Workload inventory
Owner, users, business criticality, lifecycle status, runtime, data stores, licenses, and support constraints.
Program guidance
A decision framework for classifying workloads, preparing the target environment, sequencing waves, controlling cutover risk, and transferring the new platform into normal operations.
A cloud migration strategy is the decision framework that determines which applications move, which migration path each workload follows, the sequence of migration waves, and the controls for cost, security, cutover, rollback, and post-migration operations. It starts with readiness and dependency evidence before a team chooses among the 7Rs.
Program inputs
The program baseline should be usable by architecture, security, finance, application owners, and operations. If any of these artifacts are missing, record the gap and assign an owner before committing the affected workload to a wave.
Owner, users, business criticality, lifecycle status, runtime, data stores, licenses, and support constraints.
Inbound and outbound calls, identity, DNS, certificates, batch jobs, data flows, and operational integrations.
Observed demand, latency, throughput, storage growth, availability requirements, and seasonal patterns.
Data classification, residency, identity boundaries, audit needs, recovery objectives, and approval owners.
On-call coverage, incident ownership, monitoring, patching, backup, cost allocation, and change management.
Contract exits, blackout periods, product launches, staff availability, and acceptable interruption windows.
Disposition
Do not treat the 7Rs as a portfolio-wide vote. First remove workloads that should be retired, retained, or replaced. Then choose the least disruptive viable move for each remaining workload and document why a more invasive path is justified.
| Path | Decision test | Evidence to retain |
|---|---|---|
| Retire | The workload no longer serves a justified business need. | Owner approval, archive requirement, dependency clearance. |
| Retain | A current constraint makes migration worse than the status quo. | Constraint, review date, support plan, future trigger. |
| Repurchase | A product can replace the capability without unacceptable process or data loss. | Fit-gap analysis, data-export plan, integration changes. |
| Relocate | The existing environment can move with minimal workload change. | Platform compatibility, network design, rollback route. |
| Rehost | The workload must move before deeper changes can be justified. | Sizing basis, technical debt register, optimization owner. |
| Replatform | A bounded platform change removes material operational work. | Compatibility tests, data plan, changed operating procedures. |
| Refactor | Architecture change is necessary for a documented product or operating requirement. | Target architecture, incremental release plan, acceptance tests. |
Foundation
A landing zone is ready when the team has exercised its controls and operating procedures, not when the account hierarchy exists. Test identity, network paths, logging, policy enforcement, backup and recovery, deployment automation, cost allocation, and incident access with representative workloads.
Name who can approve architecture exceptions, accept risk, stop a cutover, invoke rollback, and close a wave.
Verify identity, network segmentation, encryption, logs, policies, backup, recovery, and resource ownership in the target environment.
Confirm that the people who support production can see telemetry, reach runbooks, escalate incidents, and make authorized changes.
Provider frameworks are useful cross-checks: AWS Cloud Adoption Framework, Microsoft Cloud Adoption Framework for Azure, and Google Cloud Adoption Framework. Use them to challenge the program, not as substitutes for workload evidence.
Waves and gates
Cutover control
A rollback plan is credible only when it names the decision owner, observable triggers, latest safe decision point, data-reconciliation method, communications path, and the legacy capacity that must remain available. Rehearse the path with the same people and access model used during production cutover.
| Control | Question before go-live | Evidence after go-live |
|---|---|---|
| Service | Which user journeys and integrations must pass? | Synthetic and business-transaction results. |
| Data | How will completeness and consistency be reconciled? | Signed reconciliation results and exception log. |
| Operations | Who receives alerts and has authority to act? | Observed alerts, incident path, and support acceptance. |
| Rollback | What triggers reversal, and when does reversal become unsafe? | Decision record, timestamps, and state-recovery evidence. |
Operational handoff
Hypercare should have workload-specific exit conditions. Before the delivery team leaves, the operating team should own dashboards, alert routes, runbooks, source repositories, deployment pipelines, backup and recovery procedures, access administration, cost views, known defects, and vendor escalation paths.
Keep legacy decommissioning separate from technical cutover. Shut down old capacity only after data retention, rollback, licensing, finance, and application owners approve the evidence required for that workload.
Every active guide assigned to the cloud migration program is listed here.
Procurement handoff
Turn the program baseline into a normalized RFP, scorecard, and statement of work.
A cloud migration strategy is the program-level decision framework for workload disposition, target architecture, sequencing, cutover, rollback, and the operating model after migration. It should be based on an inventory and dependency evidence, not a platform preference alone.
The 7Rs are retire, retain, repurchase, relocate, rehost, replatform, and refactor. Apply them workload by workload; a portfolio can use several paths, and some workloads may remain where they are.
Sequence waves around dependency groups, business calendars, operational readiness, and reversible cutover windows. A pilot wave should test the landing zone, automation, acceptance evidence, rollback, and support process before broader rollout.
A wave is ready only when named owners accept the test evidence, data reconciliation, security controls, monitoring, support coverage, communications, and rollback decision points defined for that workload.