Cloud Readiness Assessment

Cloud Readiness Assessment — Free Assessment

Assessment Form

Contact Name(Required)

First Last

Company Name(Required)

Contact Email(Required)

Cloud Strategy & Governance

Are mandatory resource tagging standards enforced via policy (SCP / Azure Policy / Org Policy)?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is the cloud environment organised into a logical account/subscription hierarchy?(Required)

Not at all

Basic / Partial

Mostly

Fully

Identity & Access Management

Is MFA enforced on all human accounts including root/global admin — with no exceptions?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is SSO integrated with all cloud platforms for centralised provisioning and deprovisioning?(Required)

Not at all

Basic / Partial

Mostly

Fully

Cloud Security Posture

Is a CSPM tool (Security Hub, Defender for Cloud, Security Command Center) running continuously?(Required)

Not at all

Basic / Partial

Mostly

Fully

Are application secrets stored in a secrets manager — not in code or environment variables?(Required)

Not at all

Basic / Partial

Mostly

Fully

Infrastructure & Architecture

Is infrastructure provisioned via IaC stored in version control — not applied manually?(Required)

Not at all

Basic / Partial

Mostly

Fully

Are production workloads deployed across multiple Availability Zones?(Required)

Not at all

Basic / Partial

Mostly

Fully

Networking & Connectivity

Are security groups and firewall rules reviewed quarterly for overly permissive rules?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is the network architecture based on a documented VPC/VNet design with clear subnet segmentation?(Required)

Not at all

Basic / Partial

Mostly

Fully

FinOps & Cloud Cost Management

Are budget thresholds defined per account/project with automated alerts at 80% and 100%?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is cloud spend broken down by team, product, environment, and cost centre via tagging?(Required)

Not at all

Basic / Partial

Mostly

Fully

Data Management & Storage

Is all storage encrypted at rest with key rotation policies defined and enforced?(Required)

Not at all

Basic / Partial

Mostly

Fully

Are all stateful workloads covered by automated backups with defined retention?(Required)

Not at all

Basic / Partial

Mostly

Fully

DevOps & CI/CD Pipeline Maturity

What percentage of application deployments are automated via a CI/CD pipeline?(Required)

Not at all

Basic / Partial

Mostly

Fully

How often are changes deployed to production? (Daily or more = high; monthly or less = low.)(Required)

Not at all

Basic / Partial

Mostly

Fully

Application Modernisation & Containerisation

Are application workloads containerised and orchestrated via a managed Kubernetes service?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is there a unified observability stack (logs, metrics, traces) covering all containerised workloads?(Required)

Not at all

Basic / Partial

Mostly

Fully

Cloud DR & Business Continuity

Are RTO and RPO targets defined per workload based on actual business impact analysis?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is the DR plan tested at least annually for Tier 1 workloads via full failover exercise?(Required)

Not at all

Basic / Partial

Mostly

Fully

Compliance & Regulatory Alignment

Is audit logging enabled for all accounts covering management and data plane events?(Required)

Not at all

Basic / Partial

Mostly

Fully

Is a tool running continuous compliance checks against applicable frameworks?(Required)

Not at all

Basic / Partial

Mostly

Fully

Hybrid & Multi-Cloud Management

Is connectivity to on-premises via a dedicated private link meeting latency and availability needs?(Required)

Not at all

Basic / Partial

Mostly

Fully

If multiple cloud providers are in use, is there a unified CSPM and cost management layer?(Required)

Not at all

Basic / Partial

Mostly

Fully