CYRIN Accessibility Conformance Report

International Edition
(Based on VPAT^® Version 2.4)

Name of Product/Version: CYRIN Cyber Range v21.0 (May 2024)

Report Date: May 2024

Product Description: CYRIN is a next-generation cyber range where you train with real tools, real attacks, and real scenarios to hone your skills in a virtual environment. Architecture Technology Corporation's CYRIN Cyber Range provides an active and effective hands-on training environment with virtualized instances of labs, tools, exercises, and attacks.

Contact Information: cyrin@atcorp.com

Notes

Student and teacher interaction with CYRIN is principally through its Learning Management System (LMS), with extensions linking to CYRIN-specific activities. CYRIN's LMS is Moodle version 4.3. Moodle 4.2 received WCAG 2.1 Level AA accreditation in January, 2024, based on a third-party audit. Moodle's accessibility conformance report is available here.

This report covers all regular student and teacher interaction with CYRIN via this web site. It does not cover the creation of new interactive exercises with CYRIN's Exercise Builder.

Evaluation Methods Used

This conformance report builds upon the Moodle conformance report and audit, focusing on pages and components that are specific to CYRIN.

The evaluation was completed following the WCAG Evaluation Methodology (WCAG-EM). Pages were audited manually by inspecting HTML elements and using browser-based tools such as Google Chrome's Lighthouse and the Firefox Accessibility Inspector.

In addition, multiple CYRIN partner organizations have performed informal audits of the site's accessibility, focused on the WCAG 2.1 standard at the AA level.

Applicable Standards/Guidelines

Standard/Guideline	Included in Report
Web Content Accessibility Guidelines 2.0	Level A (Yes) Level AA (Yes) Level AAA (Yes)
Web Content Accessibility Guidelines 2.1	Level A (Yes) Level AA (Yes) Level AAA (Yes)
Revised Section 508 standards published January 18, 2017 and corrected January 22, 2018	Yes

Terms

The terms used in the Conformance Level information are defined as follows:

Supports: The functionality of the product has at least one method that meets the criterion without known defects or meets with equivalent facilitation.
Partially Supports: Some functionality of the product does not meet the criterion.
Does Not Support: The majority of product functionality does not meet the criterion.
Not Applicable: The criterion is not relevant to the product.
Not Evaluated: The product has not been evaluated against the criterion. This can be used only in WCAG 2.0 Level AAA.

WCAG 2.x Report

Tables 1 and 2 also document conformance with:

Revised Section 508: Chapter 5 – 501.1 Scope, 504.2 Content Creation or Editing, and Chapter 6 – 602.3 Electronic Support Documentation.

Note: When reporting on conformance with the WCAG 2.x Success Criteria, they are scoped for full pages, complete processes, and accessibility-supported ways of using technology as documented in the WCAG 2.0 Conformance Requirements.

Table 1: Success Criteria, Level A

Criteria	Conformance Level	Remarks and Explanations
1.1.1 Non-text Content Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.2.1 Audio-only and Video-only (Prerecorded) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports	CYRIN does not contain any audio-only or video-only content.
1.2.2 Captions (Prerecorded) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Partially Supports	Audio and video content are not frequently used within CYRIN content. Where video is used, it is typically as additional information, and most is captioned. There are some examples of un-captioned video within CYRIN exercises, and we are actively revisiting those videos to add captions. (CYRIN's marketing videos are hosted on third-party video sharing platforms and have automatically-generated captions.)
1.2.3 Audio Description or Media Alternative (Prerecorded) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Partially Supports	In almost all cases, video within CYRIN exercises is accompanied by PDF or PowerPoint-format files containing the same visual content as the video.
1.3.1 Info and Relationships Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.3.2 Meaningful Sequence Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.3.3 Sensory Characteristics Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.4.1 Use of Color Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.4.2 Audio Control	Supports	Audio and video content on CYRIN does not play automatically. User-uploaded audio and video content within Moodle are set to not auto-play by default, although content creators have the option to enable automatic playback.
2.1.1 Keyboard Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.1.2 No Keyboard Trap Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.1.4 Character Key Shortcuts	Supports	CYRIN’s user interface does not make use of keyboard shortcuts, but shortcuts are available within virtual machines used for instructional purposes. These shortcuts are provided by those machines’ operating systems, and always require non-printable modifier keys (Ctrl, Alt, etc.). Moodle’s rich text editor supports keyboard shortcuts. These shortcuts are only active when the user is in the editing area.
2.2.1 Timing Adjustable Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports	When a CYRIN live exercise is idle for a period of time, the user is given the option to extend the session at least 15 minutes before it expires. Sessions can generally be extended an indefinite number of times, unless an instructor declares a time limit for grading purposes. (CYRIN-provided exercses and quizzes do not use such time limits.) When a user’s login session is about to expire in Moodle, a warning dialog is displayed to the user, 20 minutes in advance, which allows them to extend their session. A user may extend their session indefinitely.
2.2.2 Pause, Stop, Hide Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports	CYRIN does not contain moving, blinking, and scrolling content. Live scoreboards and team memberships for CYRIN content do automatically update, and there is an option to stop automatic updates if the user desires.
2.3.1 Three Flashes or Below Threshold Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.4.1 Bypass Blocks Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports	Skip links are supported in all main browsers, with the exception of Internet Explorer (for which Microsoft has ended support).
2.4.2 Page Titled Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.4.3 Focus Order Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.4.4 Link Purpose (In Context) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.5.1 Pointer Gestures	Supports
2.5.2 Pointer Cancellation	Supports	Pointer cancellation is supported in all main browsers with the exception of Internet Explorer (for which Microsoft has ended support).
2.5.3 Label in Name	Supports
2.5.4 Motion Actuation	Supports	CYRIN does not have any functionality operated by device or user motion.
3.1.1 Language of Page Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
3.2.1 On Focus Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
3.2.2 On Input Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
3.3.1 Error Identification Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
3.3.2 Labels or Instructions Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
4.1.1 Parsing Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
4.1.2 Name, Role, Value Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports

Table 2: Success Criteria, Level AA

Criteria	Conformance Level	Remarks and Explanations
1.2.4 Captions (Live) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Not Applicable	CYRIN does not contain synchronized media with live audio content.
1.2.5 Audio Description (Prerecorded) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Partially Supports	Audio and video content are not frequently used within CYRIN content. Where video is used, it is typically based on presentation materials that are also available as separate downloads (e.g., as PDF documents). In other words, there is rarely any additional visual content that requires description. There are some examples of video without adequate descriptions within CYRIN exercises, and we are actively revisiting those videos to add descriptions.
1.3.4 Orientation	Supports
1.3.5 Identify Input Purpose	Supports
1.4.3 Contrast (Minimum) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.4.4 Resize text Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.4.5 Images of Text Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
1.4.10 Reflow	Supports	Reflow is supported in all main browsers with the exception of Internet Explorer (for which Microsoft has ended support).
1.4.11 Non-text Contrast	Supports
1.4.12 Text Spacing	Supports
1.4.13 Content on Hover or Focus	Supports
2.4.5 Multiple Ways Also applies to: Revised Section 508 501 (Web)(Software) — Does not apply to non-web software 504.2 (Authoring Tool) 602.3 (Support Docs) — Does not apply to non-web docs	Supports
2.4.6 Headings and Labels Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
2.4.7 Focus Visible Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
3.1.2 Language of Parts Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports	CYRIN does not contain any content with multiple languages on one page. If a third-party author adds such content, CYRIN supports using the `lang` HTML attribute to mark the portion in a specific language.
3.2.3 Consistent Navigation Also applies to: Revised Section 508 501 (Web)(Software) — Does not apply to non-web software 504.2 (Authoring Tool) 602.3 (Support Docs) — Does not apply to non-web docs	Supports
3.2.4 Consistent Identification Also applies to: Revised Section 508 501 (Web)(Software) — Does not apply to non-web software 504.2 (Authoring Tool) 602.3 (Support Docs) — Does not apply to non-web docs	Supports
3.3.3 Error Suggestion Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports
3.3.4 Error Prevention (Legal, Financial, Data) Also applies to: Revised Section 508 501 (Web)(Software) 504.2 (Authoring Tool) 602.3 (Support Docs)	Supports	The only relevant transactions on CYRIN are the purchase of course materials by credit cards. CYRIN uses the Stripe payment processing system and the user interface components provided by Stripe, which check for errors and provide a confirmation screen. Erronenous financial transactions are reversible by contacting CYRIN support.
4.1.3 Status Messages	Supports

Table 3: Success Criteria, Level AAA

Criteria	Conformance Level	Remarks and Explanations
1.2.6 Sign Language (Prerecorded)	Does Not Support	Sign language is not currently available for the audio and video content within CYRIN.
1.2.7 Extended Audio Description (Prerecorded)	Does Not Support	Extended audio descriptions are not currently available for the audio and video content within CYRIN.
1.2.8 Media Alternative (Prerecorded)	Partially Supports	Most, but not all, video content in CYRIN has a corresponding alternative, such as a PDF document, with equivalent information to the video presentation.
1.2.9 Audio-only (Live)	Not Applicable	CYRIN does not contain media with live audio content.
1.3.6 Identify Purpose	Supports
1.4.6 Contrast (Enhanced)	Partially Supports	CYRIN text colors generally have a contrast ratio greater than 7:1 against their background. There are some text items with colors that meet the minimum contrast ratio of 4.5:1 for WCAG 2.1 Level AA but do not meet the enhanced colour contrast requirement of 7:1 for WCAG 2.1 Level AAA.
1.4.7 Low or No Background Audio	Not Applicable	CYRIN does not use background audio.
1.4.8 Visual Presentation	Partially Supports	Instructions within CYRIN exercises do not provide a way to override text foreground and background colors. All other criteria are satisfied.
1.4.9 Images of Text (No Exception)	Supports
2.1.3 Keyboard (No Exception)	Partially Supports	The virtual console (VNC) within CYRIN exercises cannot be focused through keyboard-only interaction.
2.2.3 No Timing	Partially Supports	An instructor can configure a time limit on student exercises or quizzes, for grading purposes. (CYRIN-provided exercses and quizzes do not use such time limits.)
2.2.4 Interruptions	Supports	There is a checkbox on all exercise progress notification modal boxes, allowing the user to suppress further notifications.
2.2.5 Re-authenticating	Partially Supports	Moodle partially supports this criteria.
2.2.6 Timeouts	Supports	User inactivity within CYRIN exercises causes the exercise to be automatically paused after some period of time (typically 4 hours), and saved for at least 24 hours.
2.3.2 Three Flashes	Supports
2.3.3 Animation from Interactions	Supports
2.4.8 Location	Supports
2.4.9 Link Purpose (Link Only)	Partially Supports	Most links are uniquely identifiable by the link text only. However, there are some known areas where the link purpose cannot be determined by the link text alone, such as the "letter" links for filtering a list of users by surname.
2.4.10 Section Headings	Supports
2.5.5 Target Size	Partially Supports	Some of Moodle's button icons do not have the recommended target size of at least 44 x 44 pixels.
2.5.6 Concurrent Input Mechanisms	Supports
3.1.3 Unusual Words	Not Evaluated
3.1.4 Abbreviations	Not Evaluated
3.1.5 Reading Level	Partially Supports	Navigation controls and related strings, both provided by Moodle and CYRIN, are aimed to be descriptive and concise. Detailed instructions in CYRIN exercises are frequently aimed at experts in their fields, and may contain language at a secondary or post-secondary reading level.
3.1.6 Pronunciation	Not Evaluated
3.2.5 Change on Request	Supports
3.3.5 Help	Partially Supports	Context-sensitive help is provided for input elements in forms where the label may not be sufficient to explain the purpose of the input element.
3.3.6 Error Prevention (All)	Supports	Form validation mechanisms are provided to allow users to correct their inputs when completing a form. Confirmation dialogs or pages are also present to prevent users from accidentally performing an irreversible action (e.g. data deletion, etc).

Legal Disclaimer

The information herein is provided in good faith based on the stated CYRIN version and does not represent a legally binding claim. Please contact the CYRIN team at cyrin@atcorp.com to report any accessibility issues or errors in this report.

“Voluntary Product Accessibility Template” and “VPAT” are registered service marks of the Information Technology Industry Council (ITI).