1. Do you have a documented cloud strategy?

2. Cloud landing zones with governance from day one?

3. Identity: SSO + MFA everywhere?

4. Cost visibility (tagging, budgets, alerts)?

5. Backup and DR: tested regularly?

6. Security baseline documented (CIS/NIST-aligned)?

7. Infrastructure as code (Terraform / equivalent)?

8. Monitoring: alerts routed to a named owner?

9. Data residency / compliance mapped to workloads?

10. Migration approach agreed (rehost / replatform / refactor)?

11. DevOps: CI/CD used for infra changes?

12. Ownership: named cloud architect / platform team?