INDEX Checklists Internet testing

Sogeti Nederland B.V.

1 Manageability
2 Security
3 Continuity
4 Data controllability
5 Flexibility
6 User-friendliness
7 Reusability
8 Maintainability
9 Portability
10 Functionality
11 Performance

Checklists Internet testing

Manageability
No Description
Y
1 Are agreements made concerning the support by the
management organization (for example 24x7)
2 Are frequent checks carried out that the website is still online?
3 Is a procedure available for monitoring?
4 Does the management organization have a good (software
and hardware) overview of the separate components of the
information system, particularly concerning the analysis of the
cause of errors that have occurred?
5 Are procedures available for the management organization
concerning:
Attempts to break into the website by hackers?
The actual breaking through security by hackers
A 'Denial of Service' attack on the website?
The website being attacked by hackers?
6 Does the firewall function correctly?
7 Are the responsibilities and roles defined concerning:
Managing the firewall
Monitoring the website
Monitoring possible new leaks in security
Implementing patches to stop leaks in the security

8
9
10
11
12

Decision-making to get the website offline in case of

severe security risks
Is a security procedure available for the maintenance of the
firewall, router, DNS, web server etc?
Are incidents logged?
Have the browsers that are supported been registered?
Have the operating systems that are supported been
registered?
Have the browser option that are (not) supported been
registered? (JavaScript / Plug-ins (flash real audio etc))

13 Does the user receive a warning if he is using a browser that

is not supported?
14 Is the user informed about which browsers are supported?
15 Are the tasks, roles and procedures set up concerning:
Adding, changing or deleting a page?
Maintaining the links with new / deleted pages?
Answering all questions and other feedback from the
website?
Updating the sitemap?
Updating the search database?
Monitoring the number of hits, performance, and browsers
used?
Processing incoming mail?
Managing the content of the website?
Updating the website?
Repair procedures?
16 Are all transactions logged? (audit trail)

N/A

17 Are tasks easily executed?

18 Is the sitemap 'up to date' if functionality is added/removed?

Back to index
Sogeti Nederland B.V.

Remarks

Checklists Internet testing

Back to index

Security

Sogeti Nederland B.V.

No Description
1 Are security measures taken (firewalls, encryption,
passwords, ) and are the possibilities of these measures
known?
2 Have procedures been set up that indicate what action to
take when hackers attempt to break into the website, or
have already made changes to the website?
3 Is there sufficient certainty about the identity of the user
(authentication)?
4 Does the user group have the correct authorizations? (Is
the user group authorized to do what he/she should be able
to do and nothing more?)
5 Is all data transport through Internet encrypted? Is only the
receiving party able to decrypt the data?
6 Is the integrity of the information provable? Is there
sufficient certainty that the content of a message has not
been altered during storage or transport?
7 Is it impossible for both parties (user / organization) to deny
a transaction afterwards? (non-repudiation)
8 Is the vulnerability to attacks on the website periodically
checked (at least twice a year)?
9 Is it impossible to avoid/get around the firewall?
10 In case of own server set up: does the firewall protect
against the use of 'ping'?
11 Is the system part of the Privacy Laws? If yes, have the
legal obligations been fulfilled?
13 Are procedures available for the management organization
concerning:
Attempts to break into the website by hackers?
The actual breaking through security by hackers
A 'Denial Of Service' attack on the website?
The website being attacked by hackers?
14 Does the firewall function correctly?
15 Are the responsibilities and roles defined concerning:
Managing the firewall
Monitoring the website
Monitoring possible new leaks in security
Implementing patches to stop the leaks in security
Decision-making to get the website offline in case of
severe security risks
16 Is a security procedure available for the maintenance of the
firewall, router, DNS, web server etc?
17 Are incidents logged?
Are all transactions logged? (audit trail)

N/A Remarks

Checklists Internet testing

Back to index

Continuity

Sogeti Nederland B.V.

No Description
1 Are enough measurements being taken to guarantee the
required availability of the website?
Possible measurements are:
Mirror sites
Scalability of the website
Fall-over possibilities
Recovery procedures
Correct announcements in case the website is
unavailable
Monitoring performance, including timely signals in case
the performance drops below a certain value/level
2 Is a telephone Helpdesk available?
3 Have back-up and recovery procedures been
implemented? If so, are these tested periodically?
4 Have agreements been made concerning the support by
the management organization (for example 24x7)?
5 Are frequent checks carried out that the website is still
online?
6 Is there a procedure available for monitoring?
7 Have tasks, roles and procedures been set up concerning
the monitoring of the number of hits, performance and
browsers used?
8
9

N/A Remarks

Checklists Internet testing

Data controllability
No

Description
Y
1 Has all entered information been checked?
2 Are measures taken to avoid the following situation: If a
user clicks the 'send' button twice in quick succession, does
this result in sending the same transaction twice?
3 Are there possibilities for regularly checking the consistency
of the data?
4 Are all transactions logged? (audit trail)
5 Is it impossible to send the form if not all mandatory fields
contain valid values?
6 Has the form been received at the correct address?
7 Is the form correctly archived?
8

N/A

Back to index
Sogeti Nederland B.V.

Remarks

Checklists Internet testing

Back to index

Flexibility

Sogeti Nederland B.V.

No Description
1 Are the fonts and colours used available on all supported
browsers?
2 Is it possible to use the basic functionality if the end user
does not own the latest version or all options of the
supported browsers? (For example: no JavaScript, IE 3,
modem 28KB, etc)
3 Are the images of sufficient quality for the minimal colour
settings (256 colours)?
4 Do the images have the correct tags (for users who have
disabled the 'view for images')?
5 Check with different screen sizes:
Do all images appear on screen?
Are the correct images displayed on screen?
Are all images formatted correctly?
Do the images appear in the correct location?
Are tables displayed correctly?
Are frames displayed correctly?
10 Are all pages readable with various screen sizes and
minimal colour settings? (For example 640 x 480, 256
colours)
11 If the application is multilingual, is the linguistic usage
consistent?
12 Do printable pages print correctly?
13 If a Plug-in (eg Acrobat) is needed to print a page, is the
printed text correct?
14 Is there a link to download this (free) Plug-in?
15

N/A Remarks

Checklists Internet testing

Back to index

User-friendliness

Sogeti Nederland B.V.

No Description
Y
1 Are there standards or requirements concerning the look
and feel and use of the web pages?
2 What knowledge is expected of the users? Which browsers
are being used on which connection speed?
3 Is a new window opened for external use? (Does the user
leave the website?)
4 Can the external links be identified as such? (Relevant for
combined Intranet/extranet applications)
5 Do the different pages, menus and controls have a
consistent look and feel?
6 Is the layout of an acceptable level when adjusting for the
window size?
7 Is the content readable when combined with a background?

N/A Remarks

8 Is a recently-used link identified as such?

9 If the site offers the possibility to open and send a form, iIs
it possible to correct entered values (after the values have
been checked by the application) without having to enter
ALL the information again?
10 Is a confirmation message displayed after sending the
form?
11 Does each page contain a link to the sitemap?
12 Can the sitemap be used to go to a different page?
13 Is the standard terminology of the organization used?
14 Is the terminology used consistent?
15 Is the terminology used suitable for the intended users?
16 Are the messages from the application understandable?
17 Is the set up of the website apparent?
18 Is there an obvious way back? In other words, is there a link
to the Home page?
19 Are the steps in the organizational process recognizable?
20 Does the 'Help' function contain a Search function?
21 Are the Help texts clear and understandable for the end
user?
22 Are the mouse-over texts clear and understandable for the
end user?
23 If the site contains a FAQ list: Are the questions clear and
understandable for the end user?
24 If the site contains a FAQ list: Have the tasks and roles
been defined?
25 The creation of the FAQ list
26 The maintenance of the FAQ list
27 The answering of questions?
28 Does the user receive a warning if he/she uses a browser
that is not supported?
29 Is the user informed about the browsers that are
supported?

FAQ: Frequently Asked

Questions

30 Are tasks easily executed?

31 Does the site contain a Search function? If so, does it
function consistently?

Checklists Internet testing

Back to index

Reusability

Sogeti Nederland B.V.

No Description
1 Are valid national and/or international standards or
company standards used?
2 Is the processing of the input and output implemented
separately?
3 Is the sitemap 'up to date' if functionality is added and/or
removed?
4 Are the search results 'up to date' if functionality is added
and/or removed?

N/A Remarks

No
1
2
3
4

Checklists Internet testing

Back to index

Maintainability

Sogeti Nederland B.V.

Description
Are dynamic links used?
Are the Internet links verified regularly?
Are the 'look and feel' and the software separated?
Are the cgi-programs, applets, JavaScript, etc. maintained
and managed?
5 Are valid national and international standards or company
standards used?

N/A Remarks

Checklists Internet testing

Back to index

Portability

Sogeti Nederland B.V.

No Description
1 Is the referral to directories (For example of graphic
images) linked regarding the location on the platform?
2 Is there support for different browsers in different versions)?
For:
Different fonts
Use of frames
Plug-ins
Java
Tables
3 Are the fonts and colours used available on all supported
browsers?
.

Is it possible to use the basic functionality if the end user

does not own the latest version or all options of the
supported browsers? (For example: no JavaScript, IE 3,
modem 28KB, etc)
5 Are the images of sufficient quality for the minimal colour
settings (256 colours)?
6 Do the images have the correct tags (for users who have
disabled the 'view for images')?
7 Check with different screen sizes:
8 Do all images appear on screen?
9 Are the correct images displayed on screen?
10 Are all images formatted correctly?
11 Do the images appear in the correct location?
12 Are tables displayed correctly?
13 Are frames displayed correctly?
14 Are all pages readable with various screen sizes and
minimal colour settings? (For example 640 x 480, 256
colours)
15 If the application is multilingual, is the linguistic usage
consistent?
16 Do printable pages print correctly?
17 If a Plug-in (eg Acrobat) is needed for printing a page, is the
printed text correct?
18 Is there a link to download this (free) Plug-in?
19 Have the browsers that are supported been registered?
20 Have the operating systems that are supported been
registered?
21 Have the browser option that are (not) supported been
registered? (JavaScript / Plug-ins (flash real audio etc))
22 Does the user receive a warning if he uses a browser that is
not supported?
23
Is the user informed about which browsers are supported?

N/A Remarks

No

Checklists Internet testing

Back to index

Functionality

Sogeti Nederland B.V.

Description
1 Have tasks, roles and procedures been set up concerning
the processing and answering of incoming mail, questions
and other feedback?
2 Is the system part of the Privacy Laws? If yes, have the
legal obligations been fulfilled?
3 Is it impossible to send the form if not all mandatory fields
contain valid values?
4 Is the form received at the correct address?
5 Is the form correctly archived?
6 Is all entered information being checked?
7 Are measures taken to avoid the following situation: If a
user clicks the 'send' button twice in quick succession, does
this result in sending the same transaction twice?
8 Are measures taken to avoid the following situation: If a
user clicks the 'Back' button of the browser after entering
and sending a form, does this result in sending the same
transaction twice?

N/A Remarks

Checklists Internet testing

Back to index

Performance

Sogeti Nederland B.V.

No Description
Y
1 Is an estimation made of the expected number of users
(minimum, normal, maximum)?
2 Is an estimation made of the division in the different user
scenarios? (Eg x% of users only visiting the Homepage; y%
of users searching for information; z% of users who will
carry out a transaction)
3 Will the performance of the website be at an acceptable
level with the expected number of simultaneous users?
4 Is the application capable of processing the expected
number of simultaneous transactions at an acceptable
performance level?
5 What are the expectations / demands concerning
performance? (For example: how fast can pages be loaded;
how fast are animations, applets, etc. loaded) Are these
requirements known?
6 Has the maximum bandwidth and syntax of images been
defined?
7 Are downloads offered as compressed files?
8 Have tasks, roles and procedures been set up concerning
monitoring the number of hits, performance and browsers
used?
9

N/A Remarks