Accessibility Addendum and accessibility review before launch
Visual identity review
Pantheon for all WordPress and Drupal hosting
Agreement to have a vendor on retainer for regular patching and updates
In addition to the Accessibility Addendum, design/build contracts need to include the following language in the Statement of Work:
In the design section:
[Contractor] acknowledges that all web design work will follow the University’s Visual Identity Guidelines and its Web Supplement.
[Contractor] will add a two-week review period to the timeline before the development phase for the Visual Identity committee to review the proposed web designs and propose any web design changes needed based on the required guidelines found in the main Visual Identity Guidelines and its Web Supplement.
In the development section:
[Contractor] will set up a sandbox site for hosting the website in Pantheon that will be moved under Georgetown’s Pantheon account so Georgetown can assign the appropriate Pantheon plan.
[Contractor] agrees to use Pantheon’s plugin and theme recommendations and workflow for managing the website in Dev, Test, and Live environments
[Contractor] will coordinate with Georgetown Web Services to set up Shibboleth for all WordPress logins.
In the QA or launch section:
[Contractor] will ensure the website complies with Georgetown’s attached Accessibility Addendum, and will submit the website for a Georgetown accessibility review and address any identified issues before site launch.
As a standard, Georgetown security may require invasive/noninvasive scanning for the detection of potential vulnerabilities. [Contractor] will address any identified vulnerabilities before site launch
In addition to the Accessibility Addendum, maintenance contracts need to include the following language in the Statement of Work:
All patches will be applied as they are released, but not to exceed 30 days after release to allow for proper testing. Any vulnerabilities that can be exploited remotely, have a Common Vulnerability Scoring System (CVSS) score of greater than 8, or are labeled as “critical” will be patched within 48 hours.
