CISA Cloud Security Technical Reference Architecture v2.0
Section 4: Cloud migration – CISA Cloud Security Technical Reference Architecture v2.0

CISA Cloud Security Technical Reference Architecture v2.0 4.2: Set a cloud migration strategy that weighs challenges, benefits and the right migration pattern per application

What does 4.2 require?

The agency designs an agency-specific plan to move data and services from on-premises to the cloud: it weighs benefits, risks and challenges, plans for overlapping funding, onboarding time, infrastructure support, dedicated staffing, authorisation updates and process change, addresses data integrity in transit and at rest, downtime minimisation through iterative rollout and network latency and throughput, and chooses per application among rehosting, refactoring or rearchitecting, revising or replatforming, rebuilding and replacing, often rehosting first and refactoring later where cloud-native services will cut complexity and cost.

Maintained by Gerard Blokdyk

Other controls in Section 4: Cloud migration – CISA Cloud Security Technical Reference Architecture v2.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.