[ { "page": 1, "items": [ { "page": 1, "type": "TITLE", "location": { "l": 53.0249, "t": 499.3393, "r": 501.9369, "b": 417.5158 }, "text": "Navigating Assertion 10\nDigital and Data Compliance", "reading_order": 0, "level": 3 }, { "page": 1, "type": "TEXT", "location": { "l": 53.9846, "t": 396.1601, "r": 308.552, "b": 346.2502 }, "text": "Martyn Boyle and David Hall\nCloudy IT", "reading_order": 1 }, { "page": 1, "type": "TEXT", "location": { "l": 54.4645, "t": 334.7325, "r": 290.5572, "b": 284.8226 }, "text": "Daniel Purchese\nBreakthrough Communications", "reading_order": 2 }, { "page": 1, "type": "TEXT", "location": { "l": 53.5047, "t": 273.3049, "r": 184.0275, "b": 223.8749 }, "text": "Mark Tomkins\nAubergine 262", "reading_order": 3 }, { "page": 1, "type": "FIGURE", "location": { "l": 61.1826, "t": 192.6812, "r": 225.2958, "b": 131.0136 }, "text": "", "reading_order": 4 }, { "page": 1, "type": "FIGURE", "location": { "l": 282.3995, "t": 191.9613, "r": 514.4134, "b": 147.0904 }, "text": "", "reading_order": 5 }, { "page": 1, "type": "FIGURE", "location": { "l": 573.6765, "t": 190.0417, "r": 773.7794, "b": 143.2511 }, "text": "", "reading_order": 6 } ] }, { "page": 2, "items": [ { "page": 2, "type": "FIGURE", "location": { "l": 70.3, "t": 419.9154, "r": 180.6685, "b": 398.7996 }, "text": "", "reading_order": 0 }, { "page": 2, "type": "FIGURE", "location": { "l": 194.5845, "t": 421.3551, "r": 281.4398, "b": 388.9616 }, "text": "", "reading_order": 1 }, { "page": 2, "type": "TEXT", "location": { "l": 298.4749, "t": 421.3551, "r": 389.6489, "b": 398.7996 }, "text": "CloudyIT", "reading_order": 2 }, { "page": 2, "type": "TITLE", "location": { "l": 67.4208, "t": 337.8519, "r": 601.5085, "b": 276.1843 }, "text": "Assertion 10 Compliance\n& understanding the Practitioners Guide.", "reading_order": 3, "level": 4 }, { "page": 2, "type": "TITLE", "location": { "l": 69.3402, "t": 239.7117, "r": 593.1109, "b": 215.9565 }, "text": "Domain Names, Emails, GDPR, Websites & IT Policies", "reading_order": 4, "level": 5 }, { "page": 2, "type": "TEXT", "location": { "l": 65.7413, "t": 109.178, "r": 249.049, "b": 90.9417 }, "text": "For parish & town clerks", "reading_order": 5 } ] }, { "page": 3, "items": [ { "page": 3, "type": "TITLE", "location": { "l": 56.8638, "t": 427.1139, "r": 326.307, "b": 396.64 }, "text": "What we'll cover", "reading_order": 0, "level": 4 }, { "page": 3, "type": "TEXT", "location": { "l": 64.0617, "t": 367.126, "r": 656.4529, "b": 320.5754 }, "text": "Updates to SAPPP 2025 (formerly JPAG) Practitioners Guide - What the new governance requirement actually means to councils:", "reading_order": 1 }, { "page": 3, "type": "LIST_ITEM", "location": { "l": 64.3017, "t": 310.2575, "r": 506.0158, "b": 292.9809 }, "text": "New Email & domain name requirements and best practice", "marker": "▪", "list_id": "L1", "level": 0, "reading_order": 2 }, { "page": 3, "type": "LIST_ITEM", "location": { "l": 64.0617, "t": 281.9432, "r": 614.9447, "b": 264.6667 }, "text": "Ensuring website accessibility compliance with the new WCAG2.2AA rules", "marker": "▪", "list_id": "L1", "level": 0, "reading_order": 3 }, { "page": 3, "type": "LIST_ITEM", "location": { "l": 64.7815, "t": 253.8688, "r": 406.4441, "b": 236.3524 }, "text": "UK GDPR and data protection responsibilities", "marker": "▪", "list_id": "L1", "level": 0, "reading_order": 4 }, { "page": 3, "type": "LIST_ITEM", "location": { "l": 63.8218, "t": 225.3146, "r": 662.931, "b": 178.2841 }, "text": "IT policies and Assertion 10 explained: – and how it all fits in together – creating the digital and data scope and purpose.", "marker": "▪", "list_id": "L1", "level": 0, "reading_order": 5 } ] }, { "page": 4, "items": [ { "page": 4, "type": "TITLE", "location": { "l": 77.4979, "t": 408.3977, "r": 467.1468, "b": 370.7253 }, "text": "What's it all about?", "reading_order": 0, "level": 3 }, { "page": 4, "type": "TEXT", "location": { "l": 79.1774, "t": 344.0906, "r": 696.5214, "b": 326.3342 }, "text": "2025 edition of the Practitioners' Guide (Assertion 10: Digital and Data Compliance) states:", "reading_order": 1 }, { "page": 4, "type": "TEXT", "location": { "l": 79.4174, "t": 306.1783, "r": 457.0697, "b": 288.4219 }, "text": "All smaller authorities, by AGAR 2025/2026, must have:", "reading_order": 2 }, { "page": 4, "type": "LIST_ITEM", "location": { "l": 78.2177, "t": 259.8676, "r": 768.9808, "b": 241.8712 }, "text": "A council-owned domain based official email address that's generic (and cease using free email)", "marker": "▪", "list_id": "L2", "level": 0, "reading_order": 3 }, { "page": 4, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 231.7933, "r": 498.8178, "b": 214.2768 }, "text": "A website that continues to meet accessibility regulations", "marker": "▪", "list_id": "L2", "level": 0, "reading_order": 4 }, { "page": 4, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 204.4388, "r": 185.7071, "b": 186.4424 }, "text": "An IT policy", "marker": "▪", "list_id": "L2", "level": 0, "reading_order": 5 }, { "page": 4, "type": "LIST_ITEM", "location": { "l": 78.6976, "t": 176.6044, "r": 616.8642, "b": 158.848 }, "text": "And a reinforcement of compliance with UK GDPR and DPA responsibilities.", "marker": "▪", "list_id": "L2", "level": 0, "reading_order": 6 } ] }, { "page": 5, "items": [ { "page": 5, "type": "TITLE", "location": { "l": 78.4576, "t": 434.0725, "r": 620.4631, "b": 405.2783 }, "text": "Assertion 10 - Digital and data compliance", "reading_order": 0, "level": 4 }, { "page": 5, "type": "TEXT", "location": { "l": 77.4979, "t": 382.4829, "r": 680.446, "b": 361.3672 }, "text": "WHY? (added to clarify data compliance, previously covered under Assertion 3)", "reading_order": 1 }, { "page": 5, "type": "TEXT", "location": { "l": 78.2177, "t": 331.3732, "r": 663.6508, "b": 289.6216 }, "text": "Assertion 10 will appear on the AGAR 2025-26 By then, the authority needs to have taken the following actions:", "reading_order": 2 }, { "page": 5, "type": "TITLE", "location": { "l": 79.4174, "t": 250.5095, "r": 286.9582, "b": 231.0734 }, "text": "(1.47) Email management", "reading_order": 3, "level": 5 }, { "page": 5, "type": "TEXT", "location": { "l": 78.4576, "t": 228.9139, "r": 564.799, "b": 187.6422 }, "text": "Every authority must have a generic email account hosted on an authority-owned domain, for example:", "reading_order": 4 }, { "page": 5, "type": "TEXT", "location": { "l": 80.1372, "t": 167.0063, "r": 595.5102, "b": 146.1305 }, "text": "clerk@abcparishcouncil.gov.uk or clerk@abcparishcouncil.org.uk", "reading_order": 5 }, { "page": 5, "type": "TEXT", "location": { "l": 80.617, "t": 125.0148, "r": 600.0689, "b": 104.379 }, "text": "Not abcparishclerk@gmail.com or abcparishcouncil@outlook.com", "reading_order": 6 } ] }, { "page": 6, "items": [ { "page": 6, "type": "TITLE", "location": { "l": 80.1372, "t": 413.1967, "r": 618.7836, "b": 386.0822 }, "text": "Councillors & other staff email addresses.", "reading_order": 0, "level": 4 }, { "page": 6, "type": "TEXT", "location": { "l": 78.6976, "t": 352.249, "r": 712.117, "b": 311.2173 }, "text": "Strangely, Assertion 10 doesn't talk about Councillors and other staff email address compliance – just the clerk/officer.", "reading_order": 1 }, { "page": 6, "type": "FIGURE", "location": { "l": 55.6641, "t": 264.6667, "r": 95.9726, "b": 233.4729 }, "text": "", "reading_order": 2 }, { "page": 6, "type": "TEXT", "location": { "l": 104.6102, "t": 271.8652, "r": 539.6062, "b": 231.5533 }, "text": "Best practice is for all council to have matching email: Cllr.bobsmith@abcparishcouncil.gov.uk", "reading_order": 3 }, { "page": 6, "type": "FIGURE", "location": { "l": 56.144, "t": 216.4364, "r": 96.2126, "b": 183.0831 }, "text": "", "reading_order": 4 }, { "page": 6, "type": "TEXT", "location": { "l": 69.8201, "t": 221.2354, "r": 595.0304, "b": 170.3657 }, "text": "Free email services are permitted currently but NOT personal: cllrbobsmith@gmail.com - OK", "reading_order": 5 }, { "page": 6, "type": "FIGURE", "location": { "l": 59.9829, "t": 147.3303, "r": 90.9341, "b": 117.5763 }, "text": "", "reading_order": 6 }, { "page": 6, "type": "TEXT", "location": { "l": 101.731, "t": 141.0916, "r": 716.4358, "b": 120.6957 }, "text": "BUT NOT bigbobsmith1968@yahoo.co.uk = GDPR risk/loss of email data/comms", "reading_order": 7 } ] }, { "page": 7, "items": [ { "page": 7, "type": "TITLE", "location": { "l": 77.4979, "t": 428.3137, "r": 409.0834, "b": 397.5999 }, "text": "Why is that important?", "reading_order": 0, "level": 4 }, { "page": 7, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 341.2112, "r": 692.9225, "b": 322.0151 }, "text": "The Council does not own those free platforms or domain (Gmail, Yahoo, Hotmail etc)", "marker": "▪", "list_id": "L3", "level": 0, "reading_order": 1 }, { "page": 7, "type": "LIST_ITEM", "location": { "l": 79.6573, "t": 304.7386, "r": 396.367, "b": 284.8226 }, "text": "The data contained in it is not really yours", "marker": "▪", "list_id": "L3", "level": 0, "reading_order": 2 }, { "page": 7, "type": "LIST_ITEM", "location": { "l": 79.4174, "t": 266.5863, "r": 365.1759, "b": 247.87 }, "text": "The Council has no legal rights over it", "marker": "▪", "list_id": "L3", "level": 0, "reading_order": 3 }, { "page": 7, "type": "LIST_ITEM", "location": { "l": 79.4174, "t": 229.6337, "r": 436.6755, "b": 210.4376 }, "text": "Getting access without the logins is impossible", "marker": "▪", "list_id": "L3", "level": 0, "reading_order": 4 }, { "page": 7, "type": "LIST_ITEM", "location": { "l": 79.6573, "t": 192.2013, "r": 453.2308, "b": 173.9649 }, "text": "Creates a GDPR exposures with FOI & SAR issues", "marker": "▪", "list_id": "L3", "level": 0, "reading_order": 5 }, { "page": 7, "type": "LIST_ITEM", "location": { "l": 80.1372, "t": 155.2487, "r": 585.1932, "b": 136.0526 }, "text": "No authenticity of message – anyone can set up a free email address!", "marker": "▪", "list_id": "L3", "level": 0, "reading_order": 6 } ] }, { "page": 8, "items": [ { "page": 8, "type": "FIGURE", "location": { "l": 483.2223, "t": 525.974, "r": 841.92, "b": 65.9867 }, "text": "", "reading_order": 0 }, { "page": 8, "type": "FIGURE", "location": { "l": 505.5359, "t": 507.2578, "r": 840.9603, "b": 321.5352 }, "text": "", "reading_order": 1 }, { "page": 8, "type": "TITLE", "location": { "l": 77.4979, "t": 417.0359, "r": 508.655, "b": 342.8909 }, "text": "The domain - Your address\non the internet", "reading_order": 2, "level": 1 }, { "page": 8, "type": "TEXT", "location": { "l": 77.9778, "t": 314.8165, "r": 487.541, "b": 257.7081 }, "text": "It's your website address you use in a web browser, like Google Chrome and Safari for people to see your web pages and information – agendas, minutes, AGAR, news etc", "reading_order": 3 }, { "page": 8, "type": "TEXT", "location": { "l": 687.404, "t": 270.6654, "r": 841.92, "b": 238.5119 }, "text": "come to Leighton-Linslade To\nmmunity to be proud of\"", "reading_order": 4 }, { "page": 8, "type": "TITLE", "location": { "l": 506.0158, "t": 259.1478, "r": 558.0809, "b": 246.6703 }, "text": "Our Office:", "reading_order": 5, "level": 6 }, { "page": 8, "type": "TITLE", "location": { "l": 79.6573, "t": 244.2708, "r": 116.3668, "b": 224.8347 }, "text": "AND", "reading_order": 6, "level": 5 }, { "page": 8, "type": "TEXT", "location": { "l": 505.056, "t": 233.4729, "r": 644.9362, "b": 195.3206 }, "text": "The White House\nHockliffe Street, Leighton Buzzard\nBedfordshire, LU7 1HD", "reading_order": 7 }, { "page": 8, "type": "TEXT", "location": { "l": 77.7378, "t": 207.7981, "r": 477.224, "b": 171.0855 }, "text": "Your email address – the address that people use to send you an email.", "reading_order": 8 }, { "page": 8, "type": "TEXT", "location": { "l": 708.2781, "t": 187.1623, "r": 841.92, "b": 155.9686 }, "text": "WE WOULD LOVE YOUR FEEDBACK\nWe would love to hear what you think of the About provide your feedback. You could be in for a chance", "reading_order": 9 }, { "page": 8, "type": "TEXT", "location": { "l": 505.7758, "t": 173.485, "r": 641.3372, "b": 149.01 }, "text": "Call us on:\nGeneral enquiries: 01525 631920\nEmail us at:\ninfo@leightonlinslade-tc.gov.uk", "reading_order": 10 }, { "page": 8, "type": "TEXT", "location": { "l": 686.4443, "t": 143.971, "r": 814.5678, "b": 132.2133 }, "text": "3571.35 354735476", "reading_order": 11 }, { "page": 8, "type": "TEXT", "location": { "l": 504.5762, "t": 142.5313, "r": 635.099, "b": 114.217 }, "text": "Email us at: info@leightonlinslade-tc.gov.uk", "reading_order": 12 } ] }, { "page": 9, "items": [ { "page": 9, "type": "TITLE", "location": { "l": 81.5767, "t": 410.5572, "r": 199.3832, "b": 377.6839 }, "text": ".gov.uk", "reading_order": 0, "level": 3 }, { "page": 9, "type": "TEXT", "location": { "l": 79.1774, "t": 374.8044, "r": 388.4493, "b": 356.8081 }, "text": "It's the ultimate official domain for a Council.", "reading_order": 1 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 340.0115, "r": 272.5623, "b": 322.0151 }, "text": "Elevated level of security", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 2 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 78.9375, "t": 305.6984, "r": 251.9282, "b": 286.9822 }, "text": "Improves compliance", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 3 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 78.9375, "t": 271.1453, "r": 393.4878, "b": 252.1892 }, "text": "Improves GDPR – and FOI & SAR situations", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 4 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 78.6976, "t": 236.3524, "r": 354.6189, "b": 217.8761 }, "text": "Added benefits and security services", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 5 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 78.9375, "t": 201.7993, "r": 227.2152, "b": 183.0831 }, "text": "More professional", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 6 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 79.4174, "t": 166.5264, "r": 334.2247, "b": 147.8102 }, "text": "Improved authenticity of message", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 7 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 77.9778, "t": 132.2133, "r": 418.6806, "b": 94.301 }, "text": "■ Can only be used managed by authorised organisations for added security & governance", "marker": "▪", "list_id": "L4", "level": 0, "reading_order": 8 }, { "page": 9, "type": "TITLE", "location": { "l": 436.1957, "t": 415.1163, "r": 552.0826, "b": 381.5231 }, "text": ".org.uk", "reading_order": 9, "level": 3 }, { "page": 9, "type": "TEXT", "location": { "l": 434.2762, "t": 375.0444, "r": 778.0982, "b": 356.5681 }, "text": "It's an acceptable UK-based domain for a Council.", "reading_order": 10 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 434.7561, "t": 340.2514, "r": 754.345, "b": 322.0151 }, "text": "Elevated level of security above free emails", "marker": "▪", "list_id": "L5", "level": 0, "reading_order": 11 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 434.996, "t": 305.9383, "r": 620.4631, "b": 287.2221 }, "text": "Helps with compliance", "marker": "▪", "list_id": "L5", "level": 0, "reading_order": 12 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 434.5161, "t": 271.1453, "r": 751.9456, "b": 252.1892 }, "text": "■ Improves GDPR – and FOI & SAR situations", "marker": "▪", "list_id": "L5", "level": 0, "reading_order": 13 }, { "page": 9, "type": "LIST_ITEM", "location": { "l": 435.2359, "t": 236.5923, "r": 808.5695, "b": 217.6361 }, "text": "■ Requires less scrutiny so = less official than .gov.uk", "marker": "▪", "list_id": "L5", "level": 0, "reading_order": 14 }, { "page": 9, "type": "TEXT", "location": { "l": 457.5496, "t": 176.6044, "r": 783.1368, "b": 119.7359 }, "text": "You can also use .com, .co.uk or other council-owned domain suffix but they are not within the UK jurisdiction managed by Nominet.", "reading_order": 15 } ] }, { "page": 10, "items": [ { "page": 10, "type": "TITLE", "location": { "l": 81.3368, "t": 424.2345, "r": 347.9008, "b": 391.841 }, "text": "Domains - recap", "reading_order": 0, "level": 4 }, { "page": 10, "type": "LIST_ITEM", "location": { "l": 80.1372, "t": 353.4488, "r": 434.5161, "b": 334.0127 }, "text": "Stop using free email (Gmail/Hotmail/Yahoo etc)", "marker": "▪", "list_id": "L6", "level": 0, "reading_order": 1 }, { "page": 10, "type": "LIST_ITEM", "location": { "l": 79.6573, "t": 318.4158, "r": 631.9798, "b": 299.6996 }, "text": "Use a council-owned domain for your official email for the council & website", "marker": "▪", "list_id": "L6", "level": 0, "reading_order": 2 }, { "page": 10, "type": "LIST_ITEM", "location": { "l": 79.8972, "t": 283.6228, "r": 395.8871, "b": 264.9066 }, "text": "Get your .gov.uk domain for best practice", "marker": "▪", "list_id": "L6", "level": 0, "reading_order": 3 }, { "page": 10, "type": "LIST_ITEM", "location": { "l": 79.4174, "t": 248.11, "r": 737.3098, "b": 230.1136 }, "text": "Other council-owned domains are currently acceptable, but website and email should match", "marker": "▪", "list_id": "L6", "level": 0, "reading_order": 4 }, { "page": 10, "type": "LIST_ITEM", "location": { "l": 79.6573, "t": 213.317, "r": 635.3389, "b": 195.0807 }, "text": "Make sure you set enough in the budget/precept planning for these services", "marker": "▪", "list_id": "L6", "level": 0, "reading_order": 5 }, { "page": 10, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 179.2439, "r": 626.4614, "b": 161.2475 }, "text": "Make sure the domain name is registered to the council – not an individual.", "marker": "▪", "list_id": "L6", "level": 0, "reading_order": 6 } ] }, { "page": 11, "items": [ { "page": 11, "type": "TITLE", "location": { "l": 76.7781, "t": 399.2795, "r": 782.177, "b": 365.9262 }, "text": "Website Accessibility Compliance - update", "reading_order": 0, "level": 3 }, { "page": 11, "type": "LIST_ITEM", "location": { "l": 78.9375, "t": 335.4524, "r": 629.3406, "b": 279.0637 }, "text": "Regulations for all public sector bodies, incl parish & town councils' websites must meet WCAG2.1AA standard since 2020\nRegulations rose to WCAG2.2AA in October 2024", "marker": "▪", "list_id": "L7", "level": 0, "reading_order": 1 }, { "page": 11, "type": "LIST_ITEM", "location": { "l": 79.8972, "t": 262.987, "r": 346.7012, "b": 244.9906 }, "text": "You must have a compliant website", "marker": "▪", "list_id": "L7", "level": 0, "reading_order": 2 }, { "page": 11, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 227.9541, "r": 725.7931, "b": 209.9577 }, "text": "Regardless of the domain type, SAPPP '25 & Public Sector Website laws require compliance", "marker": "▪", "list_id": "L7", "level": 0, "reading_order": 3 }, { "page": 11, "type": "LIST_ITEM", "location": { "l": 79.8972, "t": 193.1611, "r": 549.6833, "b": 175.4046 }, "text": "You must have an up to date and relevant Accessibility Statement", "marker": "▪", "list_id": "L7", "level": 0, "reading_order": 4 }, { "page": 11, "type": "LIST_ITEM", "location": { "l": 80.3771, "t": 159.5678, "r": 679.7262, "b": 139.8918 }, "text": "Risks? Challenged by vexatious MOP, audit failure, withdrawal of your .gov.uk domain", "marker": "▪", "list_id": "L7", "level": 0, "reading_order": 5 } ] }, { "page": 12, "items": [ { "page": 12, "type": "TITLE", "location": { "l": 77.4979, "t": 425.4342, "r": 504.3362, "b": 391.841 }, "text": "Website Accessibility tips", "reading_order": 0, "level": 3 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 81.5767, "t": 378.8836, "r": 502.8966, "b": 360.8873 }, "text": "Ensure the website & the content you upload is accessible", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 1 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 81.3368, "t": 344.3306, "r": 709.4778, "b": 307.378 }, "text": "Define your Accessibility Statement and include the things you know are not accessible – 3rd party documents, content older than 2018", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 2 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 81.0969, "t": 290.3415, "r": 630.7802, "b": 272.3451 }, "text": "Avoid using ‘accessibility plugins’ to achieve compliance – they aren’t enough", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 3 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 81.0969, "t": 256.5083, "r": 736.1102, "b": 236.8323 }, "text": "Have a checking process – use the free browser checker Wave by WEBAIM to check as you go", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 4 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 81.0969, "t": 221.2354, "r": 496.1786, "b": 203.239 }, "text": "Make sure any forms are web page forms, not documents", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 5 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 80.857, "t": 186.6824, "r": 615.4246, "b": 168.2061 }, "text": "Consider commissioning an accessibility audit to understand your position", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 6 }, { "page": 12, "type": "LIST_ITEM", "location": { "l": 80.617, "t": 151.8894, "r": 645.416, "b": 114.217 }, "text": "Consider commissioning a purpose-built website from council website experts, Aubergine, that's .gov.uk-ready and fully compliant from £499 + VAT", "marker": "▪", "list_id": "L8", "level": 0, "reading_order": 7 } ] }, { "page": 13, "items": [ { "page": 13, "type": "TITLE", "location": { "l": 77.258, "t": 425.6742, "r": 504.5762, "b": 391.841 }, "text": "Website Accessibility tips", "reading_order": 0, "level": 3 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 79.4174, "t": 362.327, "r": 337.3438, "b": 343.8507 }, "text": "✓ Avoid using tables where possible", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 1 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 79.6573, "t": 327.534, "r": 265.1244, "b": 309.0577 }, "text": "Add ALT text for images", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 2 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 82.3191, "t": 293.9971, "r": 324.9616, "b": 274.6612 }, "text": "Avoid embedding text on images", "marker": "✓", "list_id": "L9", "level": 0, "items": [ { "page": 13, "type": "LIST_ITEM", "location": { "l": 105.9607, "t": 275.0324, "r": 415.7408, "b": 255.6965 }, "text": "events need the salient info on the web page", "marker": "–", "list_id": "L9", "level": 1, "reading_order": 0 } ], "reading_order": 3 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 80.1372, "t": 238.9918, "r": 202.9821, "b": 220.2756 }, "text": "✓ High Contrast", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 4 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 79.8972, "t": 204.9187, "r": 367.5752, "b": 185.9625 }, "text": "✓ Use structured headings (H1, H2, H3..)", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 5 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 78.6976, "t": 169.8858, "r": 422.2796, "b": 150.6896 }, "text": "✓ Make documents accessible before uploading", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 6 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 135.0928, "r": 370.2145, "b": 116.8564 }, "text": "Forms need to be web forms, not PDFs\nUse descriptive link text (not 'click here'!)", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 7 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.4742, "t": 362.8069, "r": 746.1873, "b": 343.1308 }, "text": "Use descriptive link text (not 'click here')", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 8 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.7141, "t": 327.534, "r": 681.1658, "b": 307.618 }, "text": "✓ Avoid pasting URLs on the page", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 9 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.4742, "t": 292.9809, "r": 698.4409, "b": 273.5449 }, "text": "✓ Avoid overly styled text formatting", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 10 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.7141, "t": 258.4279, "r": 655.2532, "b": 239.2318 }, "text": "✓ Avoid ‘accessibility plugins’", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 11 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.4742, "t": 223.6349, "r": 755.3047, "b": 185.2427 }, "text": "✓ Avoid scans where possible\n(3^{rd} party documents/AGAR/ROI excluded)", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 12 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.2342, "t": 169.6458, "r": 690.5232, "b": 150.4497 }, "text": "✓ Have a regular checking process", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 13 }, { "page": 13, "type": "LIST_ITEM", "location": { "l": 441.2342, "t": 135.3327, "r": 709.9576, "b": 116.1366 }, "text": "✓ Revisit your accessibility statement", "marker": "✓", "list_id": "L9", "level": 0, "reading_order": 14 } ] }, { "page": 14, "items": [ { "page": 14, "type": "FIGURE", "location": { "l": 27.1123, "t": 535.812, "r": 807.1299, "b": 113.0172 }, "text": "", "reading_order": 0 } ] }, { "page": 15, "items": [ { "page": 15, "type": "TITLE", "location": { "l": 51.3454, "t": 441.2711, "r": 460.1888, "b": 410.3173 }, "text": "IT Policies & Assertion 10", "reading_order": 0, "level": 4 }, { "page": 15, "type": "LIST_ITEM", "location": { "l": 78.2177, "t": 352.4889, "r": 451.0714, "b": 334.7325 }, "text": "What Assertion 10 requires in relation to IT policies", "marker": "▪", "list_id": "L10", "level": 0, "reading_order": 1 }, { "page": 15, "type": "LIST_ITEM", "location": { "l": 79.1774, "t": 317.456, "r": 478.6636, "b": 299.9395 }, "text": "What the Practitioners' Guide says an IT policy must do", "marker": "▪", "list_id": "L10", "level": 0, "reading_order": 2 }, { "page": 15, "type": "LIST_ITEM", "location": { "l": 79.8972, "t": 283.3829, "r": 418.4407, "b": 265.1466 }, "text": "What “securely and legally” means in practice", "marker": "▪", "list_id": "L10", "level": 0, "reading_order": 3 }, { "page": 15, "type": "LIST_ITEM", "location": { "l": 79.4174, "t": 248.11, "r": 438.355, "b": 230.3536 }, "text": "How email and domains link back to the IT policy", "marker": "▪", "list_id": "L10", "level": 0, "reading_order": 4 } ] }, { "page": 16, "items": [ { "page": 16, "type": "TITLE", "location": { "l": 50.8655, "t": 444.8703, "r": 444.5933, "b": 368.8057 }, "text": "Assertion 10: IT Policy Requirements", "reading_order": 0, "level": 2 }, { "page": 16, "type": "LIST_ITEM", "location": { "l": 51.3454, "t": 370.0054, "r": 594.0707, "b": 332.8129 }, "text": "“All smaller authorities (excluding parish meetings) must also have an IT policy.”", "marker": "▪", "list_id": "L11", "level": 0, "reading_order": 1 }, { "page": 16, "type": "LIST_ITEM", "location": { "l": 51.3454, "t": 317.2161, "r": 530.4888, "b": 298.7398 }, "text": "The IT policy must explain how authority business is conducted", "marker": "▪", "list_id": "L11", "level": 0, "reading_order": 2 }, { "page": 16, "type": "LIST_ITEM", "location": { "l": 52.0652, "t": 282.4231, "r": 381.0114, "b": 263.7068 }, "text": "■ Applies to clerks, members and other staff", "marker": "▪", "list_id": "L11", "level": 0, "reading_order": 3 }, { "page": 16, "type": "LIST_ITEM", "location": { "l": 51.5853, "t": 247.87, "r": 428.5178, "b": 228.9139 }, "text": "Covers authority-owned and personal equipment", "marker": "▪", "list_id": "L11", "level": 0, "reading_order": 4 } ] }, { "page": 17, "items": [ { "page": 17, "type": "FIGURE", "location": { "l": 258.4063, "t": 503.6585, "r": 601.5085, "b": 470.5452 }, "text": "", "reading_order": 0 }, { "page": 17, "type": "TITLE", "location": { "l": 50.3856, "t": 450.3892, "r": 617.8239, "b": 373.3647 }, "text": "Practitioners' Guide: Purpose of an IT Policy", "reading_order": 1, "level": 1 }, { "page": 17, "type": "TEXT", "location": { "l": 55.6641, "t": 309.5376, "r": 466.9069, "b": 290.5814 }, "text": "Prevents misunderstandings when using IT equipment", "reading_order": 2 }, { "page": 17, "type": "TEXT", "location": { "l": 56.144, "t": 281.9432, "r": 512.9738, "b": 263.2269 }, "text": "Ensures there are no excuses for unsafe or insecure behaviour", "reading_order": 3 }, { "page": 17, "type": "TEXT", "location": { "l": 56.3839, "t": 253.8688, "r": 448.1922, "b": 235.1526 }, "text": "Sets clear expectations for everyone in the authority", "reading_order": 4 }, { "page": 17, "type": "TEXT", "location": { "l": 55.9041, "t": 226.2744, "r": 590.7116, "b": 207.7981 }, "text": "Templates must be personalised to reflect how the council actually works", "reading_order": 5 } ] }, { "page": 18, "items": [ { "page": 18, "type": "FIGURE", "location": { "l": 259.606, "t": 503.8984, "r": 601.5085, "b": 470.3052 }, "text": "", "reading_order": 0 }, { "page": 18, "type": "TITLE", "location": { "l": 50.8655, "t": 450.3892, "r": 612.3055, "b": 376.964 }, "text": "“Securely and Legally”: What That Means in Practice", "reading_order": 1, "level": 1 }, { "page": 18, "type": "TEXT", "location": { "l": 52.0652, "t": 357.288, "r": 274.0019, "b": 336.8921 }, "text": "What an IT Policy Must Explain", "reading_order": 2 }, { "page": 18, "type": "TEXT", "location": { "l": 55.9041, "t": 309.7776, "r": 638.9379, "b": 290.8214 }, "text": "“How everyone should conduct authority business in a secure and legal way”", "reading_order": 3 }, { "page": 18, "type": "TEXT", "location": { "l": 56.3839, "t": 281.4633, "r": 501.9369, "b": 263.4669 }, "text": "What is expected when using passwords and user accounts", "reading_order": 4 }, { "page": 18, "type": "TEXT", "location": { "l": 56.144, "t": 253.8688, "r": 422.2796, "b": 235.3926 }, "text": "▶ How personal and council devices may be used", "reading_order": 5 }, { "page": 18, "type": "TEXT", "location": { "l": 56.3839, "t": 226.2744, "r": 402.6052, "b": 208.0381 }, "text": "▶ Rules for remote working and mobile access", "reading_order": 6 }, { "page": 18, "type": "TEXT", "location": { "l": 57.3437, "t": 198.44, "r": 429.9574, "b": 180.2037 }, "text": "How incidents, mistakes or concerns are reported", "reading_order": 7 } ] }, { "page": 19, "items": [ { "page": 19, "type": "TITLE", "location": { "l": 50.8655, "t": 450.1493, "r": 608.2266, "b": 377.204 }, "text": "IT Policies, Domains, Email & Data Protection", "reading_order": 0, "level": 1 }, { "page": 19, "type": "TEXT", "location": { "l": 58.5433, "t": 346.0103, "r": 467.6267, "b": 328.2538 }, "text": "IT Policy sets the rules for how council business is done", "reading_order": 1 }, { "page": 19, "type": "TEXT", "location": { "l": 58.7832, "t": 318.1759, "r": 496.8984, "b": 300.1795 }, "text": "Authority-owned domains establish ownership and control", "reading_order": 2 }, { "page": 19, "type": "TEXT", "location": { "l": 58.5433, "t": 291.0613, "r": 599.5891, "b": 272.5851 }, "text": "Authority-owned email keeps communications in a managed environment", "reading_order": 3 }, { "page": 19, "type": "TEXT", "location": { "l": 58.5433, "t": 262.987, "r": 549.2034, "b": 244.5107 }, "text": "Data Protection compliance depends on all three working together", "reading_order": 4 }, { "page": 19, "type": "TEXT", "location": { "l": 108.9289, "t": 183.323, "r": 611.5857, "b": 164.1269 }, "text": "\"Secure and legal use of IT underpins GDPR, FOI and SAR obligations.\"", "reading_order": 5 }, { "page": 19, "type": "FIGURE", "location": { "l": 106.0498, "t": 147.8102, "r": 411.0028, "b": 79.9039 }, "text": "", "reading_order": 6 }, { "page": 19, "type": "TEXT", "location": { "l": 188.8262, "t": 137.7322, "r": 395.4073, "b": 84.7029 }, "text": "Cyber Security Audit\nSECURE NOW", "reading_order": 7 } ] } ]