Key Takeaways
Assessment
The assessment examined how agencies test ICT for Section 508 conformance and remediate accessibility across ICT types, including hardware, software, public electronic documents, public web pages, and internal web pages. Specifically, the assessment addressed:
Components answered these questions only if they performed Section 508 testing independently or in addition to their parent agency. Sixty agencies and 106 components provided responses.
Findings
Section 508 testing and remediation are critical to ensuring federal digital products and services are accessible to all Americans. Without systematic testing, agencies cannot identify accessibility defects, and without remediation those defects persist. Sustained testing and remediation support compliance with federal law, reduce rework and cost, and enable equitable access to digital information and services.
Agencies reported an average Testing and Remediation factor outcome of 2.00 (Low) on a 5-point scale, with results ranging from 0 to 4.73. Among the 106 components from 10 agencies that perform Section 508 testing independently or in addition to the parent agency, the average outcome was 2.56 (Moderate) on a 5-point scale with results ranging from 0 to 5. The corresponding parent agencies reported a slightly higher Moderate average of 2.98.
Testing and remediation is the weakest area of Section 508 implementation across the federal enterprise and continues to constrain overall accessibility outcomes. While agencies that apply more systematic testing and remediation practices tend to achieve higher conformance for the ICT they test, most agencies do not test consistently across ICT types or stages of the lifecycle. Gaps are most pronounced for hardware and internal web content, and user-centered practices such as usability testing with people with disabilities are uncommon. Where agencies establish clearer remediation expectations, such as defined timelines or standardized processes, outcomes improve, but these practices are not widely adopted. The findings that follow illustrate how uneven testing coverage and limited remediation maturity continue to limit progress toward sustained, governmentwide Section 508 conformance.
Governance, Risk, and Compliance
Only 30% of agencies and 33% of components reported using a GRC tool to manage Section 508 compliance, though some components used GRC tools even when their parent agency did not. Agencies and components using GRC tools achieved significantly higher Testing and Remediation and overall Conformance outcomes than those without GRC tools.Hardware and Software Accessibility Evidence Tracking
Only 30% of agencies systematically track Section 508 conformance evidence for hardware and 40% for software, with most agencies collecting evidence on an ad hoc or incomplete basis rather than through formal processes. Although agencies reported higher average evidence coverage for software (54%) than hardware (43%), wide ranges (0–100%) indicate inconsistent practices and uneven maturity, likely reflecting more established procurement and testing practices for software and greater familiarity with software accessibility risks compared to hardware.Testing and Remediation Outcomes
There is a moderate positive correlation between Testing and Remediation outcomes and conformance outcomes, indicating that agencies with stronger testing and remediation practices achieved higher conformance for tested ICT.
Agencies do not consistently adopt standardized Section 508 testing practices across ICT types. While more than 70 percent of agencies reported standardized testing for electronic documents and public web pages, only about 50 percent reported standardized processes for software and internal web pages, and only 30 percent reported a standardized process for hardware.
As shown in Figure 10:
Usability testing with people with disabilities is rare across all ICT types. Only between 12 percent and 17 percent of agencies reported conducting usability testing with users with disabilities prior to deployment, depending on ICT type. As a result, most agencies deploy ICT without validating real-world accessibility.
Agencies also show limited user-centered accessibility verification beyond formal testing. Only 28 percent of agencies reported a process for consulting with individuals with disabilities or disability organizations, while most do not. Components reported higher consultation rates, but of the 106 components that perform any Section 508 testing, nearly half still lack such a process.
Agencies apply risk-based approaches unevenly, with hardware and internal web pages showing the weakest adoption. Many agencies either prioritize remediation without a formal, documented framework or fail to prioritize it altogether. Figure 12 shows:
Most agencies do not require remediation timelines; however, agencies that establish timelines generally meet them, demonstrating that clear remediation expectations significantly improve accessibility outcomes. Approximately 70 percent of agencies reported no required timelines across ICT types. Where timelines exist, 80 percent to 90 percent of agencies reported remediating within those timelines.
Agencies most consistently apply manual Section 508 testing to public-facing web pages, where testing “often” or “almost always” is most common, reflecting prioritization of systems with high public visibility and compliance risk. In contrast, hardware receives the least manual testing attention, with a large share of agencies reporting they “never” or “rarely” test hardware prior to deployment, indicating that Section 508 conformance validation for hardware frequently does not occur. Manual testing of software, electronic documents, and internal web pages falls between these extremes, with substantial portions of agencies reporting only occasional or inconsistent testing. Overall, submitted data show that manual testing practices remain uneven across ICT types, with agencies prioritizing public-facing content while under-testing hardware and internal systems, limiting confidence in accessibility outcomes across the full ICT lifecycle.
Automated testing follows a similar pattern, with lower and inconsistent use on internal web content and electronic documents. These patterns indicate that many agencies lack standardized, enterprise-wide testing prior to deployment. Overall, testing and remediation practices remain uneven and underdeveloped, constraining improvements in Section 508 conformance across the federal ICT portfolio.
Best Practices and Remaining Challenges
Over the past year, several agencies strengthened their Section 508 programs by embedding accessibility more consistently into governance, development, and testing workflows. Agencies improved the efficiency and consistency of accessibility evaluations by automated and hybrid testing approaches and aligning defect tracking with enterprise inventory systems. Many agencies embedded accessibility earlier in the ICT lifecycle by integrating Section 508 requirements into software development processes, establishing standardized templates, and requiring accessibility review of documents and applications prior to release. Collaboration between accessibility teams and developers further strengthened lifecycle integration by embedding conformance checks into common tools and platforms.
Agencies also strengthened remediation and maintenance processes and expanded the evaluation of online training materials. Several agencies increased scalability through internal tools that support conformance reporting, tracking, and remediation. Training initiatives expanded, with some agencies training more than 1,000 personnel and participating in regular accessibility communities of practice.
Despite this progress, significant structural challenges continue to limit consistent Section 508 implementation. Limited staffing, constrained resources, and gaps in specialized expertise hinder agencies’ ability to sustain comprehensive testing, evidence tracking and remediation at scale. Agencies report that vendor-provided accessibility conformance reports remain inconsistent or unreliable, increasing the burden on agencies to independently validate conformance. Programs also report challenges integrating accessibility early in development and deploying automated testing tools within secure enterprise environments.
Agencies continue to face challenges maintaining enterprise-wide visibility into ICT assets, enforcing consistent practices across offices and components, and ensuring content owners understand and meet accessibility requirements.
Taken together, these findings show that while targeted investments and improved practices are yielding progress, sustainable Section 508 compliance will require stronger governance, earlier lifecycle integration, improved vendor accountability, and continued investment in workforce capacity and testing infrastructure.
Reviewed/Updated: March 2026
