Scope and capabilities
What a well-scoped engagement can include.
Final scope depends on the environment, priorities, product entitlements and agreed responsibilities.
01Workload discovery and assessment
Capture architecture, utilisation, operating systems, databases, integrations, service accounts, data flows and recovery expectations. Automated discovery may assist, but workload owners validate dependencies and business context.
02Landing-zone and governance design
Plan management groups, subscriptions, resource organisation, naming, tagging, Azure Policy, role-based access control and logging appropriate to the size and operating model of the environment.
03Compute, storage and platform selection
Compare Azure virtual machines, managed application platforms, containers, databases and storage options against compatibility, control, performance, resilience and operational-effort requirements.
04Networking and identity integration
Design virtual networks, address space, routing, DNS, security controls and hybrid connectivity alongside Microsoft Entra ID identities, managed identities and least-privilege Azure roles.
05Backup, monitoring and operational readiness
Define protection scope, retention, restore validation, Azure Monitor data collection, alert ownership, runbooks and handover tasks. Availability architecture and disaster recovery are assessed separately from backup.
06Cost visibility
Use resource structure, tags, budgets and Microsoft Cost Management views to improve allocation and review. Estimates retain assumptions for region, service tier, data transfer, growth and vendor pricing.