1EdTech Caliper Analytics
The 1EdTech standard for learning-activity events, one of the interoperability standards a product may support in the self-disclosure.
Library
The ICAA Documentation Library: standards, implementation guidance, model practices, templates, assessments and training. Public documents are free to download; the rest is included with membership.
Standards
The operational standards every ICAA workflow is evaluated against.1EdTech LTI 1.3 (Learning Tools Interoperability)
The 1EdTech standard for launching a tool from a learning platform with a secure, standards-based sign-in; LTI 1.3 with LTI Advantage is what the self-disclosure and…
1EdTech OneRoster
The 1EdTech standard for exchanging rosters, enrollments and grades between a student information system and a product; versions 1.1 and 1.2 are the self-disclosure's options.
Public
Open: 1EdTech OneRoster
1EdTech QTI (Question and Test Interoperability)
The 1EdTech standard for exchanging assessment items and results, named with OneRoster and LTI in the interoperability control.
ADA: Americans with Disabilities Act
The Department of Justice's ADA site, including the Title II rule that sets WCAG 2.1 AA as the accessibility standard for state and local government web…
CIPA: Children's Internet Protection Act
The FCC's guide to the internet-safety requirements that schools and libraries receiving E-rate discounts must meet.
COPPA: Children's Online Privacy Protection Rule
The FTC rule on collecting personal information online from children under 13: notice, verifiable parental consent and the school-consent arrangement a product used in class relies…
Ed-Fi Data Standard (Ed-Fi Alliance)
The Ed-Fi Alliance's open data standard and API for K-12 operational data, the state and district data-exchange standard credential E and the self-disclosure name.
FedRAMP: Federal Risk and Authorization Management Program
The U.S. government's authorization program for cloud services; a FedRAMP authorization is accepted as a security attestation in the self-disclosure.
FERPA: Family Educational Rights and Privacy Act
The federal law on the privacy of student education records, from the U.S. Department of Education's Student Privacy Policy Office: the school-official exception, re-disclosure limits and…
GovRAMP (formerly StateRAMP)
The state and local government counterpart of FedRAMP; a GovRAMP/StateRAMP authorization is accepted as a security attestation in the self-disclosure.
IDEA: Individuals with Disabilities Education Act
The Department of Education's IDEA site: the law, regulations and guidance on special education services and the records they create. Named by credentials A and C.
ISO/IEC 27001: Information security management systems
The international standard for an information security management system; a current certificate is one of the attestations a vendor may hold in the self-disclosure and for…
ISO/IEC 42001: AI management systems
The international standard for an AI management system, the certifiable counterpart of the AI RMF that a vendor may hold for its AI features.
ISTE Standards (students, educators, leaders, coaches)
The International Society for Technology in Education's standards for the use of technology in learning and leadership, which districts and hubs use when they describe outcomes…
NIST AI Risk Management Framework (AI RMF 1.0)
The framework an AI feature is documented against for ICAA's AI controls: purpose, training-data provenance and human-in-the-loop controls across Govern, Map, Measure and Manage.
NIST Cybersecurity Framework 2.0
The framework of outcomes (Govern, Identify, Protect, Detect, Respond, Recover) districts and vendors use to describe their security programs.
NIST SP 800-218: Secure Software Development Framework (SSDF)
The four practice groups a vendor evidences for credential B: Prepare the Organization, Protect the Software, Produce Well-Secured Software, Respond to Vulnerabilities.
NIST SP 800-53 Rev. 5: Security and Privacy Controls
The catalog of security and privacy controls for information systems that credential B (Security) is assessed against.
PPRA and the Student Privacy Policy Office
The Protection of Pupil Rights Amendment and the Department of Education's guidance for schools and their vendors on surveys, data collection and student privacy, alongside FERPA.
Section 504 of the Rehabilitation Act
The civil-rights law that prohibits disability discrimination in programs receiving federal funds, which schools apply to the technology they put in front of students and staff.
Section 508 standards (Section508.gov)
The U.S. General Services Administration's site for the Section 508 accessibility standards, the ACR/VPAT formats and testing guidance.
SOC 2: System and Organization Controls (AICPA)
The AICPA's SOC suite. A SOC 2 Type II report over the trust services criteria is the attestation most vendors present in the self-disclosure's security section.
WCAG 2.1: Web Content Accessibility Guidelines
The W3C recommendation ICAA's accessibility credential and the hub standard cite: Level AA is the conformance target of an Accessibility Conformance Report (VPAT).
WCAG 2.2: Web Content Accessibility Guidelines
The current W3C recommendation, a superset of 2.1 with nine added success criteria; a product may state it as its conformance target in the self-disclosure.
The whole library comes with membership
District, vendor and hub members each see the documents written for them, and Advanced members get the full toolkit.