CivicActions, along with our partner Fearless, facilitated Drupal 10 upgrades across the Centers for Medicare and Medicaid Services (CMS) suite of websites, bringing improvements for editors, better security and accessibility, and community contributions to streamline upgrades for large- scale Drupal. The new Claro administration theme is cleaner, clearer, and more accessible.

The new rich text editor CKEditor 5 provides many UI enhancements and an improved user experience. The most significant change from previous versions of CKEditor is that editors must now use a predefined set of elements to configure the content, which leads to fewer instances of invalid markup patterns making their way into the published site. Since invalid or non-semantic markup is often the cause of accessibility issues, this is a major upgrade. In addition, the improved Layout Builder experience makes it easier for content editors to control more complex layouts, while still keeping consistent with CMS Design System standards.

The 8 sites included in the upgrade, which occurred ahead of schedule, were: CMS.gov; Medicare.gov; Openpaymentsdata.cms.gov; Data.medicaid.gov; Data.healthcare.gov; SDIS.medicaid.gov (internal CMS site); PFS.data.cms.gov (internal CMS site); QIC.cms.gov (internal CMS site); and Provider Data Catalog (data.cms.gov/provider-data).

The challenge

The CMS Information Security and Privacy Group (ISPG) is in charge of the policies and programs that ensure the security and privacy of data that is handled by CMS information systems. ISPG staff and contractors work to maintain policies, distribute guidance, communicate with customers, support security programs, and promote new initiatives.

While doing this important work over the years, they amassed a large collection of documents and resources that were spread across various locations and formats. This led to issues with version control and made it hard for people to find the information needed to do their security-related tasks.

Without a single, trusted location for cybersecurity information – and with many of the documents being in static PDFs that were full of jargon and hard to understand – finding essential information from ISPG could be onerous, negatively impacting CMS’ overall security posture.

Client goal

To improve their customer service and promote better security across CMS systems, ISPG engaged our team to develop a user-friendly website (informally known as “CyberGeek”) at security.cms.gov that is recognized as the authoritative home for CMS security and privacy information. With this project, ISPG aims to:

• Improve customer service through modern information delivery
• Support CMS security personnel with the resources needed for their critical work
• Make security topics and policies more approachable and human-centered
• Build user-friendly processes to help ISPG staff maintain their content
• Establish a platform where customers can find news and updates from ISPG

Our Approach

Together with our partner Affix Digital, we worked closely with ISPG stakeholders and customers to understand the cybersecurity ecosystem at CMS. We built relationships across ISPG and partnered with their leadership and program teams to streamline their content into a single, trusted platform that makes cybersecurity information approachable and human-centered.

First, listen and learn

We started by interviewing ISPG customers to make sure we built the site’s information architecture in a way that made sense to the people using it. Card sorting – a process that involves users in the design of the site navigation – helped solidify the menus and categories that would be the foundation of a user’s journey through the site.

Open source and accessible

We built a decoupled site using Drupal and React to give the client flexibility for technology changes in the future. Utilizing the U.S. Web Design System (USWDS), we created a component library that ensures the site meets government requirements for things like accessibility and mobile responsiveness. We used Storybook to build components in isolation before deployment to the site, catching errors in real-time so they could be fixed on the spot.

Search at the core

One of the main problems ISPG wanted to solve for their customers was the headache of searching for security documents, templates, and program information – which had been difficult to find in various internal repositories. We implemented a powerful search feature using Algolia, with filter options to help people find information specific to their needs. Improvements to search are ongoing as we learn more about how people use it.

The challenge

The Centers for Medicare & Medicaid Services (CMS) help millions of people every year find and enroll in health care programs. Planning a large-scale web and content management project to improve the customer experience of their multiple websites, the agency launched a design challenge for the vendors that were finalists for the contract.

We did a fast-paced collaboration with our partners Fearless and KPMG to submit deliverables in just 8 business days (including page designs, content recommendations, an API, and a clickable prototype with a smart chatbot). Our team won the challenge because the agency saw we could help them achieve their goal to better serve Medicare beneficiaries.

Client goal

The task was to redesign the Medicare Part D section of the medicare.gov website, which helps people understand insurance options for their medication needs. For all their digital platforms, CMS needs to:

• Meet public expectation for easily navigable online services
• Securely manage personal info and transactions for millions of beneficiaries
• Provide friendly online experience for people facing stressful health situations
• Serve diverse groups of users with competing wants and priorities
• Support agency staff in publishing clear and accurate public-facing content

Our approach

Within the time constraint for this compressed agile design sprint, we conducted lean versions of the activities we would normally do to make sure the site was effective for Medicare recipients. Daily collaboration among all team members, from Design to DevOps to Developers, allowed us to quickly test and iterate on every step.

We used Drupal as our preferred open source platform and the CMS design system, which builds on the U.S. Web Design System. Together, these tools provide a solid foundation for accessible government websites — a key goal for agencies like CMS that serve diverse and aging populations.

Human Centered Design played a critical role in our process of building a site that would be intuitive and useful to older Americans seeking information about their drug coverage options.

Understand the needs

We talked to real Medicare beneficiaries to understand the challenges they faced in navigating the site. Based on what they said, we created a key persona to drive our scenario-based approach — ensuring that our work solved real problems and created value for users. We also evaluated the existing site to see how well it met standards for usability.

Offer customized guidance

To help visitors feel comfortable navigating complex information about benefits coverage, we created several experience options for them to choose from. They could explore the site on their own, use the guidance wizard, or ask questions of the interactive chat bot. We also improved the Search function to deliver more relevant results.

Clear the path to success

We focused on removing obstacles to help more people successfully find the information they needed. This was done through intuitive navigation and labels, scannable and actionable content, and a refreshed, accessible design. We tested our solutions with users and iterated based on their feedback.

The challenge

The Federal Communications Commission (FCC) relies on its website to provide regulatory guidance to millions of visitors across various industries. But the old site was hard for users to navigate and frustrating for employees to manage.

In this rapid engagement, CivicActions worked hand-in-hand with the FCC to build a modern, mobile-friendly Drupal website that was more accessible and easier to update.

Client goal

The FCC’s cumbersome, outdated site was not doing its users or internal content managers justice. On top of antiquated technology, the Commission's waterfall processes made it harder for content managers to keep the site updated and relevant for its diverse audiences. The policies and the product needed a refresh.

• Transition from waterfall to Agile methodology
• Migrate legacy content from various systems to a modern Drupal Content Management System (CMS)
• Ease public access to regulatory information through a mobile-friendly web experience
• Save FCC administrators time and money with more efficient content management
• Provide reliability and stability by implementing Quality Assurance (QA) testing

Our approach

We had to work fast and our deployment options were limited by security considerations, so we rolled up our sleeves and turned up the collaboration. By implementing a modern Drupal CMS and Agile practices, we helped the FCC modernize its approach to content while avoiding disruptions for users and maintaining a secure environment.

Seamless content migration and management

FCC has a very active user community, so we had to move quickly and avoid disruptions. We performed a massive content migration from Drupal 6 to Drupal 7 and consolidated content from various legacy systems into one CMS. To make the content creation and editing more pleasant and efficient, we added a robust text editor and new access controls. This allowed FCC’s many content creators to manage their own content without compromising the integrity of the site’s design.

The modernized FCC.gov is clean, simple, and easy to use for visitors and agency staff.

Accessible content

The FCC is responsible for the accessibility of 21st Century communications, so there was no room for accessibility errors on its website. We scanned the site for compliance issues and quickly resolved them. The current website serves as a model for Web Content Accessibility Guidelines and complies with Section 508 requirements.

The mobile-optimized user experience lets people do business with FCC from anywhere.

Automatic testing for quality code

Knowing that government websites can be subject to degradation over time as new code is added, we also wanted to help FCC achieve sustainability for their site. We used Behat—a behavior-driven development testing framework that can double as user acceptance test criteria—to make sure all new code worked properly. We configured Behat tests to run automatically whenever new code was merged, ensuring a quality codebase for years to come.

Improved practices for better staff experience

The content editors at FCC were drowning in waterfall processes that didn’t let them respond quickly to evolving needs at the agency. To ease content management and improve the employee experience, we worked with key stakeholders to implement Agile practices. Together we curated priorities, made sure the end result met real user needs, and helped the FCC transition to ways of working better suited to the digital age.