The Defense Security Cooperation Agency (DSCA) uses the GlobalNET platform to facilitate secure training and collaboration among partner organizations. Thousands of military, diplomatic, law enforcement, and civilian government personnel around the world use GlobalNET to connect with and learn from each other. They work on topics from security cooperation to humanitarian operations; counter-terrorism to public diplomacy; leadership development and more.

Faced with aging technologies and a complicated collection of digital content and microservices, DSCA initially engaged CivicActions to develop a quality assurance program and to ensure system stability during code updates. At the end of that contract, we were tasked with redesigning and rebuilding GlobalNET to create a more personalized, secure, and responsive experience for users.

Years later, we continue to provide agile development, modern IT implementation, and DevSecOps services to keep everything running smoothly and to continuously improve GlobalNET systems.

Client goal

The goal of GlobalNET is to ensure that international legal and security practitioners can easily engage each other for collaborative work. Ease of use and top-notch security are essential to the success of the platform. DSCA uses GlobalNET to:

• Provide professional development and training for practitioners
• Facilitate connection among practitioners and their sponsoring organizations around the world
• Provide a responsive, multi-lingual, intuitive user experience that respects the cultures of individual participants
• Comply with strict security requirements, from FISMA to FedRAMP

Our approach

When we first engaged with DSCA, the agency wanted to bring a better experience to the tens of thousands of legal and security practitioners in the GlobalNET community. DSCA challenged the DoD contracting status quo by choosing a fixed-price agile contract, moving away from the waterfall approaches that doom many government IT projects to failure. We partnered closely with agency stakeholders in an agile process throughout the complex process of redesigning GlobalNET and the massive migration to a FedRAMP-certified platform. Daily collaboration and the ability to adapt to evolving needs helped us complete the rebuild on time and on budget.

Understand the needs

We conducted onsite user research in three cities to initially assess the needs of the GlobalNET community, then followed up with remote consultations. As new features were built, usability testing with site users helped us collect feedback, identify problems, and prioritize future needs for ongoing product iteration. The initial discovery phase uncovered more than 600 user stories, which were then prioritized and tracked to completion.

Automate and test

From confident code deployment to faster Authority to Operate (ATO), we have focused on providing GlobalNET with stability and security from the start. A platform for international security practitioners deserves no less. Our DevOps activities include continuous monitoring, network optimization, and a three-tiered on-call support system to make sure the platform is always up and running. We also apply regular security updates and automated testing.

Quality and security control

We implemented a mechanism for updating, testing, and deploying hardened server instances and application code in a way that is generally invisible to end-users. Server instances are subjected to SCAP and ZAP scans for system compliance, while automated “smoke tests” ensure the code is ready to deploy. All new code is subjected to more than 600 automated tests (and scripted tests by humans) prior to being approved for deployment. This rigorous quality control minimizes surprises and downtime.
 

The challenge

The Federal Communications Commission (FCC) relies on its website to provide regulatory guidance to millions of visitors across various industries. But the old site was hard for users to navigate and frustrating for employees to manage.

In this rapid engagement, CivicActions worked hand-in-hand with the FCC to build a modern, mobile-friendly Drupal website that was more accessible and easier to update.

Client goal

The FCC’s cumbersome, outdated site was not doing its users or internal content managers justice. On top of antiquated technology, the Commission's waterfall processes made it harder for content managers to keep the site updated and relevant for its diverse audiences. The policies and the product needed a refresh.

• Transition from waterfall to Agile methodology
• Migrate legacy content from various systems to a modern Drupal Content Management System (CMS)
• Ease public access to regulatory information through a mobile-friendly web experience
• Save FCC administrators time and money with more efficient content management
• Provide reliability and stability by implementing Quality Assurance (QA) testing

Our approach

We had to work fast and our deployment options were limited by security considerations, so we rolled up our sleeves and turned up the collaboration. By implementing a modern Drupal CMS and Agile practices, we helped the FCC modernize its approach to content while avoiding disruptions for users and maintaining a secure environment.

Seamless content migration and management

FCC has a very active user community, so we had to move quickly and avoid disruptions. We performed a massive content migration from Drupal 6 to Drupal 7 and consolidated content from various legacy systems into one CMS. To make the content creation and editing more pleasant and efficient, we added a robust text editor and new access controls. This allowed FCC’s many content creators to manage their own content without compromising the integrity of the site’s design.

The modernized FCC.gov is clean, simple, and easy to use for visitors and agency staff.

Accessible content

The FCC is responsible for the accessibility of 21st Century communications, so there was no room for accessibility errors on its website. We scanned the site for compliance issues and quickly resolved them. The current website serves as a model for Web Content Accessibility Guidelines and complies with Section 508 requirements.

The mobile-optimized user experience lets people do business with FCC from anywhere.

Automatic testing for quality code

Knowing that government websites can be subject to degradation over time as new code is added, we also wanted to help FCC achieve sustainability for their site. We used Behat—a behavior-driven development testing framework that can double as user acceptance test criteria—to make sure all new code worked properly. We configured Behat tests to run automatically whenever new code was merged, ensuring a quality codebase for years to come.

Improved practices for better staff experience

The content editors at FCC were drowning in waterfall processes that didn’t let them respond quickly to evolving needs at the agency. To ease content management and improve the employee experience, we worked with key stakeholders to implement Agile practices. Together we curated priorities, made sure the end result met real user needs, and helped the FCC transition to ways of working better suited to the digital age.