May 19 2026
Pools: understand your digital position with an independent risk assessment
An audit and report that identifies exactly where a pool sits today, based on its risk, the position of its members, and the market around it.
TL;DR
An overview of the Pool Risk Audit Report: an independent audit that grades each member website A to F against ADA, privacy, and environmental criteria, on the same day and using the same method, so a pool board can see the distribution of risk across the membership in a single view. Value and risk are graded separately so one does not mask the other. Includes a sample finding that if 10% of members in a recent audit were targeted, exposure ran to $2.6m and over 6,400 hours.
Compliance online is law, not an option. ADA and privacy obligations apply to websites in the same way building codes apply to physical premises. For pools, the exposure sits with members and, through the cover provided, with the program itself. Most pool members do not have a clear, independent view of where they stand. Vendor reports describe activity. Internal teams describe intent. Neither answers the question a board needs answered: what is the level of risk on the website today, and how does it compare with peers in the same market.
Listen: scorecard grades for website value and risk
A walkthrough of how value and risk are graded independently, and what the report tells the board about each member.
Why an independent audit matters
An independent audit removes the conflict of interest that sits inside any service measuring its own work. It records the position of each member website against the same criteria, on the same date, using the same method. That makes the result comparable across the membership and defensible at board level.
The audit covers accessibility, privacy, and environmental measures, and combines them into a single risk position. Each member receives a grade. The pool receives the distribution across its membership, with the outliers identified.
Pool Risk Audit Report - a sample
The report sets out, for each member, where the website sits today against ADA, privacy, and environmental criteria, how that position compares with other members in the pool, and where the highest-impact exposure is concentrated.
What the report identifies
- Where the website sits today against ADA, privacy, and environmental criteria.
- How that position compares with other members in the pool.
- Where the highest-impact exposure is concentrated, page by page.
- The cost and time profile of leaving the position unaddressed.
Findings are reported in A to F grades, not raw technical output. Grade A indicates a strong position. Grade F indicates immediate intervention is required. The same scale applies to every member, so the board sees the membership in one view.
Sample findings: in a recent audit of pool members, the majority of websites carried medium to highest risk grades on accessibility, with a smaller but material set carrying the same on privacy. If 10% of those members are targeted, the cost runs to $2.6m and over 6,400 hours of lost time, before considering the distraction at executive level. The pattern is consistent across pools. The numbers move, the distribution does not.
Content is for informational purposes only and does not constitute legal advice.
Value and risk, kept separate
Value and risk are graded independently. A site can carry traffic and deliver value while operating as a legal liability. Grading them separately prevents one from masking the other.
Value covers areas that help the organization perform: search visibility, user experience, and integrity signals such as privacy information, site terms, disclaimers, and an accessibility statement. Risk covers accessibility, privacy, and the environmental cost of unoptimized content.
What pools do with the report
The report gives the board an unbiased view of exposure across the membership. It supports the case for a Risk Control Program, identifies which members need attention first, and establishes a baseline that future audits are measured against.
Background on the program structure for pools is on the Pools and Captives page.