Contents
Web Products
Clearances
Accessibility (508)
Linking
Web Development and Redesign
Technical Assistance for Web Tools
Source Code
Usability
Browsers
Domain Names
Privacy Considerations
Electronic Freedom of Information Act
Security
The Office of Communications (OC) maintains the 大象APPwebsite and oversees a number of additional 大象APPsites, some of which are managed by contractors. All websites must be fully accessible to users, comply with applicable laws and regulations, adhere to web standards and best practices, and display AHRQ鈥檚 brand.
This section highlights issues contractors must address when developing websites and products that will be publicly available. For guidance on application and systems development, refer to Appendix 2-A.
- Direct all questions and requests for guidance about developing or redesigning websites or tools to Tonya McCarther.
- Contact your managing editor for guidance on any web products, such as PDFs and webinars, you will be posting. If you are uncertain as to the managing editor for your project, contact Bruce Seeman.
The Grantee Guidelines section contains legal and policy requirements for grant products.
Web Products
All AHRQ-funded websites must identify 大象APPas the primary sponsor, through the:
- Website URL. The URL must contain 大象APPunless the contractor obtains a domain name waiver from the HHS Secretary. A web resource should either be a folder on the main 大象APPwebsite (for example, www.ahrq.gov/x/) or a third-level domain of the website (for example, https://x.ahrq.gov).
- HHS and 大象APPlogos. The HHS and 大象APPlogos will be featured prominently on the website and in materials used to market the site. Contact Tonya McCarther for the standard web banner and footer.
- Home page format. The website home page has common design and navigation elements so all 大象APPwebsites look as though they belong to HHS and AHRQ. 大象APPsites must include the standard banner and footer. The header and footer contain mandatory elements and links, and contractors cannot modify their content. The 大象APPweb team will provide technical specifications and templates for developers designing web resources that will appear on the 大象APPmain site.
Contractors must submit all new or updated content for 大象APPwebsites to a managing editor for review before it is posted on an 大象APPwebsite.
Nothing marked "draft" or 鈥渦nder construction鈥 will appear on the 大象APPsite, nor will placeholders be used for content that does not exist.
Clearances
大象APPand HHS must approve new and redesigned websites prior to launch. 大象APPOffices and Centers should contact Tonya McCarther, who will coordinate HHS review and approval.
Contractors who maintain 大象APPthird-level domains must review web postings twice a year for appropriateness and currency. If you have questions about whether material is appropriate, contact your OC managing editor.
Accessibility (508)
All websites and material posted on 大象APPwebsites must be fully accessible to people with disabilities and comply with requirements under Section 508 of the Rehabilitation Act.
Contractors must provide equivalent alternatives for audio and visual information, such as providing alternative descriptive text for images for visually impaired people and captioned video files for hearing impaired people. Contractors must provide online transcripts for all audio. For standards and guidance, visit the . For more information about accessibility, go to Appendix 2-B, Accessibility and the Revised 508 Standards.
The HHS 508 Team reviews all new and redesigned sites for 508 compliance and approval before launch. Tonya McCarther coordinates this process. Both OC and HHS can review sites during the development stage. For details, contact the managing editor.
Linking
Links to websites outside the .gov domain constitute an implied endorsement and create a business advantage for the linked sites. The Office of Management and Budget (OMB) requires agencies to conduct a risk assessment of external links, and potential links need to be assessed against HHS and 大象APPlinking policies and criteria. Contractors must assess links according to the 大象APPlinking policy in Appendix 2-C and must comply with the .
Web Development and Redesign
大象APPcan provide technical assistance to ensure deliverables meet the requirements outlined in this section. Please work with the project officer, managing editor, and web team to begin development. For guidance on websites, visit the . Also refer to .
Technical Assistance for Web Tools
If a tool posted to the website requires users to seek technical assistance, provide the following information:
- Instructions on how to use the tool
- Name, telephone number, and email address for the individual to contact for technical assistance
- Mechanism for future updates and revisions, if applicable
Source Code
Software and products resulting from 大象APPprojects must be easily available to other users and developers. The best way to ensure adoption and implementation is to have a web-based final product that is platform independent. Contractors must coordinate with 大象APPon infrastructure requirements for housing any robust back-end applications before development.
Contractors must deliver source code for any technical application to the 大象APPContracting Officer鈥檚 Representative or Task Order Officer with the product. Doing so provides 大象APPwith the knowledge of how the application was created and enables the Agency to make corrections, updates, or conversions to keep pace with technological changes once the product is released.
Usability
Contractors must include usability testing, evaluation, and modification as an integral and recurring part of the development effort. HHS provides a set of research-based .
Websites and applications, including mobile sites and apps, must be available for evaluation using usability heuristics before release. Contractors must document feedback and coordinate issue resolution with OC.
Browsers
The latest list of supported browsers and platforms follows:
- Chrome 62.x (Windows 7, Windows 10, Samsung Galaxy S7 with Android 7.x)
- Firefox 56.x (Windows 10)
- Safari 11.x (iPhone 6 with iOS 11, Mac OSX10.11)
- Microsoft Edge 16 (Windows 10).
Domain Names
The OMB issued a freeze on new .gov domain names (X.gov) in 2011. Third-level .gov domain names (X.ahrq.gov) can be requested through Tonya McCarther.
Domain names for any web resource paid for in whole or in part by 大象APPmust be registered as .gov domains by 大象APPthrough HHS with the General Services Administration (GSA) unless 大象APPobtains a waiver from the HHS Secretary. The .gov domain name will be indexed by USA.gov, the GSA portal for Government-funded resources.
Contractors and nongovernment employees cannot register domain names for an 大象APPsite. Contractors must coordinate domain name requests with Tonya McCarther, who can advise on current policy.
Domain names other than .gov can be used only if the HHS Secretary grants a waiver to existing policy. If an 大象APPsite uses other domains, such as .org, .net, .edu, and .com, the .gov domain must be registered and be the primary domain.
Privacy Considerations
Privacy policy. Each 大象APPsite will display the standard 大象APPfooter, which includes a link to AHRQ鈥檚 privacy policy. OC staff members periodically audit 大象APPsites to ensure they observe the privacy policy.
Privacy impact assessment. 大象APPconducts a privacy impact assessment to determine what kind of personal information is contained within 大象APPsystems and how that information is used and protected. Contractors may need to prepare and publish a Privacy Act system notice when users must register on a site if the registrations represent a group of records under the control of the Agency or the contractor that can be retrieved by a personal identifier. This system notice goes through several levels of review, including the HHS Office of General Counsel, and is published in the Federal Register. Contractors must work in coordination with 大象APPstaff for submission of the Privacy Act system notice, to adopt or modify the general privacy policy of the 大象APPmain website, and to respond to questions on the privacy impact assessment worksheet. Contact Tim Erny in AHRQ鈥檚 Office of Management Services鈥 Division of Information Technology for more information on the privacy impact assessment.
Use of cookies. 大象APPsites can use persistent cookies and other measurement and customization techniques if certain issues, such as privacy, are addressed (refer to ).
Website mailbox and records management. Each 大象APPwebsite must include a "Contact Us" link for customers to submit comments or questions. Website email is subject to the same privacy and records management considerations that affect the overall website, as well as HHS standards for handling inquiries and customer feedback. Each 大象APPwebsite must also provide relevant frequently asked questions.
Contractors who manage 大象APPsites must maintain the site鈥檚 website mailbox, update the site鈥檚 frequently asked questions, and maintain an electronic archive of responses. Per HHS recordkeeping standards, all emails must be archived for 2 years. After 2 years, the contractor will review the archive to determine if the contents should be retained. Contractors must submit the number of inquiries handled during each fiscal year to Tonya McCarther for inclusion in web metrics for Agency reporting under the Government Performance Reporting Act.
For guidance on records management requirements, go to .
Electronic Freedom of Information Act
AHRQ鈥檚 standard footer provides a link to the 大象APPFreedom of Information Act (FOIA) page. This link is mandatory and provides access to AHRQ鈥檚 electronic FOIA library and materials that can be requested under FOIA in electronic form.
Security
Contractors must protect 大象APPwebsites against intrusion, corruption, and compromise of content. GSA periodically audits and evaluates web resources for security. Contractors must document and report any attack on 大象APPweb resources to their project officer, who will report them to the HHS Inspector General via 大象APPInformation Security & Privacy Team.
Contractors must establish and maintain security for 大象APPwebsites according to 大象APPand HHS policies and procedures. Tonya McCarther can assist in defining and implementing applicable security requirements.
