SKM Software

Our Approach

Rigorous methodology, modern technology, and a commitment to standards that matter.

Development Methodology

Our process follows the Digital Scotland Service Standard, ensuring every project moves through structured phases with clear outcomes.

1

Discovery

Understanding the problem, researching user needs, and defining the scope. We work closely with stakeholders to ensure we're solving the right problems.

2

Alpha

Building and testing prototypes to validate our approach. We explore multiple solutions and iterate based on user feedback before committing to a direction.

3

Beta

Developing the full solution in iterative sprints, with regular demos and opportunities for feedback. Comprehensive testing throughout to ensure quality and reliability.

4

Live

Deploying to production with monitoring, support, and continuous improvement. We don't walk away after launch, we ensure the service continues to meet user needs.

Security by Design

Security is not an afterthought in our development process. We follow a Secure Software Development Lifecycle (SSDL) that embeds security practices into every phase of delivery.

  • Threat modelling during design phases
  • OWASP Top 10 awareness and mitigation
  • Automated dependency vulnerability scanning
  • Regular security testing and peer code review
  • Aligned with Cyber Essentials and NCSC guidelines

Accessibility First

We treat accessibility as a fundamental requirement, not an optional extra. Every solution we build meets WCAG 2.2 AA as a minimum, ensuring digital services are available to all users.

  • Semantic HTML and proper heading hierarchy
  • Full keyboard navigation support
  • Screen reader and assistive technology testing
  • Colour contrast verification (4.5:1 minimum)
  • Compliance with Public Sector Bodies Accessibility Regulations 2018

Quality Assurance

We maintain high quality through a combination of automated testing, continuous integration, and thorough code review processes.

  • Unit, integration, and end-to-end testing
  • Continuous Integration and Continuous Deployment (CI/CD)
  • Peer code review on all changes
  • Performance testing and optimisation

Open Standards

We are committed to open standards and interoperability. Our solutions use well-supported, modern technologies and avoid proprietary lock-in wherever possible.

  • RESTful APIs and open data formats
  • Modern, well-supported technology stack
  • Cloud-native architecture for scalability
  • Long-term maintainability and vendor independence

Let's discuss your project

We'd love to talk about how our approach can deliver the right solution for your organisation.