Build or Buy a CMS?

Creating a content management system either from scratch, or using pre-existing building blocks, may sound like the ultimate way to get the exact solution you require.

However, careful analyses often reveals dangerous pitfalls and serious short comings with many custom built content management systems.

In comparison to today's mature, tested and carefully designed products, most home-grown systems are quirky, poorly thought-out, and difficult to maintain.

However, even now many will seriously consider custom development. Like any IT custom development project, you could be taking on serious risk when it comes to delivering your project on time and budget, not to mention the downside of expensive support and the lack of upgrades in the future.

Two main reasons organisations choose to build

Perceived Flexibility

The decision to build rather than buy is frequently based on the assertion that no off-the-shelf product could possibly meet the specific business needs of the organisation.

For many developers, customisation efforts quickly mean abandoning consistent architectures, or processes, in favour of meeting seemingly complex requirements. Such an approach is short-sighted, paying no respect to the need for change, and a consistent model to ensure scalability, security and true-flexibility.

In reality, the information management and publishing requirements of a broad range of possible applications can be successfully contained in a well thought out system. If requirements are found that do not fit the system, instead of developing at a tangent to meet some specific unusual need (and thereby creating an island of development investment), we rather prefer to adjust the system, so the need can be met predictably again and again.

With that in mind:

.A good CMS should offer a dynamic Information Store that allows any conceivable structure of content to be created. Any number of meta-data fields can be defined and complex database record structures can be configured, enabling structured data to be managed with the same ease as free-form articles. All this without any custom programming, and in a consistent interface for managing information.
The template system must truly separate presentation and content, and eliminates the need for any programming in order to create flexible page functionality. This may be made possible through a system of Skins (the HTML) and Views (the rules that bind information to presentation), and some form of rendering or mark-up language.
The end result is a template building system with extraordinary flexibility, enabling complex web applications including online catalogue based shops, portals and directories to be deployed rapidly, with no custom-ASP programming.

Cost

Some web development firms frequently promise to deliver a powerful CMS for an up front cost that may sound attractive.

It is a well known fact that IT development projects frequently run well over time and budget expectations. Heading down the custom development path is almost guaranteed to result in project blow-outs, missed deadlines, and unexpected complications.

Close examination of many custom CMS implementations reveals serious oversights in the design of the publishing engine and the flexibility of the system.

Considering a robust product based solution represents many person- years of development time, it is little wonder a comparable custom system cannot be constructed in a matter of a few weeks or months from scratch.

For example, many custom-built systems lack the following important features:

100% audit trail and roll back: Quickly built custom systems frequently present live database records to the web site visitors, rather than versioning approved content, and moving into a flat file format that can be more quickly served, with less load on your live web server.
This is risky from a security point of view, and could leave your organisation exposed to unnecessary legal risks because of a lack of historical data on your web site publishing.
True separation of presentation and business logic. Instead, templates are custom built with programming code, and presentation, in a single page, creating a tightly inter-dependent code base that is complex to maintain. Design changes need to be made by programmers rather than designers, meaning the cost of change is time consuming and expensive. There is system for managing template functionality, therefore change require further development. Cost of ownership rapidly escalates as the inevitable need for changes continues.
Consistent user interface for managing different structures of information, or content. Instead, many systems bolt-on separate modules, that don't truly integrate into the core platform, function differently, and don't work with the same security or publishing model.
Integrated security, down to the field level. Unless there is a consistent model for managing user permissions across all aspects of the system, security is difficult to manage, let along understand.
True support for concurrent users, with proper record-locking, and item check-out. In a complex web based client-server environment, proper management of concurrent attempts to edit information is critical to ensuring authors do not stomp on each others work.

The face of custom development

Heading down the custom development path is not for the faint hearted.

Custom development is time consuming, and requires considerable diligence in scoping and planning requirements to avoid becoming an iteratively resource hungry monster.
Web development is not like building desktop applications. The nature of the Internet creates inherently complex requirements from a client-server perspective. There are many layers of technology ranging from client-side browsed based code (such as DHTML, JavaScript, Flash) to Server-Side languages (VBScript, Jscript, PHP etc), query languages and procedures (SQL), server components (C, Java, VB) and more. Development of a sophisticated solution demands a clear understanding of all these layers.
Managing web based application and database servers running a customised solution is more complex than managing a documented product.
Testing on different platforms, and loads, can be extremely time consuming.
Documentation may never be written to cover 100% custom systems, or elements of a customised system. Working with pre-existing building blocks that are not properly documented, or are really only code libraries, can be as time consuming as building from scratch.
Support for a non-standard custom system can be painful to extract, and expensive to continue.
Maintenance is more complex, more time consuming and more likely to be fraught with the problems of undocumented functions, that have been long forgotten by programmers that have moved onto other projects.

Working with a proven solution

Better CMS products are not merely tools, or a collection of loosely defined modules. They are proven, solid solutions, that can be installed and operated out of the box.

Deploying a product leverages the expertise of a team focussed on development of a solution that has enjoyed the attention and tuning of thousands of hours of development.
Through minimal levels of configuration, a good system can meet the content management needs of a broad range of applications.
Customisation of your business presentation layer is fast, thanks to a well defined flexible template system that is managed by the product.
Deployment times are typically weeks not months, and cost a fraction of the product license cost ? not a multiple of it ? like some so-called heavy weight solutions.
Training and support, plus the on-going commitment to provide you a working solution that can grow with your needs, is a core part of the products vision.
Documentation is consistently organised, and growing as the system expands.
Online training is growing and becoming more sophisticated.

In comparison: Buy vs Build

Buy

Build

? Lower cost of ownership

? Higher cost of ownership

? Rapid deployment

? Lengthy deployment

? Rapid integration

? Slow integration

? High level of functionality

? Low-moderate functionality

? Easy to use and maintain

? Harder to use, complex maintenance

? Follows best practices

? Custom design may be poor

? Features you could never afford to build

? Lacks sophisticated features

? Committed support

? Contingent support

? Upgrades and improvements

? Limited or no upgrades

? High quality

? Low Quality

Andy Farrell is Managing Director of Gravitymax, a content management system developer based in Sydney, Australia.

bathroom cleaning service Arlington Heights ...

In The News:

A fake Claude AI download scam uses Google ads and Bing redirects to trick Mac users into pasting a hidden malicious command in their Terminal.

Ahold Delhaize's cybersecurity incident knocked online ordering and digital coupons offline at Stop & Shop, Food Lion, Hannaford and Giant Food stores.

The Fox News AI Newsletter covers the latest artificial intelligence technology advancements, including the challenges and opportunities AI presents now and for the future.

Amazon's About You feature includes personality details from your shopping history, and some shoppers are finding hilariously awkward results.

Identity theft recovery starts with securing bank accounts, freezing credit and enabling two-factor authentication within the first 24 hours.

Apple's $299 HomeView smart display uses facial recognition to personalize screens for up to six household members and show live security camera feeds.

Domonique DuBose spotted red flags when a man on Hinge with 85,000 followers and a blue checkmark claimed to be a San Francisco 49ers player.

Your phone's location data can expose visits to doctors, pharmacies and places of worship. The FTC took action against data brokers selling this data.

Hackers targeted Danfoss refrigerator controls across French supermarkets, forcing chains like Carrefour and Monoprix to discard massive food stocks.

iOS 27 finally lets iPhone Shared Albums store photos and videos at full resolution in iCloud, but new items count toward the owner's storage.

A fake Facebook Marketplace text scam uses your real name as the seller to trick you into replying, and Malwarebytes warns even one response helps.

The Pentagon data breach exposed 2.76 million Social Security numbers and military records, raising long-term identity theft concerns for veterans.

Kodiak AI plans to haul IKEA freight on Texas highways with no one in the cab, raising urgent cybersecurity and safety questions for drivers.

Apple Intelligence in iOS 27 adds Extend and Reframe tools to Photos, letting iPhones generate new background areas beyond your original borders.

Microsoft's X account was hijacked to promote a crypto pump-and-dump scheme, exposing its more than 13 million followers to a scam campaign.

Scammers can combine your name, phone number and address with data breach details to attempt SIM swaps, phishing and even identity theft schemes.

ChatGPT Work, Meta Muse and Gemini Spark can monitor flight prices, sort your email inbox and track important deadlines, but savvy users start small.

iPhone, Samsung Galaxy and Google Pixel each hide a built-in tool that turns a video frame into a separate photo without any screenshot needed.

Operation KillSwitch dismantled KillSec's ransomware infrastructure, but investigators say a 16-year-old allegedly ran the entire cybercrime operation.

The Fox News Artificial Intelligence newsletter covers where voters will decide on AI data center ballot measures and Jeff Bezos' tech vision.

Apple's Impersonation Risk Detection in iOS 27 can flag suspicious activity inside apps, but the setting is off by default and must be enabled.

Federal Election Commission records can expose your name, address, employer and donation history once contributions exceed the $200 threshold.

Cybersecurity expert Morgan Wright says human skepticism remains the strongest defense against AI-driven phishing scams and voice cloning fraud schemes.

iPhone, Google Pixel and Samsung Galaxy each handle security updates differently, and one screen saying "up to date" may not tell the whole story.

Deborah Del Mastro heard what sounded like her daughter's terrified voice on the phone, launching a five-hour virtual kidnapping scam ordeal.

Build or Buy a CMS?

Web Development