1. Identify users and groupsalong with applications.
2. Identify data sources that areused by those applications.
3. Define data protection policy to securedata sources.
4. Identify modes of user access including desktop, mobile, web etc.
5. Similarly identify applications accessed by external users.
6. Identify WAN, LAN and wireless networks used to access information.
7. Identify applications that can migrated as-is to cloud, applications to be refactored before migrating and applications that need to be retained on-prem.
8. Define the data storage policy including storage, backup and archiving.
9. Define ongoing application support and maintenance needs.
10. Define ongoing infrastructure support and maintenance needs.