office of Innovation | Contact catalog@nara.gov for assistance | NARA 816 | |||||
| If posting events, news, or exhibits, uses structured content models to make data shareable across platforms | Government open and structured content models | By using standardized content models, NARA can reuse content across websites. Contact webprogram@nara.gov for guidance. |
https://wave.webaim.org/https://icn.nara.gov/docs/DOC-37859https://work.nara.gov/websites/accessibility.htmlhttps://work.nara.gov/forms/na-8022/index.html?type=softwarehttps://docs.google.com/document/d/1mI-Pby3HUEPQlpVNY7WdIkHm7RedAyUrPbOw90ajHk0/edithttps://docs.google.com/document/d/1mI-Pby3HUEPQlpVNY7WdIkHm7RedAyUrPbOw90ajHk0/edithttps://work.nara.gov/forms/index.html
File details come from the government source that posted it. Updated .