Center for Internet Security

Making Cybersecurity Accessible for Every Organization

Designing a secure, centralized portal that connects public resources and member-exclusive content through tailored tools, actionable insights, and collaborative spaces.

UX/UI DesignDesign SystemsComponent DesignUsability Testing
CIS member portal cover

I've been embedded with the team behind CIS's member portal. I designed and implemented a working design system and reusable component library, giving the team a foundation to design and ship from. It's since become the backbone for shipping efficiently and delivering confident work whenever the industry shifts and CIS needs to respond quickly.

Project Details

  • Led UX design initiatives, end-to-end experience
  • Designed, implemented, and managed the component library
  • Future state concepting of the portal experience
  • Collaborated cross-functionally with developers, business analysts, tech, and the client throughout
  • Created test plans and scripts for moderated and unmoderated usability testing
  • Design QA
  • Figma
  • FigJam
  • Sitecore
  • Claude / Claude Design
  • UserTesting.com

Foundation

Component Design & Library

When I joined, a majority of the foundational design elements were already created, but not in a way conducive to supporting the many scenarios, flows, and screens the portal needed. I spent a sprint taking pieces of that disparate system and turning it into a documented, working design system and component library, covering all major screen sizes and states. I worked closely with developers, BAs, tech, and the client throughout to keep it grounded in real constraints. Authors now assemble pages in Sitecore using existing components, and enhancements ship on our normal sprint cadence.

Design system and reusable component library.

Component library documentation of component anatomy and behaviors.

Concepting Future State Enhancements, Faster

Having this foundation made it possible to quickly concept future state enhancements of the portal experience. A few opportunities were uncovered through heuristic evaluations of the current state experience. This concept focused on introducing a dedicated Support Center to centralize support and FAQ content.

Future state exploration of Support Center.

A Closer Look

Designing a Path From Free to Paid Membership

The Problem

In 2025, federal funding cuts meant CIS could no longer offer MS-ISAC, a critical resource for threat intelligence, incident response, and security services, for free to state, local, tribal, and territorial governments. CIS needed to communicate that change clearly to members and make it easy for organizations to subscribe under the new paid model.

Wireframes & Flow Design

Requirements for each scenario came out of workshops with the business, which I used to wireframe the full flow from login through post-subscription, covering every touchpoint a member would hit based on their organization's needs. That included accounting for differences in annual operating budgets and invoicing requirements, and working closely with the content team to get the tone right.

MS-ISAC transition to a paid model. User flow map from awareness to subscription.

Testing Before Launch

Ahead of launch, I drafted a test plan and script. Then moderated sessions with real customers from government IT administrators to security managers to see whether they understood the funding change, found the membership options clear, and could complete the subscription without confusion. Their feedback reshaped the copy, repositioned elements, and added a confirmation step, enabling our team to adjust and launch with confidence.

Usability testing session recording.

Results

Outcomes

Phase 1 of the MS-ISAC transition launched in June 2025. Within the first month of launch, the flow had enabled 647 memberships, totaling $1.9 million bookings. Even organizations facing tight budgets and procurement hurdles were able to switch without losing access to what they needed.

I identified the gap and built the essential components CIS needed within the next sprint, giving the team a foundation to move fast on future enhancements instead of rebuilding patterns from scratch.

The results from the MS-ISAC testing gave me the evidence to advocate for and implement usability testing into our regular sprint cadence instead of treating it as a one-off step before major launches, so problems surface before they ship instead of after.

Next Project

Academy Sports & Outdoors: Helping Sports & Outdoors Enthusiasts Find Their Fun

View Project