Overview
OSD did not ensure that all fields on its COMMBUYS website did the following two actions when a user input an incorrect data type into an entry field: properly identified errors and provided correction suggestions. Specifically, we found that on OSD’s bid solicitation and purchase order (PO) creation webpage, the “accounting” section would fail to load (i.e., the screen went blank) when a user input text in fields that were meant for numbers.
Public buyers would not be able to properly enter information into the “accounting” section or know how to correct incorrect entries without correction suggestions. This means that users may not be able to complete the posting process and the Commonwealth may not have complete responses to bid solicitations from vendors.
Authoritative Guidance
The IT Accessibility Standards section of EOTSS’s Enterprise Information Technology Accessibility Policy states,
1. a. Accessibility of electronic content, applications, or services must be measured with one or more of the applicable following technical standards.
i. Web and desktop applications, multimedia content, electronic documents: Web Content Accessibility Guidelines 2.1 (WCAG), level A and AA Guidelines.
The Web Accessibility Initiative’s WCAG 2.1 state,
Success Criterion: 3.3.3 Error Suggestion
(Level AA)
If an input error is automatically detected and suggestions for correction are known, then the suggestions are provided to the user, unless it would jeopardize the security or purpose of the content.
Reasons for Issues
OSD told us that it was unaware of the error because public buyers infrequently use the “accounting” section of the COMMBUYS bid solicitation and PO creation webpages.
Recommendations
- OSD should ensure that all fields on its webpages properly identify errors when a user inputs an incorrect data type into an entry field.
- OSD should ensure that it provides correction suggestions when a user inputs an incorrect data type into an entry field.
Auditee’s Response
As stated earlier in this response, OSD does not directly maintain the COMMBUYS webpage or application software. OSD acknowledges this issue and has taken steps to notify the vendor that maintains the site and system software. OSD has requested that the vendor analyze the issue and advise whether a fix can be provided.
Auditor’s Reply
While we acknowledge that OSD has taken steps to work with its vendor to remediate the issue, OSD is responsible for the applications that its vendors provide to the Commonwealth and, as such, is responsible for ensuring that those web-based applications, including COMMBUYS, comply with EOTSS’s Enterprise Information Technology Accessibility Policy.
Based on its response, OSD will take measures to address our concerns on this matter.
| Date published: | April 25, 2024 |
|---|