Glossary - NCSC.GOV.UK

NCSC blog - NCSC.GOV.UK

Verify suppliers - NCSC.GOV.UK

What is cyber security? - NCSC.GOV.UK

NCSC podcast available on Apple Music and Spotify - NCSC.GOV.UK

Recovering a hacked account - NCSC.GOV.UK

New brochure published to support academic researchers - NCSC.GOV.UK

AIT fraud: what you need to know - NCSC.GOV.UK

Asset management - NCSC.GOV.UK

Cyber security training for school staff - NCSC.GOV.UK

Lists of related items should be written [semantically](https://html.com/semantic-markup/) as a 
list.

Usually this means rewriting these to use the `<ul>` or `<ol>` tags.

This allows assistive technologies to more easily navigate from item to
item, or past entire groups of links if the user wants to. 

## Examples 

### Navigation

This navigation:

```html
<a href="/about">About us</a>
<a href="/products">Products</a>
<a href="/contact">Contact us</a>
```

Should be rewritten as a list:

```html
<ul>
  <li><a href="/about">About us</a></li>
  <li><a href="/products">Products</a></li>
  <li><a href="/contact">Contact us</a></li>
</ul>
```

### Tables for content

This single-column table is redundant. There is no
value in placing the content in a table, which makes
it harder for screen reader users to interpret and interact
with.

```html
<table>
  <tr>
    <td>
      Banana
    </td>
  </tr>
  <tr>
    <td>
      Apple
    </td>
  </tr>
  <tr>
    <td>
      Pear
    </td>
  </tr>
</table>
```

Should be rewritten as a list:

```html
<ul>
  <li>Banana</li>
  <li>Apple</li>
  <li>Pear</li>
</ul>
```

## Justification

Users of assistive technologies, like screen readers, can skip an entire
list in one step. In some cases, they can even search inside a list. 

These aids are not available where links are written outside a list. 
Failing to use lists correctly can force users to have to step through
hundreds of items one at a time.

## Methodology

1. Any single-column tables are automatically considered 
   redundant lists. 
2. For non-table elements, recursively work down the page looking inside
   each element for links separated by minimal amounts of non-link text. 
   If the non-link text is below 30 characters 
   in length, we assume we're inside content that should be a list.
   Some exceptions are made, e.g. the presence of an `<hr>` would break
   out of the list.

## More information

See [Technique
H48](https://www.w3.org/TR/2016/NOTE-WCAG20-TECHS-20161007/H48) for
details.

mark-navigation-section-as-list

June 2025

May 2025

The National Cyber Security Centre

Title / URL	Issues
Glossary - NCSC.GOV.UKwww.ncsc.gov.uk/section/advice-guidance/glossary	9
NCSC blog - NCSC.GOV.UKwww.ncsc.gov.uk/section/keep-up-to-date/ncsc-blog	2
Verify suppliers - NCSC.GOV.UKwww.ncsc.gov.uk/section/products-services/verify-suppliers	2
What is cyber security? - NCSC.GOV.UKwww.ncsc.gov.uk/section/about-ncsc/what-is-cyber-security	1
NCSC podcast available on Apple Music and Spotify - NCSC.GOV.UKwww.ncsc.gov.uk/blog-post/cyber-series-podcast	1
Recovering a hacked account - NCSC.GOV.UKwww.ncsc.gov.uk/guidance/recovering-a-hacked-account	1
New brochure published to support academic researchers - NCSC.GOV.UKwww.ncsc.gov.uk/blog-post/ace-csr-brochure-2020	1
AIT fraud: what you need to know - NCSC.GOV.UKwww.ncsc.gov.uk/blog-post/ait-fraud-what-you-need-to-know	1
Asset management - NCSC.GOV.UKwww.ncsc.gov.uk/collection/10-steps/asset-management	1
Cyber security training for school staff - NCSC.GOV.UKwww.ncsc.gov.uk/information/cyber-security-training-schools	1

Write lists or groups of links semantically

The National Cyber Security Centre

Where this issue has occurred