NIS2 Directive - Gain NIS2 Compliance with Sophos

Sophos Endpoint - AI-powered Endpoint Security

Sophos Managed Risk - Vulnerability Management Service

NIST Cybersecurity Framework Results

Sophos Central - Synchronize Your Network Security

Sophos AI Technologies for Advanced Cybersecurity

Sophos Cloud Optix: Cloud Security Posture Management

To comply with WCAG 2.1, fields must identify what their purpose is _programmatically_. If done correctly,
this allows browsers to help users fill in forms with known information, such as their name and email address.

This is accomplished via the `autocomplete` attribute, which should be set to a 
[supported value](https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete) wherever
appropriate, e.g. 

```html
<label for="name">
  First Name
</label>
<input id="name" type="text" autocomplete="given-name">
```

For fields where `autocomplete` is not appropriate, e.g. due to security, or the field not matching the
specification, the specific field should be ignored.

## Methodology

* All fields which could support `autocomplete` (e.g. text fields)
  are checked. Other fields - like dropdown menus - are ignored.
* The [accessible name](https://www.w3.org/TR/accname-1.2/) of each field is considered. In most cases this
  will be the `<label>` for the field.
* If the name matches a known pattern the field 
  must have an appropriate `autocomplete` value specified.
  For example, an `<input>` with type `text` with a label of 
  "First Name" would be expected to have an autocomplete value 
  of `given-name` or similar.

Note that using `autocomplete="on"` is not sufficient to pass this check, a
specific named autocomplete value must be used. See the
[supported values](https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete).

## Troubleshooting

If a field is a false positive, check whether the field has an 
appropriate accessible name (i.e. a `<label>` or `aria-label`).

If the label is incorrect, Silktide may assume that the field 
requires `autocomplete` where it does not. You should fix the 
label to avoid this.

Otherwise, you can simply ignore the specific field.

## More information

* [How to use HTML 5.2 attributes](https://www.w3.org/WAI/WCAG21/Techniques/html/H98)

identify-input-purpose

January 2026

December 2025

Sophos

	Title / URL	Issues
	NIS2 Directive - Gain NIS2 Compliance with Sophoswww.sophos.com/en-us/content/nis2-compliance	3
	Sophos Endpoint - AI-powered Endpoint Securitywww.sophos.com/en-us/products/endpoint-security	3
	Sophos Managed Risk - Vulnerability Management Servicewww.sophos.com/en-us/products/managed-risk	3
	NIST Cybersecurity Framework Resultswww.sophos.com/en-us/report/nist-assessment	3
	Sophos Central - Synchronize Your Network Securitywww.sophos.com/en-us/products/sophos-central	3
	Sophos AI Technologies for Advanced Cybersecuritywww.sophos.com/en-us/solutions/ai-cybersecurity	3
	Sophos Cloud Optix: Cloud Security Posture Managementwww.sophos.com/en-us/products/cloud-optix	2

Identify the purpose of fields programmatically

Sophos

Where this issue has occurred