Area (Module A) What auditor asks (Requirement)
1. Strategy Capture business needs, pain points, expected
outcomes; provide partner recommendations.
2. Plan — Cloud Adoption Consistent approach for planning/tracking the cloud
Plan adoption project.
2. Plan — Skilling Skilling plan for customer technical roles (IT, Sec, Ops,
Gov).
3. Environment Readiness & Repeatable landing zone deployment (identity,
Landing Zone network, resource org).
4. Governance Deploy governance tools (e.g., Azure Policy) to govern
environment.
5. Manage Set up operations management to run the
environment.
Evidence artifact from THIS project Tool / Source
• Cloud Adoption Strategy deck & signed summary PowerPoint / Word; Strategy Evaluator export
(business outcomes, KPIs, TCO).
• Completed Strategy Evaluator export attached to
the deck.
• Azure DevOps project with epics/features (backlog, Azure DevOps; Plan document
boards).
• Cloud Adoption Plan (milestones, dependencies,
RACI, risk register).
• Role matrix with required skills & mapped Learn Excel/Word; Microsoft Learn
paths/certs.
• Training calendar & attendance; enablement
recordings.
• Bicep/Terraform repo + deployment logs. Git repo; Pipeline logs; Azure Portal exports
• Entra ID integration & RBAC model.
• Hub-Spoke network diagram; ExpressRoute/VPN if
applicable.
• Naming & tagging standards file.
• Policy initiative assignment (allowed locations, Azure Policy; Cost Management; Defender for Cloud
required tags, blueprint equivalent).
• Cost budgets & alerts; Defender for Cloud
hardening recommendations.
• Azure Monitor (Log Analytics workspace, action Azure Monitor; Automation; Backup; Site Recovery
groups, workbooks).
• Azure Automation runbooks (e.g., VM start/stop,
tag remediation).
• Backup/ASR policies and successful test
restore/runbook evidence.
Official Microsoft docs Official Microsoft docs2 Official Microsoft Official Microsoft docs4
docs3
[Link]
https://
[Link]/en-us/
assessments/?mode=pre-
assessment&id=8fefc6d5-
97ac-42b3-8e97-
d82701e55bab
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
Area
What
(Module
auditor
A)asks (Requirement)
1. StrategyCapture bus
2. Plan — Plan migrat
2. Plan — SSkilling plan for hybrid ops (on‑prem + Azure) including security/governance.
3. Environ Deploy land
4. GovernaEstablish g
5. ManageOperationa
• Strategy & ROI model for moving on ‑prem ETL/BI into Azure/Fabric. Evidence artifact from THIS project
•• Signed
Wave planoutcome/KPI sheet
(landing zone →(e.g., refresh SLA,
connectivity cost targets).
→ identity → governance → ops).
•• ADO backlog with dependencies (network, identity,
Skills gap analysis; learning path matrix; shadowing plandata).
for ops.
•• Governance workshops recorded & shared with
RBAC model, PIM where applicable; tagging standards. customer.
•• Infra-as-code PRs and release
Azure Policy assignments logs.
(deny public IPs, enforce TLS, required tags).
•• Budgets
Automation runbooks for lifecycle &alerts;
per subscription; anomaly Defender
hygiene; changeformanagement
Cloud enabled.
tie ‑ins.
• Backup/ASR configured and tested; test evidence stored.
Tool / Source Owner
Official Microsoft docs
PowerPointEngagemen[Link]
Azure Dev Project Ma[Link]
Excel/WordAdoption/Sk [Link]
Git repo; ACloud Archi[Link]
Azure Poli Governanc[Link]
Azure MoniOperations[Link]
fc6d5-97ac-42b3-8e97-d82701e55bab[Link]
-roles-skills-processes
e-best-practices/define-an-azure-network-topology[Link]
[Link]/azure/cost-management-billing/costs/cost-mgt-budget-create[Link]
[Link]/azure/automation/automation-intro[Link]
[Link]
ework/ready/landing-zone/implementation-options#implementation-options[Link]
m/azure/defender-for-cloud/defender-for-cloud-introduction
iew[Link]
zure/azure-resource-manager/bicep/overview[Link]
k/ready/azure-best-practices/resource-tagging