To address these challenges, Sky initiated an organized modernization effort. We tackle the outdated technology stack by migrating to the latest Drupal versions and implementing advanced automation testing such as Playwright for comprehensive testing on the code, for performance and security. Additionally, we introduce an Agile and DevSecOps culture that streamlines business processes therefore facilitating faster development cycles and improved collaboration. We optimize content deployment processes, ensuring the rapid dissemination of up-to-date information. With security being of the utmost importance, Sky implements robust measures to ensure compliance with ATO and FISMA requirements, along with significant infrastructure upgrades that leverage cloud-based solutions on AWS to enhance scalability and reliability and a migration to Google’s Vertex AI Search.
Sky has embarked on a comprehensive modernization journey targeting various facets critical to transforming the landscape. At the forefront was the cultivation of an Agile and DevSecOps culture, introducing automation that streamlined processes, significantly reducing the time and effort required for new feature delivery and content posting. To fortify compliance and security measures, robust cloud and platform management strategies were implemented. Governance standards were established to ensure adherence to regulations and security requirements, alongside the execution of a meticulously devised cloud strategy for Acquia cloud Drupal version upgrades.
An equally vital focus was the ability to maintain stringent compliance with accessibility standards and regulations. Sky diligently ensures compliance with a spectrum of stringent standards, including U.S. Web Design/DigitalGov, OMB Federal Web Standards, CMS and HHS policies, and W3C Web Accessibility Initiative (WAI) standards. Upholding Section 508 of the Rehabilitation Act was pivotal, demonstrating a commitment to inclusivity and accessibility for all users.
Sky engineered a robust CI/CD pipeline, ushering in a DevOps culture and embracing test-driven development methodologies. The integration of security and compliance tools into the CI/CD pipeline ensured proactive identification and resolution of vulnerabilities before deployment, enhancing the overall security posture of the platforms. The maintenance of Mini Orange for single sign-on (SSO) to Drupal sites and the utilization of Akamai for CDN configuration significantly improved user experience and site performance, underlining the commitment to enhancing accessibility and usability.