Author
Deepti Karn
Head of Business
Deepti leads business at NoDrama, which she founded in February 2026 after four and a half years at Pangolin Marketing. NoDrama came out of a question she kept running into: who is actually responsible for keeping a WordPress site fast, secure, accessible, and working? She writes about service design, ownership models, and what businesses should expect from whoever maintains their website.
Written by Deepti
WCAG 2.1 AA standards: what the standard actually requires
WCAG 2.1 Level AA is the standard HHS's Section 504 rule names for recipients' web content, from May 11, 2027 for recipients…
Sample tax preparer data security plan: the website entry to add to Publication 5708
IRS Publication 5708's sample written information security plan lists workstations, the network and client portals, and has no section for the firm's…
Data security plan for tax preparers: the client upload path belongs in it
Every paid preparer renewing a PTIN signs Form W-12, which says preparers are required by law to keep a written information security…
When will WCAG conformance become required? What Section 504 asks now, and in 2027
HHS's Section 504 rule makes WCAG 2.1 Level AA the standard for recipients' web content, from May 11, 2027 at 15 or…
SRA Digital Badge: Is Yours Still Showing Today’s Date?
An authorised body must display its SRA number and the SRA digital badge on its website, and the badge became mandatory on…
5 Control Points of Cyber Essentials: What Each of the Five Asks
A UK supplier holds Cyber Essentials because a central government contract asked for it and renews it every year. The scheme's five…
WCAG guidelines: standards and conformance levels
If your nonprofit receives HHS financial assistance, the Section 504 rule gives your website a date: May 11, 2027 with 15 or…
Website Security Audit Checklist
A security audit is not one test, it is eight things checked in order: software versions, access, encryption, headers, server configuration, malware,…
Core Web Vitals for WordPress: LCP, INP and CLS
Core Web Vitals are three separate measurements, loading, interactivity and visual stability, and a WordPress site can fail any one of them…
Cyber Essentials Security Update Management: Does the 14-Day Rule Cover Your WordPress Site
Cyber Essentials requires every in-scope device to run software that is kept up to date, and it names commercial off-the-shelf applications and…
How to Choose a WordPress Maintenance Company
Every established WordPress maintenance company says the same five things. This guide turns the pitch into five checkable criteria, explains the mechanism…
Cyber Essentials Malware Protection for Your Website
Cyber Essentials asks every applicant to name their in-scope devices and show a malware protection mechanism on each one. The requirements document…
Security Questionnaire Answer Sheet for WordPress Sites
A vendor security questionnaire, whatever it calls itself, sitting somewhere between a cybersecurity assessment questionnaire and a plain form your biggest customer…
How Often Should a WordPress Site Be Updated?
A WordPress site runs core, a theme, and a handful of plugins, each on its own release schedule. WordPress only auto-applies a…
Why Is My WordPress Site So Slow?
Your WordPress site takes forever to load, and you have already tried the obvious fixes. A slow site is almost never one…